Extracting prog: 48m40.662155636s
Minimizing prog: 1h2m35.221770347s
Simplifying prog options: 6m24.072727271s
Extracting C: 3m6.521427273s
Simplifying C: 21m20.819586525s


extracting reproducer from 65 programs
testing a last program of every proc
single: executing 15 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-socket$nl_generic-fsopen-fsconfig$FSCONFIG_SET_STRING-prlimit64-sched_setscheduler-bpf$BPF_BTF_LOAD-sched_setaffinity-prctl$PR_SCHED_CORE-syz_open_dev$MSR-read$msr-socket$alg-bind$alg-accept4-sendfile-mkdirat-mkdirat-mkdir-mount$overlay-chdir-creat-setxattr$security_ima-open
detailed listing:
executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES16, @ANYBLOB="ea5232515cf6c5b5bd31bca17cc1c6fb0ec3d49eff1ff479af016eb5e8eaa5aaecd8e52a670afeadd9dcf0c8b5ff9555423b8bfa971cf8ec9e03316a530deb3e027906f25a9a19f5b24a7fa7a1a8cf96254a53603c7f345600d0100bc5f199444f13e33d6094d78e98", @ANYRES32], 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
creat(&(0x7f00000004c0)='./bus\x00', 0x40)
setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000380)=@ng={0x4, 0x11}, 0x2, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x2000000)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-getsockopt$IP6T_SO_GET_INFO-prctl$PR_SCHED_CORE-prlimit64-sched_setaffinity-syz_open_dev$MSR-sched_setscheduler-read$msr-io_uring_register$IORING_REGISTER_PBUF_RING-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_GSTATUS-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-syz_open_dev$sndmidi-socket$alg-bind$alg-accept4-sendmsg$OSF_MSG_REMOVE-socket$packet-setsockopt$packet_fanout-setsockopt$packet_int-setsockopt$packet_rx_ring-socket$inet_udp-bind$inet-connect$inet-sendmmsg-landlock_create_ruleset-socket$netlink
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000280)={'mangle\x00', 0x0, [0x0, 0x20, 0x7, 0x4, 0x4000004]}, &(0x7f0000000140)=0x54)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x46700)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0x40345410, &(0x7f0000000080)={{0x3, 0x0, 0x40000000}, 0x0, 0x0, 0x4000000})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xde65ffd024cbf7d2, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0x5}, {0x6c, 0xfe}, {0x6, 0x0, 0x0, 0x7fffffff}]})
syz_open_dev$sndmidi(&(0x7f0000000300), 0x3, 0x600200)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x5}, 0x20045050)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x8003, 0x1000}, 0x4)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x550, 0x4000004)
landlock_create_ruleset(&(0x7f0000000000)={0x8498, 0x2, 0x1}, 0x18, 0x0)
socket$netlink(0x10, 0x3, 0xf)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-socket$nl_route-socket$nl_route-socket$inet6_tcp-setsockopt$IP6T_SO_SET_REPLACE-bpf$MAP_CREATE_CONST_STR-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-syz_open_dev$MSR-read$msr-openat$cgroup_subtree-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-bpf$PROG_LOAD-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD-ioctl$SIOCSIFHWADDR-bpf$BPF_RAW_TRACEPOINT_OPEN-sendmsg-socketpair-sendmsg-bpf$BPF_RAW_TRACEPOINT_OPEN-syz_emit_ethernet-socketpair$nbd-recvmmsg-recvmmsg
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000700000000000000", @ANYRES32, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffda6, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0x10, 0x70bd2d, 0xfffffffc, {{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x4, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffd, 0x0, 0xd, 0x0, 0x0, 0x1, 0x7, 0x6}}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'veth0_to_hsr\x00', @random="000000000e08"})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='thermal_power_allocator\x00', r3, 0x0, 0xffffffffffffffff}, 0x18)
syz_emit_ethernet(0x10e, &(0x7f00000004c0)=ANY=[], 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40))
recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0)
recvmmsg(r7, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}, {{&(0x7f00000004c0)=@rc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f00000005c0)=""/88, 0x58}, {&(0x7f0000000700)=""/84, 0x54}, {&(0x7f0000000780)=""/122, 0x7a}, {&(0x7f0000000800)=""/113, 0x71}], 0x5, &(0x7f0000001f80)=""/4096, 0x1000}, 0xe}, {{&(0x7f0000000900)=@can, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000980)=""/12, 0xc}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/172, 0xac}, {&(0x7f00000009c0)=""/80, 0x50}, {&(0x7f0000003f80)=""/4096, 0x1000}], 0x5, &(0x7f0000001bc0)=""/160, 0xa0}, 0x102}], 0x3, 0x2002, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-bpf$MAP_CREATE-close-socket$kcm-socket$inet_mptcp-socket$kcm-sendmsg$kcm-prlimit64-ioctl$ifreq_SIOCGIFINDEX_team-sendmsg$nl_route_sched-socket$key-ptrace$PTRACE_SECCOMP_GET_FILTER-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$kcm-sendmsg$kcm
detailed listing:
executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000020000000900000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', @ANYRES32=0x0], 0x48)
close(r0)
socket$kcm(0x10, 0xd, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000500)=@l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, 0x4c, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000008b}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400))
sendmsg$nl_route_sched(r0, 0x0, 0x4c0c1)
socket$key(0xf, 0x3, 0x2)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x5, &(0x7f0000000580)=""/248)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x900, &(0x7f0000000140)=[{&(0x7f0000000300)="d80000001e0081054e81f782db4cb904021d080006007c09e8fe08a10a000e800a00142603600e1208000fc00e000406a80016c008000e4004000a7c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-add_key$user-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-socket-inotify_init-prctl$PR_SET_SECCOMP-socket$inet6_tcp-setsockopt$inet6_tcp_TCP_ULP-socket-sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT-add_key
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$user(&(0x7f0000000780), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socket(0x2b, 0x1, 0x0)
inotify_init()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4)
r5 = socket(0x28, 0x6, 0xd03c)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000006", @ANYRES16=0x0, @ANYBLOB="040029bd7000fcdbdf251b000000"], 0x14}, 0x1, 0x0, 0x0, 0x40c4}, 0x80c0)
add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-prctl$PR_SCHED_CORE-prlimit64-sched_setaffinity-syz_emit_ethernet-sched_setscheduler-syz_open_dev$MSR-getsockopt$sock_cred-getgroups-prctl$PR_SET_NAME-read$msr-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_genetlink_get_family_id$ethtool-socket$nl_route-sendmsg$nl_route-semget-mkdir-mount$cgroup-getpid-sched_setscheduler-sched_setscheduler-statx-read$FUSE-syz_fuse_handle_req-semctl$IPC_SET-bpf$PROG_LOAD-openat$btrfs_control
detailed listing:
executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x1400200bce)
syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @broadcast=0xac1414bb}}}}}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, <r2=>0x0}, &(0x7f0000000140)=0xc)
getgroups(0x3, &(0x7f0000000180)=[0xee01, <r3=>0x0, 0xffffffffffffffff])
prctl$PR_SET_NAME(0xf, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r6 = semget(0x3, 0x3, 0x353)
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000580)={[{@nofavordynmods}]})
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4)
sched_setscheduler(r7, 0x6, &(0x7f00000000c0)=0x6)
statx(0xffffffffffffffff, 0x0, 0x4000, 0x88, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, <r9=>0x0, <r10=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002300)="545bcba4511be1e819b403c6c30dceb95c0e5dd2f3e46bb42680124e18b2ea5d474324af010c537edd07c6089234466c6d1a3a3a0a09747be6aad60afcf3f83a47ba577c95c840e376667bfb4105bdf1cefcebd8bb54781d3a8771bf455f8890568c45d5424377a81ee6ded4eb7d5e61992a8b54f6fb87213f127c4d21cec431f9bdf7f38c3d0083d1b01cb63f8eae1c881b5b86ed6ea143ca836d0fad54c202956a2d661de5ed6135efe8f35913f3dde736c72dfc684c345390bd6b6f16c4f3af4ae610b4dcc22b125b12a8ab8e9c3d20e2f141897e4f6f1546ced438d218625a1b7e81c4345cbd64b50e4ed4867b5a8bebfeb996d8bbcfba8d69eeea15d6a058c8efd9b586b168956cc79bea440a3acf5961d2eb57aa38909cfb0d98d16e78415fa69e3e274ff8ef9ee03e5a2efbebf795f94e07970c58808379b4c4be814841456f3ffa21d84adee294d6be85663b86e0aa53ef452773b345e075ae29a9ff71ae824b9d99ff35227392eaa5fcc250d10e2588e08eac1dfed289d0f9cd2d009f28b0644fa2291bcb3ae01140f8173a77feef338dd5eb94e2d620a637de756691aa3647d4295b9425c4783e7d96e63cf5170d3ed1cf8a3b41447a5c5503c334aec40e1cde6351b8f15917646507ca931d41554be932d72b72d5a425e0dc2cfcffedaee8b8b2d719885d26653835694fa1dc3823fc97bbffefe9cfd3d99d461d11132417c60c1b6f44d5a4fd8d3c4c491bedbcbc18dc1ae62b1dd51aea68c076f656e3f9963c3e7021f2a37a41fdd6be0fad6135dbe25b11f7b8d0d6fe13c92d819afb5f36ee0b57263bb86871379206235161347397f71a7d1ed72791b3f6bb965284fc6fd02d4128b60ca3287ce2060dcf81752f084d26b634c2aa9c905a0993f6bd2795340c8924c4da1c053f3a9a1ada62ba6dc31e0fc5a144dc0438325ff4ce7a84fbceb961fa5ed161acf5cf43637c82f29c4c47961b9784be9e05273cc83aed50824977a922201966dab4645d5f39190418668590ca6da639322939c3501434e288e9b6a8dc8f8be3b38ef9b4175a739c5659f5a29df66dd4bafa38ffbace425508eaf8f0eed8dd28e6cd7a2d53d940217f12416e0002411414522ffc9401fe7198db082c423ec680a987a5e059e8986c78e5ac54b7efc6dc4d595f30d98d2e266938a0bfc80607a55d796e54197f539137f2bdc6e5902aa37d48d7ebce122bf5bb24ff8d8644bac16c9bedc515f82470531a09bedd24c4a47496f52465b46ebf9d7f013dc497731cd9987b529f8c45c4bea18d8d0c9e799edb86887ce08a195ddb460efcf15a7703626b74b93f9f226ac923426ca6dbd3808b56f540f1e5c7208b9c826909ae812abb6055f94aeec3cede2e66757babf1133407b403850f9e69a7418150caab7fe6324a64b0c23f47c2b8747d997ffc35c3c129f58a5f4ea247c6b2ed1b671535eb6ba1372d16c70d142593253a356935332caa0128f262f61e85d1ca33c81866a61cdee54d3eea4de7a470077b01e664a65cd583a5cd08d1501e4ffe35b2de55ff11b7a9000d11b02bbd243790a998d9e142a49680673e971a9e5362029b898db8dfcaf3d98bcf44d2d50b2baa5c5fa42a2d12e41cf8f2baad928b2bb0819e05a14a5504d1c6e949a2f892f8f5956e7130a3c6fdec9aec7bb3caf9b3c9c507ead56d8caccd42be8cf4d3618c1bc88208b658260a0bc49b913bf7656a23b37efbfc6d5c0310725bf728d9c2399ecb591eba166ae9ef08165802ebb78b3a55c8f6526fa1cfdee8c90c2cc55046f10f88831f64a9597f3dc4439071d678f7515ee1b9906c5807e1403e940d4809b2ebd3d3f193ddff6703188f5d9d3c475b4ecf0fe7900761620b660e840a6295a16e5199d056a2366273ccd6d05b18e30a8dca183556899a0041a428a914f19b2b1fb310fa49b663cf4f67b915b615266987c1bfaebcd2ea59a85f162ddfc26205dc9ea10b0fc725f4d7fd681fdb014d6a71dc082bcf0e6ccdb4656aa05ae7421b775dec5f017b2e9100ed528143b85bfefc3acbeb9ff8df7d402c246e7191de43f3688533ad585bbff9377ab1f460e7d0d58aefa4a41e3b033035efac45b5438ee757f392f191c2b77e32f876291686d011e833b63668097635cdd4fa8f78c42ab4f4a47cdbeb8159f745a5533bc242a16812ebef931ee8f9a1a88d66d2dd7c53cbd1e937aed15d3ece02ccdb177752b734158f33478c28ee2ad1f6bdc312b8f34c6104179b948d7001740e4f055a2d41205583e334066575a935854a4ef498df40518c412be0e8e8a3896bda973058b1600a1eb13177cd2bdc648c4d3bf04a8f9ebaed69afe5c44d4fc6e5e8f8138a7a6b82ba80f05c050f42bea1d827560334ce1739deaf75db749e0584b99e8f992170766fa309028840422baa77b9d361f4d8de7c708220601d145acb77d0742c68d1ac474fc4a031e78e3d0a4fbc1f0b43307ab41cb7883a34f5ebe282377066c42cedf93ee7f66389a0c8d4f109220c1c3e8319d67d3355a463b0809ff343418a319ec9110988b9c418843a78b4c7dd0b2371c943169e2aad9533e385cb3d0030d2c7ce5694b1e2d09ac52aa59d50151e1152cfa59e307c310483d4e2754f4d0ebc42b473b96b73763a0da1d3a04c4c3ccaa475e88c8e86a239edc6f620c7ece93e210b1dad84e7ca29e21e7822a0e2448433fcb18e31ded1436cc1298a834c985faea17e711047d0b45e4bef4a8eb4f8cc0552102326be79dc188ffdf10a6191ffe74d906749751d18c6ae98ab3abbb8d48171b95a6cd1d8a7fb40608cdf3de8b5988c39426c79087d2b88ab393379090673b75617ea9509e4f75de551098a7c2039a6848cdd21194dfaba16876376f34918a964210956096eb8ce5cb095d1871ff230d28635f2b6d2766a6447b2fb92352ed99c98b39512166e6251a15ae284df293a0ecbe887c659c0e856686002933c54bc242127064409050da8a7b1fed97e645a3a79010260bf905e3bc46abbdf61dd95e3edb54fb59309067587284ac75499d49d1ab7ba2759b9ef0bc2b6ccf5bd35ef745817591367433eb72009a33a2a853c427798fa63c53d13fe814945c2ad514a78cfd44e4fe88717889c68af6162def289eaa1e28b287870503218a684a046c904eb1bc3f332a2302798ae3c33497c51d76fdba3a3013c1e07bac9cf621380bec3ade58cc1f4a7b31cfad7c786cf843c553e58945a1755f90697f4f41d1829cd039bfd5490bc56fd4356ca8e216b03ec0b58f9e7d37af0d82e7ac5f09cfeef665d3b58e13a0697179c4bd6ef06e1f14ee4e0c82d4a2ecdf79c869745c507179aa0d3f8d6800441b64ce00928d7844577c9405faa201b8639634c0a627f7972a79cc4aaa0cb72c81818ffdceef65816a473ee112619f9a9a730231c5b2e4c20d6d4cded7e887eed6bd1dc5d7cf79b5a8605926a6929b90574bae8248c771ca0d48a5034daaed67fa88674bb57e6964e9e96b49a78c33875159d2bd655755883a5de7228c3eda8d6fc581b5bfbc4fcc3e7ac486f4fbfa4c1d30ef8db1afe5dd3ff9d6fce894422734d66d76e271a515e0e72bc79eadfd118ce7196d7ef5783c08e9ee63d40e2ea7f9e6f23b0bba3b6c46388bb707ec54916c3ce1bfdc6cf82f8e329f40e92730dbc5d5237f7f078473822df6741cb98911d81aca52fcd4deb33fbd8610101d3ce59f14d8c1ff6d0027191267ef411237bbe573eaf56fd72f02da998d2976919d9eae3eaf81e918171aa442ed1b6617242dd2d60cafa6e242432b33c2684233c875bfb498b05a13b57872fa2bd55b3d8486744d431dff0b84c587ea72c99af732ec7ad1b6ce7fe0bdb77da4e8b5295993f35ba6df0309bb8c42c318c4b04500ccc3eeb9dc6759da90f2c21c0952c501ca797e2bf0fe851b8faec3840c3a183b603e378f3189c164584991577366a324f823571ceaf1d30d56b9cd6de470ac9d366e9a06ada453952357549793fc9c8695a5bcfd188c9345ce97fc84ea37f63b0677a3e5b7c58310f4cd3cf520497b293af2cc4171c065904f905fbd0c4f302bf40443a7c836db69dd128883a31f65b1928c75f8842803d0ffacf742c23d285ce7a7802ad083e776976dc390292b96be30ab1195dafe9ba9071d8078086b2f16709597a7837ba0150167216930553ce520a7ff881e0d0caa952f127029a93d6b71affb324de5ab775fdc321bf07d7b9caf9682afa26ce66787d83139ef82c1e0762574db94adf26f3cf689f209d721e49b5746f0eb922a3eac9e601eead14b5ce0a1268bf1d8bdfed1281f1cbaa2dca3dbb779d6118a41332e5582366ab101808ce2abbe68a0604c62409328b78c0cd02487c86cb412fbb91d6da54bba203b7714057b4eb2c838e311fd12c11bef33f08713b88373797578ee24c713f218edcd506fc929c864320ab630778b84aaed2d4d70fb6d05373c5395d60c66e7771d84698c7368239fd23f4d35e57309ca297cfe43d471eabce0ef96159052d11242c78a068045054a06102c893b76ec1514b82848b0520a80508ec83124b789507279dabfbcc84a1d7a1cc1ae418a6f7acb75176713d637adccca7a3a75cf35670f092b5dd522322c2b1e554599f61e58fb818b4b8044b2582a5c5a5c0afa5a5b1bdfa135b5dfa71f888be4360edfd354ee69a9e0e432c4691291e6559a0f90469930a4817b0efaabfa6afb940aa573e8897ac1725bfc8f256957e8fc824f14c1bd1a52692d9cabdf79aeae8f2205e092217c3d37e3b881d5811efb342a942ebea2fa0d34ddddb27f8c3a7a953de5e0a78cb42b9b6198c4739e5bfc2148139bd787a90168cc5fbafa7d9063740db33a16898be4c6e590d749cacfbb0ff52ff492298c476dcdd5acd31ac0ac4c3b8dca5647f2056aea55a08c4637c62c4118bc7be08898e5ea2d9140b4c7c6ef02050640a840e04dfe79b9c8f103c787d7a31ca791f45a2f2454283dcaaefadc254fb44ce3a020cd348c1b02a42379846c1a9bb5f08efd3b5091abe3c16aa197413b9249d339ecbde04b0ec99fb2352191807fce972c4f4558341f0675030f51f249a612e63b9d8af902d72be5d9fdcd8480daf8c42e18c3e198e30927633f0ae12820eb042d36fe4c9a3b0bee548ff9dc02a7172e1354eb36c4e090e24bc1c7e7f65ba894c4845e780c2334b5e6eb8c25cad89c65f5549bd7d3d967ac55e7f9016cab64444bbc0d11e9cd604627b09efb11b8b5553c542da9f79dfa0ad6beeef08c43bd259cf5bcd6bc0a63f70ce98a099bfd93801066477590862807cae2b3599e99a7e8f5bfc5398ff39db7ac3ee4636b9189b8dbd0c28d3bbf9f4c0adde104c5f6e1297ca14b0eba79c8909bb14da3af463491e8ea26ed5105468990489e3c94535c180b0f4dba28d2c09b5abb24111beb5f122d4766cab1e94053ff2cf0a6b8f793a4ceda1c1fd26e94d5ba7a1e6b2d977b4517c712887b2ef24a3b2f97b392e9c67a5f69a908a3f11d6581cf49f53b733ccab562eccdf3a9c397d29a8ec9bf679580c804392dfb2df322c8916bc7784ce4d939460f5d62a82dafa18ae631a9a362173777b09856f932cf854274b2a57ffcf918699999bdb9371ee4b6d294ebb3da21926447d63bcd1f08f61ae9832f3af6a732d1d39a992b86ae61a2177ffa338a47ababc7d04a142483f3fc2ad6e5662150fa5e8c24e48a613e1b203c979d822b15ad92b65364757a6f070ad3110968107d60da7f20bb8d84893cd7fcdb6e059e36a753d48c8ded4b8e4fbc89b6f91043d4a0e0f97b5b7987886239cd29176c8390027b35d0847aea541b86f4a3b3608987feedfe6048102933c0969f5e1f7a8b1b65e4fb9ea38dc325b3cf8ba25f48da55778aca4aa487b2780719107597855666a7635327dccd4975cd043c1f497dfec1d01d5c6d4cf1a306322a83a57d9b332076b43f02349e9e07ad6f0f770c9267803ffb59497b6020a5fe9023acd390742a3006b633d4c9a79b9ede82e54bf2d1fd768d9b0cb6dcbf6adacdf2efeec7cfbb3b8149dfbddde17d89fdc7e24886a97fac47839bb9a1c07a7bed0d877249ba7d0cf76065e244c098eeaa1b5e4052d75769cb4cbde15e70512df5fb5f64b68dbd732db12b2b2f748172c6e188d90185be9cfed96502b5e5166103161850a0f94994761a896ee92133c756ad38caa1156f70c4f8718013c6e531fc9bca9aa489f63949fcb8da10a0b4e51e3a4ea4440c74059cc25c93ea17636e520c2005ab60e564c544e31d75230d232b3a2c50f6a773ae1e3e05112d114892cdaaf506dd22cdabec2d3ecbd1d76d704085a14ce8d05ae7894cba2126d8d92735229250d31cc6f9d9040d3a88c5a27538856f10105b299d2cd4a9dd98617a361da8324cd18399f1bfab962aba0f87fc36956b3cc3a0f9013aeebc87eb7d8308702f6185aa9dd0f75cdfea94ec7145cce0afb2f77f42c2d6a6912e2f2953b54fc14ef7022a7469cba191887b0067766c07792a8a5b6dc09f46b85a56b1cde6238a36dbcc5349316a54df23893739e9028bda0b8e81f1e39810ab0f13d0173c53f3fe4abae5b6b30237186ce70a82cde0151d9522bb11fad0a86ab8365e99ed9ce1f9a844427ab3c7da194039ef78672fe818f530498011c65e30905ca4fd9546f0545188e486a9eee3eeb28ffb813cdf87715e65906521bb9a4c754ef505a7f40fae952bc804363fe317f047f44c9c98b2d771eb3b289441b423b884fd00dccb85be2cf47676f29ce044a177270e3e7e623ce1b04ba353a75e1cf897ddb031a28fec03066ff417bd303d134b15e31af207e73c03fd3acddc50965b5ab5926fd5f08d83437b9982d98cda65f7c6b4f283d2b68af9d417fae766be58552a6b32345ef757f25a169941d9167628383f57e3fb7c7f6265d2e578edf088c549a1a5c600135c5548fefeeb08869d53e46905d67f523e9d924d207e5ee509cb576ba0b3eb64725bb078951891d385e7bae00ca48e7ac2a9d9f107a2a14f2c061ef5e96a360069a629931487e0e7af897dd8b4ebf4292ef2ae54076ee7557ed646e0b3296b520c02ff86ae6ba8432685ffb9fab62e4e42e9284c09d2f23fbbda5f57bafe94e2dd2d5c108d6996a7412db80a3407f5a20f139bfa2510daf565de987f910c196733ced3094f4fd48ce8ca6f3b2082283129fbd6badb9109fa6e4a23ef1a5024a2380f20c424a6d05dd0e4206807a86b6fad939e9526afae36b7fe6940eb102c04f36c8d7e09aa92fce90264a26768d9ca242ba34317d43085ae5195cb37c8135d0229f046ca4258d89575469f6e9675b30acba80bd5957c36b5b6b799b8d725666469120c08d21fd7501a22ddd7b83d05feddb97107dbc0ec2a47b5a11396eb6a3715f30b6b6c71c4c8533ff8087534319eeba81d3b3522f00b7fa0aa3cb8da3ed404a951563e77544c795914c0c8470074c724ea6746c66089852fdd56ecafd6929553dc03d3ec42699b52b68793079a1326ad6dd6eb9a36f3f62b4d41246c473af3aa45e918ff8d75615fc54f287d77ccc433f4b4d99c49dbddd0072f3020cd5cf0f01cfabeb8fa326296c087dd27a6956337b515e8da88d2cde50d238d568854240a913206f45faddf0c97cf5d4d1dc54f0fd11567c79b94b6b29654e754ecc0942fbb00580153d0c444b0cd3fbf4f610f54ce231ae8a4234b07a6755f13f90676552ae5526fe23e7c7baa1d8b8da06038711cf37f80683c8a85651236bf850848e452c2d0f2470462770d850f035accacf8d884496cfa9a11f4d5ce18889086d7ea96f843cbc043efe8a680ac1b18dc6641d9dfa523811f93d509c8bc3cb95c353fba02f91a5c5844653c81d55762706c966b8eb523184888913c20bda371404cc9b1e5c7d349c071dee029454d8b49d947a1a4d06e6e63cc4212feba7a898acc5ad2506d2cb2cfcb87dacd5d8e73a6853cf9effcfe64d491ca41cf1cb004c3e183b52eac801bb68ac81905293f65abf01e3fa20cfc5a3e464e9d93e8c480dc98484f20f9e4a065f3e1e3287d287dd8a74efb5c0a427fae04a35f00e1e9e75e81c37964f378b98843b31f5ed0bec19c951b7bca939927d097cd66ba4990710cedb68ab7967c696a913cecddebf0d3b0ab9bfc2703669098aa2daed5986c0584ccf3b32add21f27fd0a1636c43db935c2ee3b03c747a71770b79917da6127f71ee625aabef8c839b3271acc1f5c22b8715b63785d3d544940de588c36d4f8e886367f1d7f089fb6b888099a164ef426ce859f4f718b7deb9611c0ba90384219ff33aade02c24bad7cce112eb35caff40afa6b22926ddb647ffa8deb76d2411090a5140dddc3f67f0275841e4c6b6d33b714f5aa0b8e37401d1d8194d71606a5946460748919a71cb8e0b9dc601609155109cfd28bd33b07e360b1123494a757ec8c449ba04f484e244d53b3c38887f5a8646d9523f8c4b777d40d69ca56912e5a7265d82cef336f6ed2f8cc4075755b01ccecbe28f2201202d3781d422c8c167d0669c4438574754dd5afaee84e7dd04d99b16de0381454d778716c2804cd219b149c902ac56b8fdf2a5972d0b5672b7f30b65da2c47c91e209783d3718aca747b687918881ad9a71b1b7a97d6c81c3b714bfc3b34fb140d606e5ea239f5761a477f4238b2e90bbea217aca7b41c5087e1cd0a4303ad344ebcd6a9df17ef27247059b9ab338325fabd2c2ab40edfa48d9f75e005f0e487f0816378ff9847f7100523352273f2a3e5d0c1f15e8b0cba43a0f7ead7b7000e4e0da0fa48408aeb5dafe2fd6a5570038c0600c87ea1bcf0fabbb2b436a879d926ac869457ec4d5c60de4b6575d25b32d64f9655ffcc0b151303d6d85a8f19217d457ac375888833fe086befc5d72f88051210500efc909178b6dbb2a696a7f55c083c6bdcc87c465ed853000a46bd1998f086d5f78151d967252d146c9bc43740bb596fd0bd7c63606e8dc2fc4695b25a4b0d656fd4454b7600678f7c8f28b373d4b9e112f3ec4cd93f3466d95d276af4bec3da927dcd41950df7bbb6b324500738339552ca239e4efa4c68e9df974866c06998af9143763ceab7ef8d80881733e035ff97f39d6807f5815dd08ffc5000712b14ddeedaa4df69fa2a5dda42bc0501ec6af4d2acacad7e4ed816fc61e7cb2f208c20033fdb8b04620c24380bb7f324e4b835a2c2b60b5bfc908076106a007efe7b6b0ebf78cda038fc2e59565d14ae58d3d76036645b590b2f79f500e4bf88d340c4d619dd448b0584acf987adce003333a959621f6a4d0095c79b1b8a3a213368946547d6dca5a1b53f96923486e9c7237b609437709d82bfd35fd2cb1470482d6738033c703f3a70421e57c5ef91dce19838a5bd2bdcacabb7d3d68d90decfa8760ad0f1267446126a5aa264e27bc5965aef5fd6f2eed6fa581d6c1252bcdf6090a94ceb914a5016953198a5790e444d0a3a6bb7e1a553d077a86a2f324f6acdd6501fc8e953e1cc82dba3f9b07edfdd4ed354f4ec5ebc32dd36d6015e1cbe842f1133348e7a7891ebc420b094a1d8ff941f3a644be4be0d4fa75e06651f4fa8c705474055713c029174fe00fb63f7fe13a305cf7df0e56b6020fd4c3dd6afb76ee42a8a055343d2d679f34ef250732b815fb1678d27886fea1d0d13a3cec8a1e5664a6ccb2cf1374e31743236c0b58b54d1b1a8b5181b17979ac978842d4fc6ff8675b74b5775dd3efc8150009f33bda5ff6bf144ec2ef04761a65cd7fff1ebde38da1e73f79f43326fc92295cd3aac60e2413fc98974506927643b557951cd17bcb8c70c200333962c44acddbc1cb01e1d1cad4a1f0d5c5d3ae3f2f07673b4115f85d1c85924d06f905bee03fc308dc1b2acf9081dbabb29ba3698a88449725b1c24f9f2d40a72e60196dd4991a2015e42bf723edae36261830c97710e3a8880d795674f03d44b9dc7ce81f69b1ee79c547d5f35d6cf1c828dc50e822688d5dcfe57d539781b4335b2ed024e1a31a49a0b80c7f8442b5adf4861ce7e125c933ec12b3c7bef33ac97e5d500388886fe44a82c45b8c7bd81ad5eab74b1354c209a145a7f58fe044970edf7de26ecf1173735ead1104676efd23fd130d8e3d00883bfcca08c4a70cbf9df0f646d0b33ab354048345b748d66ee5dfa0343c935cf11a8c91dd57b3eb3e70b6bfb252c9ccd2dbbe439548eefe69378e7592d15d983e811598cdc848f4f6ab4f0c384cd680becb71ca1ae6504ecb4362decbcc394a68892b3d36d4e302515cc1f29147e1aa451aaf327e8d9de62804213e99a28f242ba9b3e40bc9ee18893fa287595b54b44c2fc9f770ca2e44be3f7f6f0c15168e537bc2d56a317a351e83677757d51f3d7a931f33433e5aae87a1bc44b2f0cae50c5cd401f4270e6171efff90660571270b26935772129ec7343e5fc3a2f88314e039be871c6f4ca5ef6ab5f96d8b9236fd39fe3d8703e59746a7e3a25b4d6945ffb51bfe02454294d69d58ec3815c1f6158352749c814aa5ae906e2b32325bd19017fad03515cbbcb98529030d409548aa0c3417e35f082c64eb083e01864f38c4393633f80ca6c1ee314d8f7f850c37f7344129e790b84d6b10101d8c386b93634b6d590a94da8474c8d58b3a9f7700598c9c28d5cd1ae995c8a077492664b22511a620f47ec0d749ec4fee1a5a6d9105fc738885fc9eb4eb387ed18fc19795ca448ce57d0318343ec3fd5faed01df3aa7e4a525746dd2cd0c2ecf2009c6c44ee3ce3bf6183e5880ea10f90ddcd11dfca3753f7eea25e347aa2b877a04aaefa34847d0848af5658a3b0267e2d53e6fdd9270eb1e5886015cdccbb9d1cd618f005e2b751d408b818f274780883ff67b3e6b7c29b8345fbef885cba40ce66dff4e328371a3290bb13240be072b4bba23f1b12db565db1ede592a43c751662029fe9efb42aa6c3a3a03b4369eaacd098c2ac23e748375f7ba3e5eb445a1dbd859573f3ff4aed8e9d77eb5b0656ee3f721ee867cfb310536a4869546809c8cdfc681be51d7a7f88b8585a4b8752ca12f3368de4543c68e27d2a0ed762e1c077f3ac121a954150cef0945f3b44b71e654155613b0fa7cbcd52e377a0a1c92ce71b857dd5bb80263a492e8992b47e3ae146b25f9e6e624cfe6a0d8d30e0a8336df13c887e1b5fc0dcbbe8731c2a12d3f4fefa29fd7ceed376f41597221f339443e139789bfd78e35fbe7f98354412733b1393842515fa902fb740b9aeb82af849e5730fbbb9b6c291a66cdf88ec21453f8dea1b767fa92cd157f05283cf836a37cf8378da99f7c6aa56dd50479eaa00a99800d8e72c3b2e8b5be9481fe5c43816169777c722e98d7af451413dd87d70deb39b18c6689ccb38334b085a87398949100236e33805c8db1024ce9357764a5e16a67550fd00d988b51c44628a88d9194bb870c4174d490fa46b5b5b67e267ccafeae154437cd2081c5ba57059d0ef89f9a5a1cf94193ba651c7ab4c2bdc68a3e875121afe904d4024def62909fea59e946cc305be63e10dd5b3fadd1ffa02a1fef6b9fc06a05b5f91a720f2eeba00", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x130, 0x0, 0x8267, {0x935, 0x6, 0x0, '\x00', {0x1, 0x403, 0x0, 0x7, r9, r3, 0xd000, '\x00', 0x1, 0x5, 0x8000000000000000, 0x3, {0x6, 0x5}, {0x81, 0x3}, {0x100000002, 0x1}, {0x0, 0xff}, 0x7, 0xc, 0x6, 0x2}}}})
semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000340)={{0x2, r2, r8, 0x0, r10, 0x0, 0xc17}, 0xfff, 0x814b, 0x0, 0x0, 0x0, 0x0, 0x3})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000b7cbb01f00000100000000009500000071117700000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-prctl$PR_SCHED_CORE-prlimit64-sched_setaffinity-syz_emit_ethernet-sched_setscheduler-syz_open_dev$MSR-getsockopt$sock_cred-getgroups-prctl$PR_SET_NAME-read$msr-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-syz_genetlink_get_family_id$ethtool-socket$nl_route-sendmsg$nl_route-semget-mkdir-mount$cgroup-getpid-sched_setscheduler-sched_setscheduler-statx-read$FUSE-syz_fuse_handle_req-semctl$IPC_SET-bpf$PROG_LOAD-openat$btrfs_control
detailed listing:
executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x1400200bce)
syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @broadcast=0xac1414bb}}}}}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, <r2=>0x0}, &(0x7f0000000140)=0xc)
getgroups(0x3, &(0x7f0000000180)=[0xee01, <r3=>0x0, 0xffffffffffffffff])
prctl$PR_SET_NAME(0xf, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r6 = semget(0x3, 0x3, 0x353)
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000580)={[{@nofavordynmods}]})
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4)
sched_setscheduler(r7, 0x6, &(0x7f00000000c0)=0x6)
statx(0xffffffffffffffff, 0x0, 0x4000, 0x88, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, <r9=>0x0, <r10=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x130, 0x0, 0x8267, {0x935, 0x6, 0x0, '\x00', {0x1, 0x403, 0x0, 0x7, r9, r3, 0xd000, '\x00', 0x1, 0x5, 0x8000000000000000, 0x3, {0x6, 0x5}, {0x81, 0x3}, {0x100000002, 0x1}, {0x0, 0xff}, 0x7, 0xc, 0x6, 0x2}}}})
semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000340)={{0x2, r2, r8, 0x0, r10, 0x0, 0xc17}, 0xfff, 0x814b, 0x0, 0x0, 0x0, 0x0, 0x3})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000b7cbb01f00000100000000009500000071117700000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-ioctl$sock_SIOCGIFINDEX_80211-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_CHANNEL_SWITCH-syz_open_dev$usbfs-syz_usb_connect-syz_usbip_server_init-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-ioctl$USBDEVFS_GETDRIVER
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x20100, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x3b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0a0}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0)
syz_usbip_server_init(0x5)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='qgroup_update_counters\x00', r4, 0x0, 0x5}, 0x18)
ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000100)={0x0, "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"})

program crashed: INFO: task hung in uevent_show
single: successfully extracted reproducer
found reproducer with 10 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-ioctl$sock_SIOCGIFINDEX_80211-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_CHANNEL_SWITCH-syz_open_dev$usbfs-syz_usb_connect-syz_usbip_server_init-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x20100, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x3b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0a0}, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0)
syz_usbip_server_init(0x5)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='qgroup_update_counters\x00', r3, 0x0, 0x5}, 0x18)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-ioctl$sock_SIOCGIFINDEX_80211-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_CHANNEL_SWITCH-syz_open_dev$usbfs-syz_usb_connect-syz_usbip_server_init-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-ioctl$USBDEVFS_GETDRIVER
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x20100, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x3b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0a0}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0)
syz_usbip_server_init(0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000100)={0x0, "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"})

program crashed: INFO: task hung in uevent_show
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-ioctl$sock_SIOCGIFINDEX_80211-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_CHANNEL_SWITCH-syz_open_dev$usbfs-syz_usb_connect-syz_usbip_server_init-ioctl$USBDEVFS_GETDRIVER
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x20100, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x3b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0a0}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0)
syz_usbip_server_init(0x5)
ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000100)={0x0, "6bfba1b1d160c47f373b0a66709f03fb538645ea91935432b980e4147dcd2d503e1082faea08109c510dd433898774e9d071931d8957233325619468f9e8db9b6d48bad5d9f238ff2458dc3b9085af1dea061c83bee45ab4a2fff99ded863bae47f6426df37fcfc7a4952a6348ef37656407386204102e9a4f63621e5cceb5062b43e195db8492e3a551439388d8fef7d3a88cc91a7caad17a8255d53221aadcb0b4846d989fc8f4b746d336b6b15c4ce7517764b0de04df813a0acfe494632b383c966d5995478d045ada155ead0ce581575474913096779ba3da9ec054e32d7f6084d5834ed14b8cc90d6b8c7063d7df4dcc07baab7d17ed56a9c7699d7389"})

program crashed: INFO: task hung in uevent_show
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-ioctl$sock_SIOCGIFINDEX_80211-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_CHANNEL_SWITCH-syz_open_dev$usbfs-syz_usb_connect-ioctl$USBDEVFS_GETDRIVER
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x20100, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x3b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0a0}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0)
ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000100)={0x0, "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"})

program crashed: INFO: task hung in uevent_show
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-ioctl$sock_SIOCGIFINDEX_80211-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_CHANNEL_SWITCH-syz_open_dev$usbfs-ioctl$USBDEVFS_GETDRIVER
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x20100, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x3b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0a0}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000100)={0x0, "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"})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-ioctl$sock_SIOCGIFINDEX_80211-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_CHANNEL_SWITCH-syz_usb_connect-ioctl$USBDEVFS_GETDRIVER
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x20100, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x3b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0a0}, 0x0)
syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0)
ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000100)={0x0, "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"})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-ioctl$sock_SIOCGIFINDEX_80211-syz_genetlink_get_family_id$nl80211-syz_open_dev$usbfs-syz_usb_connect-ioctl$USBDEVFS_GETDRIVER
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0)
ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000100)={0x0, "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"})

program crashed: INFO: task hung in uevent_show
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-ioctl$sock_SIOCGIFINDEX_80211-syz_open_dev$usbfs-syz_usb_connect-ioctl$USBDEVFS_GETDRIVER
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0)
ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000100)={0x0, "6bfba1b1d160c47f373b0a66709f03fb538645ea91935432b980e4147dcd2d503e1082faea08109c510dd433898774e9d071931d8957233325619468f9e8db9b6d48bad5d9f238ff2458dc3b9085af1dea061c83bee45ab4a2fff99ded863bae47f6426df37fcfc7a4952a6348ef37656407386204102e9a4f63621e5cceb5062b43e195db8492e3a551439388d8fef7d3a88cc91a7caad17a8255d53221aadcb0b4846d989fc8f4b746d336b6b15c4ce7517764b0de04df813a0acfe494632b383c966d5995478d045ada155ead0ce581575474913096779ba3da9ec054e32d7f6084d5834ed14b8cc90d6b8c7063d7df4dcc07baab7d17ed56a9c7699d7389"})

program crashed: INFO: task hung in uevent_show
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_open_dev$usbfs-syz_usb_connect-ioctl$USBDEVFS_GETDRIVER
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0)
ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000100)={0x0, "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"})

program crashed: INFO: task hung in uevent_show
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-syz_usb_connect-ioctl$USBDEVFS_GETDRIVER
detailed listing:
executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0)
ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000100)={0x0, "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"})

program crashed: INFO: task hung in uevent_show
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-syz_usb_connect-ioctl$USBDEVFS_GETDRIVER
detailed listing:
executing program 0:
r0 = syz_open_dev$usbfs(0x0, 0x201, 0x2)
syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0)
ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000100)={0x0, "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"})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-syz_usb_connect-ioctl$USBDEVFS_GETDRIVER
detailed listing:
executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
syz_usb_connect(0x0, 0x34, 0x0, 0x0)
ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000100)={0x0, "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"})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-syz_usb_connect-ioctl$USBDEVFS_GETDRIVER
detailed listing:
executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0)
ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000100)={0x0, "6bfba1b1d160c47f373b0a66709f03fb538645ea91935432b980e4147dcd2d503e1082faea08109c510dd433898774e9d071931d8957233325619468f9e8db9b6d48bad5d9f238ff2458dc3b9085af1dea061c83bee45ab4a2fff99ded863bae47f6426df37fcfc7a4952a6348ef37656407386204102e9a4f63621e5cceb5062b43e195db8492e3a551439388d8fef7d3a88cc91a7caad17a8255d53221aadcb0b4846d989fc8f4b746d336b6b15c4ce7517764b0de04df813a0acfe494632b383c966d5995478d045ada155ead0ce581575474913096779ba3da9ec054e32d7f6084d5834ed14b8cc90d6b8c7063d7df4dcc07baab7d17ed56a9c7699d7389"})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-syz_usb_connect-ioctl$USBDEVFS_GETDRIVER
detailed listing:
executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0)
ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, 0x0)

program crashed: INFO: task hung in uevent_show
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-syz_usb_connect-ioctl$USBDEVFS_GETDRIVER
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-syz_usb_connect-ioctl$USBDEVFS_GETDRIVER
detailed listing:
executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0)
ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, 0x0)

program crashed: INFO: task hung in uevent_show
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-syz_usb_connect-ioctl$USBDEVFS_GETDRIVER
program crashed: INFO: task hung in uevent_show
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-syz_usb_connect-ioctl$USBDEVFS_GETDRIVER
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-syz_usb_connect-ioctl$USBDEVFS_GETDRIVER
program crashed: INFO: task hung in uevent_show
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-syz_usb_connect-ioctl$USBDEVFS_GETDRIVER
program crashed: INFO: task hung in usbdev_ioctl
a never seen crash title: INFO: task hung in usbdev_ioctl, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-syz_usb_connect-ioctl$USBDEVFS_GETDRIVER
program crashed: INFO: task hung in uevent_show
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-syz_usb_connect-ioctl$USBDEVFS_GETDRIVER
program crashed: INFO: task hung in uevent_show
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-syz_usb_connect-ioctl$USBDEVFS_GETDRIVER
program crashed: INFO: task hung in uevent_show
reproducing took 2h24m14.375566832s
repro crashed as (corrupted=false):
INFO: task udevd:5834 blocked for more than 143 seconds.
      Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D stack:25976 pid:5834  tgid:5834  ppid:5197   task_flags:0x400140 flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
 device_lock include/linux/device.h:1030 [inline]
 uevent_show+0x17d/0x340 drivers/base/core.c:2729
 dev_attr_show+0x55/0xc0 drivers/base/core.c:2423
 sysfs_kf_seq_show+0x331/0x4c0 fs/sysfs/file.c:59
 seq_read_iter+0x43f/0xd70 fs/seq_file.c:230
 new_sync_read fs/read_write.c:484 [inline]
 vfs_read+0x975/0xb40 fs/read_write.c:565
 ksys_read+0x18f/0x2b0 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4003516b6a
RSP: 002b:00007ffe4b1873c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000055f132b6b9f0 RCX: 00007f4003516b6a
RDX: 0000000000001000 RSI: 000055f132b2a620 RDI: 0000000000000008
RBP: 000055f132b6b9f0 R08: 0000000000000008 R09: 0000000000000000
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007ffe4b1878a8 R15: 000000000000000a
 </TASK>
INFO: task syz-executor287:5836 blocked for more than 143 seconds.
      Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor287 state:D stack:25952 pid:5836  tgid:5836  ppid:5833   task_flags:0x400040 flags:0x00000006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
 device_lock include/linux/device.h:1030 [inline]
 usbdev_do_ioctl drivers/usb/core/devio.c:2611 [inline]
 usbdev_ioctl+0x26a/0x63c0 drivers/usb/core/devio.c:2827
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:906 [inline]
 __se_sys_ioctl+0xf5/0x170 fs/ioctl.c:892
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f66a6f92399
RSP: 002b:00007fff5feca508 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f66a6f92399
RDX: 0000000000000000 RSI: 0000000041045508 RDI: 0000000000000003
RBP: 00000000000f4240 R08: 00302e6364755f79 R09: 00007fff5feca538
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 00007f66a70096bc R14: 00007fff5feca550 R15: 00007fff5feca540
 </TASK>
INFO: task syz-executor287:5838 blocked for more than 144 seconds.
      Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor287 state:D stack:24440 pid:5838  tgid:5838  ppid:5835   task_flags:0x400040 flags:0x00000006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
 device_lock include/linux/device.h:1030 [inline]
 usbdev_do_ioctl drivers/usb/core/devio.c:2611 [inline]
 usbdev_ioctl+0x26a/0x63c0 drivers/usb/core/devio.c:2827
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:906 [inline]
 __se_sys_ioctl+0xf5/0x170 fs/ioctl.c:892
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f66a6f92399
RSP: 002b:00007fff5feca508 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f66a6f92399
RDX: 0000000000000000 RSI: 0000000041045508 RDI: 0000000000000003
RBP: 00000000000f4240 R08: 00312e6364755f79 R09: 00007fff5feca538
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 00007f66a70096bc R14: 00007fff5feca550 R15: 00007fff5feca540
 </TASK>
INFO: task syz-executor287:5840 blocked for more than 144 seconds.
      Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor287 state:D stack:25712 pid:5840  tgid:5840  ppid:5839   task_flags:0x400040 flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
 device_lock include/linux/device.h:1030 [inline]
 usbdev_do_ioctl drivers/usb/core/devio.c:2611 [inline]
 usbdev_ioctl+0x26a/0x63c0 drivers/usb/core/devio.c:2827
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:906 [inline]
 __se_sys_ioctl+0xf5/0x170 fs/ioctl.c:892
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f66a6f92399
RSP: 002b:00007fff5feca508 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f66a6f92399
RDX: 0000000000000000 RSI: 0000000041045508 RDI: 0000000000000003
RBP: 00000000000f4240 R08: 00332e6364755f79 R09: 00007fff5feca538
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 00007f66a70096bc R14: 00007fff5feca550 R15: 00007fff5feca540
 </TASK>
INFO: task syz-executor287:5841 blocked for more than 144 seconds.
      Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor287 state:D stack:25720 pid:5841  tgid:5841  ppid:5837   task_flags:0x400040 flags:0x00000006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
 device_lock include/linux/device.h:1030 [inline]
 usbdev_do_ioctl drivers/usb/core/devio.c:2611 [inline]
 usbdev_ioctl+0x26a/0x63c0 drivers/usb/core/devio.c:2827
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:906 [inline]
 __se_sys_ioctl+0xf5/0x170 fs/ioctl.c:892
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f66a6f92399
RSP: 002b:00007fff5feca508 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f66a6f92399
RDX: 0000000000000000 RSI: 0000000041045508 RDI: 0000000000000003
RBP: 00000000000f4240 R08: 00322e6364755f79 R09: 00007fff5feca538
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 00007f66a70096bc R14: 00007fff5feca550 R15: 00007fff5feca540
 </TASK>
INFO: task syz-executor287:5843 blocked for more than 145 seconds.
      Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor287 state:D stack:26832 pid:5843  tgid:5843  ppid:5842   task_flags:0x400040 flags:0x00000006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
 device_lock include/linux/device.h:1030 [inline]
 usbdev_do_ioctl drivers/usb/core/devio.c:2611 [inline]
 usbdev_ioctl+0x26a/0x63c0 drivers/usb/core/devio.c:2827
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:906 [inline]
 __se_sys_ioctl+0xf5/0x170 fs/ioctl.c:892
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f66a6f92399
RSP: 002b:00007fff5feca508 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f66a6f92399
RDX: 0000000000000000 RSI: 0000000041045508 RDI: 0000000000000003
RBP: 00000000000f4240 R08: 00342e6364755f79 R09: 00007fff5feca538
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 00007f66a70096bc R14: 00007fff5feca550 R15: 00007fff5feca540
 </TASK>
INFO: task udevd:5845 blocked for more than 145 seconds.
      Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D stack:26512 pid:5845  tgid:5845  ppid:5197   task_flags:0x400140 flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
 device_lock include/linux/device.h:1030 [inline]
 uevent_show+0x17d/0x340 drivers/base/core.c:2729
 dev_attr_show+0x55/0xc0 drivers/base/core.c:2423
 sysfs_kf_seq_show+0x331/0x4c0 fs/sysfs/file.c:59
 seq_read_iter+0x43f/0xd70 fs/seq_file.c:230
 new_sync_read fs/read_write.c:484 [inline]
 vfs_read+0x975/0xb40 fs/read_write.c:565
 ksys_read+0x18f/0x2b0 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4003516b6a
RSP: 002b:00007ffe4b1873c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000055f132b6b9f0 RCX: 00007f4003516b6a
RDX: 0000000000001000 RSI: 000055f132b2a620 RDI: 0000000000000008
RBP: 000055f132b6b9f0 R08: 0000000000000008 R09: 0000000000000008
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007ffe4b1878a8 R15: 000000000000000a
 </TASK>
INFO: task udevd:5846 blocked for more than 145 seconds.
      Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D stack:25176 pid:5846  tgid:5846  ppid:5197   task_flags:0x400140 flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
 device_lock include/linux/device.h:1030 [inline]
 uevent_show+0x17d/0x340 drivers/base/core.c:2729
 dev_attr_show+0x55/0xc0 drivers/base/core.c:2423
 sysfs_kf_seq_show+0x331/0x4c0 fs/sysfs/file.c:59
 seq_read_iter+0x43f/0xd70 fs/seq_file.c:230
 new_sync_read fs/read_write.c:484 [inline]
 vfs_read+0x975/0xb40 fs/read_write.c:565
 ksys_read+0x18f/0x2b0 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4003516b6a
RSP: 002b:00007ffe4b1873c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000055f132b6b9f0 RCX: 00007f4003516b6a
RDX: 0000000000001000 RSI: 000055f132b2a620 RDI: 0000000000000008
RBP: 000055f132b6b9f0 R08: 0000000000000008 R09: 0000000000000000
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007ffe4b1878a8 R15: 000000000000000a
 </TASK>
INFO: task udevd:5847 blocked for more than 146 seconds.
      Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D stack:26768 pid:5847  tgid:5847  ppid:5197   task_flags:0x400140 flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
 device_lock include/linux/device.h:1030 [inline]
 uevent_show+0x17d/0x340 drivers/base/core.c:2729
 dev_attr_show+0x55/0xc0 drivers/base/core.c:2423
 sysfs_kf_seq_show+0x331/0x4c0 fs/sysfs/file.c:59
 seq_read_iter+0x43f/0xd70 fs/seq_file.c:230
 new_sync_read fs/read_write.c:484 [inline]
 vfs_read+0x975/0xb40 fs/read_write.c:565
 ksys_read+0x18f/0x2b0 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4003516b6a
RSP: 002b:00007ffe4b1873c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000055f132b6b9f0 RCX: 00007f4003516b6a
RDX: 0000000000001000 RSI: 000055f132b2a620 RDI: 0000000000000008
RBP: 000055f132b6b9f0 R08: 0000000000000008 R09: 0000000000000000
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007ffe4b1878a8 R15: 000000000000000a
 </TASK>
INFO: task udevd:5850 blocked for more than 146 seconds.
      Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D stack:25656 pid:5850  tgid:5850  ppid:5197   task_flags:0x400040 flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
 device_lock include/linux/device.h:1030 [inline]
 uevent_show+0x17d/0x340 drivers/base/core.c:2729
 dev_attr_show+0x55/0xc0 drivers/base/core.c:2423
 sysfs_kf_seq_show+0x331/0x4c0 fs/sysfs/file.c:59
 seq_read_iter+0x43f/0xd70 fs/seq_file.c:230
 new_sync_read fs/read_write.c:484 [inline]
 vfs_read+0x975/0xb40 fs/read_write.c:565
 ksys_read+0x18f/0x2b0 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4003516b6a
RSP: 002b:00007ffe4b1873c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000055f132b6b9f0 RCX: 00007f4003516b6a
RDX: 0000000000001000 RSI: 000055f132b2a620 RDI: 0000000000000008
RBP: 000055f132b6b9f0 R08: 0000000000000008 R09: 0000000000002000
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007ffe4b1878a8 R15: 000000000000000a
 </TASK>
Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings

Showing all locks held in the system:
6 locks held by kworker/0:0/8:
 #0: ffff88801e2d5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline]
 #0: ffff88801e2d5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 kernel/workqueue.c:3317
 #1: ffffc900000d7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline]
 #1: ffffc900000d7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 kernel/workqueue.c:3317
 #2: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #2: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5861
 #3: ffff8880216d7190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #3: ffff8880216d7190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1005
 #4: ffff88807dcb7160 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #4: ffff88807dcb7160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1005
 #5: ffff88807b1e8088 (&ictx->lock){+.+.}-{4:4}, at: imon_init_intf0 drivers/media/rc/imon.c:2233 [inline]
 #5: ffff88807b1e8088 (&ictx->lock){+.+.}-{4:4}, at: imon_probe+0x402/0x3430 drivers/media/rc/imon.c:2434
6 locks held by kworker/0:1/9:
 #0: ffff88801e2d5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline]
 #0: ffff88801e2d5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 kernel/workqueue.c:3317
 #1: ffffc900000e7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline]
 #1: ffffc900000e7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 kernel/workqueue.c:3317
 #2: ffff888144fc9190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #2: ffff888144fc9190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5861
 #3: ffff888020a98190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #3: ffff888020a98190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1005
 #4: ffff88807dcb0160 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #4: ffff88807dcb0160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1005
 #5: ffff88807dcb1088 (&ictx->lock){+.+.}-{4:4}, at: imon_init_intf0 drivers/media/rc/imon.c:2233 [inline]
 #5: ffff88807dcb1088 (&ictx->lock){+.+.}-{4:4}, at: imon_probe+0x402/0x3430 drivers/media/rc/imon.c:2434
6 locks held by kworker/1:0/25:
 #0: ffff88801e2d5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline]
 #0: ffff88801e2d5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 kernel/workqueue.c:3317
 #1: ffffc900001f7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline]
 #1: ffffc900001f7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 kernel/workqueue.c:3317
 #2: ffff888029259190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #2: ffff888029259190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5861
 #3: ffff888035ab5190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #3: ffff888035ab5190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1005
 #4: ffff88807b398160 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #4: ffff88807b398160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1005
 #5: ffff88807b39a088 (&ictx->lock){+.+.}-{4:4}, at: imon_init_intf0 drivers/media/rc/imon.c:2233 [inline]
 #5: ffff88807b39a088 (&ictx->lock){+.+.}-{4:4}, at: imon_probe+0x402/0x3430 drivers/media/rc/imon.c:2434
1 lock held by khungtaskd/30:
 #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
 #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6746
6 locks held by kworker/u8:5/798:
6 locks held by kworker/1:2/975:
 #0: ffff88801e2d5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline]
 #0: ffff88801e2d5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 kernel/workqueue.c:3317
 #1: ffffc90003bafc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline]
 #1: ffffc90003bafc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 kernel/workqueue.c:3317
 #2: ffff888029119190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #2: ffff888029119190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5861
 #3: ffff888035ab4190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #3: ffff888035ab4190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1005
 #4: ffff88807b25c160 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #4: ffff88807b25c160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1005
 #5: ffff88807b25d088 (&ictx->lock){+.+.}-{4:4}, at: imon_init_intf0 drivers/media/rc/imon.c:2233 [inline]
 #5: ffff88807b25d088 (&ictx->lock){+.+.}-{4:4}, at: imon_probe+0x402/0x3430 drivers/media/rc/imon.c:2434
6 locks held by kworker/0:2/978:
 #0: ffff88801e2d5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline]
 #0: ffff88801e2d5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 kernel/workqueue.c:3317
 #1: ffffc90003b47c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline]
 #1: ffffc90003b47c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 kernel/workqueue.c:3317
 #2: ffff888029021190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #2: ffff888029021190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5861
 #3: ffff8880216d5190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #3: ffff8880216d5190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1005
 #4: ffff88807dcb3160 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #4: ffff88807dcb3160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1005
 #5: ffff88807dcb5088 (&ictx->lock){+.+.}-{4:4}, at: imon_init_intf0 drivers/media/rc/imon.c:2233 [inline]
 #5: ffff88807dcb5088 (&ictx->lock){+.+.}-{4:4}, at: imon_probe+0x402/0x3430 drivers/media/rc/imon.c:2434
2 locks held by getty/5585:
 #0: ffff8880358ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 drivers/tty/n_tty.c:2211
4 locks held by udevd/5834:
 #0: ffff88801fb1c9e0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xd70 fs/seq_file.c:182
 #1: ffff888034f4b888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154
 #2: ffff88814cc88a58 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155
 #3: ffff888035ab4190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #3: ffff888035ab4190 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2729
1 lock held by syz-executor287/5836:
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: usbdev_do_ioctl drivers/usb/core/devio.c:2611 [inline]
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x26a/0x63c0 drivers/usb/core/devio.c:2827
1 lock held by syz-executor287/5838:
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: usbdev_do_ioctl drivers/usb/core/devio.c:2611 [inline]
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x26a/0x63c0 drivers/usb/core/devio.c:2827
1 lock held by syz-executor287/5840:
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: usbdev_do_ioctl drivers/usb/core/devio.c:2611 [inline]
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x26a/0x63c0 drivers/usb/core/devio.c:2827
1 lock held by syz-executor287/5841:
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: usbdev_do_ioctl drivers/usb/core/devio.c:2611 [inline]
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x26a/0x63c0 drivers/usb/core/devio.c:2827
1 lock held by syz-executor287/5843:
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: usbdev_do_ioctl drivers/usb/core/devio.c:2611 [inline]
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x26a/0x63c0 drivers/usb/core/devio.c:2827
4 locks held by udevd/5845:
 #0: ffff88801fb1c790 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xd70 fs/seq_file.c:182
 #1: ffff88801cf59488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154
 #2: ffff88814cc4de18 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155
 #3: ffff888020a98190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #3: ffff888020a98190 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2729
4 locks held by udevd/5846:
 #0: ffff88807e5010a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xd70 fs/seq_file.c:182
 #1: ffff88803446a888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154
 #2: ffff88814cbe8a58 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155
 #3: ffff888035ab5190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #3: ffff888035ab5190 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2729
4 locks held by udevd/5847:
 #0: ffff88801fb1c8b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xd70 fs/seq_file.c:182
 #1: ffff88801cf58488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154
 #2: ffff88814cc18008 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155
 #3: ffff8880216d5190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #3: ffff8880216d5190 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2729
4 locks held by udevd/5850:
 #0: ffff88801fb1c668 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xd70 fs/seq_file.c:182
 #1: ffff888079be2c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154
 #2: ffff88814cba9b48 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155
 #3: ffff8880216d7190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #3: ffff8880216d7190 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2729

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:236 [inline]
 watchdog+0x1058/0x10a0 kernel/hung_task.c:399
 kthread+0x7a9/0x920 kernel/kthread.c:464
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:arch_static_branch arch/x86/include/asm/jump_label.h:36 [inline]
RIP: 0010:native_write_msr arch/x86/include/asm/msr.h:149 [inline]
RIP: 0010:wrmsr arch/x86/include/asm/msr.h:256 [inline]
RIP: 0010:native_apic_msr_write+0x39/0x50 arch/x86/include/asm/apic.h:212
Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 93 31 bb 03 0f 1f
RSP: 0018:ffffc90000007d88 EFLAGS: 00000046
RAX: 0000000000000317 RBX: 0000000000000020 RCX: 0000000000000838
RDX: 0000000000000000 RSI: 0000000000000317 RDI: 0000000000000838
RBP: 0000000000000317 R08: ffffffff81b23c49 R09: 1ffffffff207784e
R10: dffffc0000000000 R11: ffffffff816a7380 R12: 000000000000317c
R13: dffffc0000000000 R14: 0000000010005a98 R15: ffff8880b8628340
FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055584ee43cf8 CR3: 0000000033bf8000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 apic_write arch/x86/include/asm/apic.h:405 [inline]
 lapic_next_event+0x11/0x20 arch/x86/kernel/apic/apic.c:415
 clockevents_program_event+0x1c1/0x350 kernel/time/clockevents.c:334
 hrtimer_update_softirq_timer kernel/time/hrtimer.c:1226 [inline]
 hrtimer_run_softirq+0x253/0x2c0 kernel/time/hrtimer.c:1885
 handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561
 __do_softirq kernel/softirq.c:595 [inline]
 invoke_softirq kernel/softirq.c:435 [inline]
 __irq_exit_rcu+0xf7/0x220 kernel/softirq.c:662
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:678
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1049
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:37 [inline]
RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:92 [inline]
RIP: 0010:acpi_safe_halt+0x21/0x30 drivers/acpi/processor_idle.c:112
Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 00 d5 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d c5 ec 88 00 f3 0f 1e fa fb f4 <fa> c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90
RSP: 0018:ffffffff8e807ca8 EFLAGS: 00000246
RAX: ffffffff8e896580 RBX: ffff888141ab6864 RCX: 000000000141b7c1
RDX: 0000000000000001 RSI: ffff888141ab6800 RDI: ffff888141ab6864
RBP: 000000000003a938 R08: ffff8880b863799b R09: 1ffff110170c6f33
R10: dffffc0000000000 R11: ffffffff8c00c010 R12: ffff88802077b000
R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f325720
 acpi_idle_enter+0xe4/0x140 drivers/acpi/processor_idle.c:699
 cpuidle_enter_state+0x109/0x470 drivers/cpuidle/cpuidle.c:268
 cpuidle_enter+0x5d/0xa0 drivers/cpuidle/cpuidle.c:389
 call_cpuidle kernel/sched/idle.c:155 [inline]
 cpuidle_idle_call kernel/sched/idle.c:230 [inline]
 do_idle+0x372/0x5c0 kernel/sched/idle.c:325
 cpu_startup_entry+0x42/0x60 kernel/sched/idle.c:423
 rest_init+0x2dc/0x300 init/main.c:743
 start_kernel+0x484/0x510 init/main.c:1099
 x86_64_start_reservations+0x2a/0x30 arch/x86/kernel/head64.c:515
 x86_64_start_kernel+0x66/0x70 arch/x86/kernel/head64.c:496
 common_startup_64+0x13e/0x147
 </TASK>
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.219 msecs

final repro crashed as (corrupted=false):
INFO: task udevd:5834 blocked for more than 143 seconds.
      Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D stack:25976 pid:5834  tgid:5834  ppid:5197   task_flags:0x400140 flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
 device_lock include/linux/device.h:1030 [inline]
 uevent_show+0x17d/0x340 drivers/base/core.c:2729
 dev_attr_show+0x55/0xc0 drivers/base/core.c:2423
 sysfs_kf_seq_show+0x331/0x4c0 fs/sysfs/file.c:59
 seq_read_iter+0x43f/0xd70 fs/seq_file.c:230
 new_sync_read fs/read_write.c:484 [inline]
 vfs_read+0x975/0xb40 fs/read_write.c:565
 ksys_read+0x18f/0x2b0 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4003516b6a
RSP: 002b:00007ffe4b1873c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000055f132b6b9f0 RCX: 00007f4003516b6a
RDX: 0000000000001000 RSI: 000055f132b2a620 RDI: 0000000000000008
RBP: 000055f132b6b9f0 R08: 0000000000000008 R09: 0000000000000000
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007ffe4b1878a8 R15: 000000000000000a
 </TASK>
INFO: task syz-executor287:5836 blocked for more than 143 seconds.
      Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor287 state:D stack:25952 pid:5836  tgid:5836  ppid:5833   task_flags:0x400040 flags:0x00000006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
 device_lock include/linux/device.h:1030 [inline]
 usbdev_do_ioctl drivers/usb/core/devio.c:2611 [inline]
 usbdev_ioctl+0x26a/0x63c0 drivers/usb/core/devio.c:2827
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:906 [inline]
 __se_sys_ioctl+0xf5/0x170 fs/ioctl.c:892
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f66a6f92399
RSP: 002b:00007fff5feca508 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f66a6f92399
RDX: 0000000000000000 RSI: 0000000041045508 RDI: 0000000000000003
RBP: 00000000000f4240 R08: 00302e6364755f79 R09: 00007fff5feca538
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 00007f66a70096bc R14: 00007fff5feca550 R15: 00007fff5feca540
 </TASK>
INFO: task syz-executor287:5838 blocked for more than 144 seconds.
      Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor287 state:D stack:24440 pid:5838  tgid:5838  ppid:5835   task_flags:0x400040 flags:0x00000006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
 device_lock include/linux/device.h:1030 [inline]
 usbdev_do_ioctl drivers/usb/core/devio.c:2611 [inline]
 usbdev_ioctl+0x26a/0x63c0 drivers/usb/core/devio.c:2827
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:906 [inline]
 __se_sys_ioctl+0xf5/0x170 fs/ioctl.c:892
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f66a6f92399
RSP: 002b:00007fff5feca508 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f66a6f92399
RDX: 0000000000000000 RSI: 0000000041045508 RDI: 0000000000000003
RBP: 00000000000f4240 R08: 00312e6364755f79 R09: 00007fff5feca538
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 00007f66a70096bc R14: 00007fff5feca550 R15: 00007fff5feca540
 </TASK>
INFO: task syz-executor287:5840 blocked for more than 144 seconds.
      Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor287 state:D stack:25712 pid:5840  tgid:5840  ppid:5839   task_flags:0x400040 flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
 device_lock include/linux/device.h:1030 [inline]
 usbdev_do_ioctl drivers/usb/core/devio.c:2611 [inline]
 usbdev_ioctl+0x26a/0x63c0 drivers/usb/core/devio.c:2827
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:906 [inline]
 __se_sys_ioctl+0xf5/0x170 fs/ioctl.c:892
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f66a6f92399
RSP: 002b:00007fff5feca508 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f66a6f92399
RDX: 0000000000000000 RSI: 0000000041045508 RDI: 0000000000000003
RBP: 00000000000f4240 R08: 00332e6364755f79 R09: 00007fff5feca538
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 00007f66a70096bc R14: 00007fff5feca550 R15: 00007fff5feca540
 </TASK>
INFO: task syz-executor287:5841 blocked for more than 144 seconds.
      Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor287 state:D stack:25720 pid:5841  tgid:5841  ppid:5837   task_flags:0x400040 flags:0x00000006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
 device_lock include/linux/device.h:1030 [inline]
 usbdev_do_ioctl drivers/usb/core/devio.c:2611 [inline]
 usbdev_ioctl+0x26a/0x63c0 drivers/usb/core/devio.c:2827
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:906 [inline]
 __se_sys_ioctl+0xf5/0x170 fs/ioctl.c:892
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f66a6f92399
RSP: 002b:00007fff5feca508 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f66a6f92399
RDX: 0000000000000000 RSI: 0000000041045508 RDI: 0000000000000003
RBP: 00000000000f4240 R08: 00322e6364755f79 R09: 00007fff5feca538
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 00007f66a70096bc R14: 00007fff5feca550 R15: 00007fff5feca540
 </TASK>
INFO: task syz-executor287:5843 blocked for more than 145 seconds.
      Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor287 state:D stack:26832 pid:5843  tgid:5843  ppid:5842   task_flags:0x400040 flags:0x00000006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
 device_lock include/linux/device.h:1030 [inline]
 usbdev_do_ioctl drivers/usb/core/devio.c:2611 [inline]
 usbdev_ioctl+0x26a/0x63c0 drivers/usb/core/devio.c:2827
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:906 [inline]
 __se_sys_ioctl+0xf5/0x170 fs/ioctl.c:892
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f66a6f92399
RSP: 002b:00007fff5feca508 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f66a6f92399
RDX: 0000000000000000 RSI: 0000000041045508 RDI: 0000000000000003
RBP: 00000000000f4240 R08: 00342e6364755f79 R09: 00007fff5feca538
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 00007f66a70096bc R14: 00007fff5feca550 R15: 00007fff5feca540
 </TASK>
INFO: task udevd:5845 blocked for more than 145 seconds.
      Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D stack:26512 pid:5845  tgid:5845  ppid:5197   task_flags:0x400140 flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
 device_lock include/linux/device.h:1030 [inline]
 uevent_show+0x17d/0x340 drivers/base/core.c:2729
 dev_attr_show+0x55/0xc0 drivers/base/core.c:2423
 sysfs_kf_seq_show+0x331/0x4c0 fs/sysfs/file.c:59
 seq_read_iter+0x43f/0xd70 fs/seq_file.c:230
 new_sync_read fs/read_write.c:484 [inline]
 vfs_read+0x975/0xb40 fs/read_write.c:565
 ksys_read+0x18f/0x2b0 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4003516b6a
RSP: 002b:00007ffe4b1873c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000055f132b6b9f0 RCX: 00007f4003516b6a
RDX: 0000000000001000 RSI: 000055f132b2a620 RDI: 0000000000000008
RBP: 000055f132b6b9f0 R08: 0000000000000008 R09: 0000000000000008
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007ffe4b1878a8 R15: 000000000000000a
 </TASK>
INFO: task udevd:5846 blocked for more than 145 seconds.
      Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D stack:25176 pid:5846  tgid:5846  ppid:5197   task_flags:0x400140 flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
 device_lock include/linux/device.h:1030 [inline]
 uevent_show+0x17d/0x340 drivers/base/core.c:2729
 dev_attr_show+0x55/0xc0 drivers/base/core.c:2423
 sysfs_kf_seq_show+0x331/0x4c0 fs/sysfs/file.c:59
 seq_read_iter+0x43f/0xd70 fs/seq_file.c:230
 new_sync_read fs/read_write.c:484 [inline]
 vfs_read+0x975/0xb40 fs/read_write.c:565
 ksys_read+0x18f/0x2b0 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4003516b6a
RSP: 002b:00007ffe4b1873c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000055f132b6b9f0 RCX: 00007f4003516b6a
RDX: 0000000000001000 RSI: 000055f132b2a620 RDI: 0000000000000008
RBP: 000055f132b6b9f0 R08: 0000000000000008 R09: 0000000000000000
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007ffe4b1878a8 R15: 000000000000000a
 </TASK>
INFO: task udevd:5847 blocked for more than 146 seconds.
      Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D stack:26768 pid:5847  tgid:5847  ppid:5197   task_flags:0x400140 flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
 device_lock include/linux/device.h:1030 [inline]
 uevent_show+0x17d/0x340 drivers/base/core.c:2729
 dev_attr_show+0x55/0xc0 drivers/base/core.c:2423
 sysfs_kf_seq_show+0x331/0x4c0 fs/sysfs/file.c:59
 seq_read_iter+0x43f/0xd70 fs/seq_file.c:230
 new_sync_read fs/read_write.c:484 [inline]
 vfs_read+0x975/0xb40 fs/read_write.c:565
 ksys_read+0x18f/0x2b0 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4003516b6a
RSP: 002b:00007ffe4b1873c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000055f132b6b9f0 RCX: 00007f4003516b6a
RDX: 0000000000001000 RSI: 000055f132b2a620 RDI: 0000000000000008
RBP: 000055f132b6b9f0 R08: 0000000000000008 R09: 0000000000000000
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007ffe4b1878a8 R15: 000000000000000a
 </TASK>
INFO: task udevd:5850 blocked for more than 146 seconds.
      Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd           state:D stack:25656 pid:5850  tgid:5850  ppid:5197   task_flags:0x400040 flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
 device_lock include/linux/device.h:1030 [inline]
 uevent_show+0x17d/0x340 drivers/base/core.c:2729
 dev_attr_show+0x55/0xc0 drivers/base/core.c:2423
 sysfs_kf_seq_show+0x331/0x4c0 fs/sysfs/file.c:59
 seq_read_iter+0x43f/0xd70 fs/seq_file.c:230
 new_sync_read fs/read_write.c:484 [inline]
 vfs_read+0x975/0xb40 fs/read_write.c:565
 ksys_read+0x18f/0x2b0 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4003516b6a
RSP: 002b:00007ffe4b1873c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000055f132b6b9f0 RCX: 00007f4003516b6a
RDX: 0000000000001000 RSI: 000055f132b2a620 RDI: 0000000000000008
RBP: 000055f132b6b9f0 R08: 0000000000000008 R09: 0000000000002000
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007ffe4b1878a8 R15: 000000000000000a
 </TASK>
Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings

Showing all locks held in the system:
6 locks held by kworker/0:0/8:
 #0: ffff88801e2d5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline]
 #0: ffff88801e2d5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 kernel/workqueue.c:3317
 #1: ffffc900000d7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline]
 #1: ffffc900000d7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 kernel/workqueue.c:3317
 #2: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #2: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5861
 #3: ffff8880216d7190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #3: ffff8880216d7190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1005
 #4: ffff88807dcb7160 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #4: ffff88807dcb7160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1005
 #5: ffff88807b1e8088 (&ictx->lock){+.+.}-{4:4}, at: imon_init_intf0 drivers/media/rc/imon.c:2233 [inline]
 #5: ffff88807b1e8088 (&ictx->lock){+.+.}-{4:4}, at: imon_probe+0x402/0x3430 drivers/media/rc/imon.c:2434
6 locks held by kworker/0:1/9:
 #0: ffff88801e2d5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline]
 #0: ffff88801e2d5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 kernel/workqueue.c:3317
 #1: ffffc900000e7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline]
 #1: ffffc900000e7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 kernel/workqueue.c:3317
 #2: ffff888144fc9190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #2: ffff888144fc9190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5861
 #3: ffff888020a98190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #3: ffff888020a98190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1005
 #4: ffff88807dcb0160 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #4: ffff88807dcb0160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1005
 #5: ffff88807dcb1088 (&ictx->lock){+.+.}-{4:4}, at: imon_init_intf0 drivers/media/rc/imon.c:2233 [inline]
 #5: ffff88807dcb1088 (&ictx->lock){+.+.}-{4:4}, at: imon_probe+0x402/0x3430 drivers/media/rc/imon.c:2434
6 locks held by kworker/1:0/25:
 #0: ffff88801e2d5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline]
 #0: ffff88801e2d5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 kernel/workqueue.c:3317
 #1: ffffc900001f7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline]
 #1: ffffc900001f7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 kernel/workqueue.c:3317
 #2: ffff888029259190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #2: ffff888029259190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5861
 #3: ffff888035ab5190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #3: ffff888035ab5190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1005
 #4: ffff88807b398160 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #4: ffff88807b398160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1005
 #5: ffff88807b39a088 (&ictx->lock){+.+.}-{4:4}, at: imon_init_intf0 drivers/media/rc/imon.c:2233 [inline]
 #5: ffff88807b39a088 (&ictx->lock){+.+.}-{4:4}, at: imon_probe+0x402/0x3430 drivers/media/rc/imon.c:2434
1 lock held by khungtaskd/30:
 #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
 #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6746
6 locks held by kworker/u8:5/798:
6 locks held by kworker/1:2/975:
 #0: ffff88801e2d5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline]
 #0: ffff88801e2d5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 kernel/workqueue.c:3317
 #1: ffffc90003bafc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline]
 #1: ffffc90003bafc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 kernel/workqueue.c:3317
 #2: ffff888029119190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #2: ffff888029119190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5861
 #3: ffff888035ab4190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #3: ffff888035ab4190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1005
 #4: ffff88807b25c160 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #4: ffff88807b25c160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1005
 #5: ffff88807b25d088 (&ictx->lock){+.+.}-{4:4}, at: imon_init_intf0 drivers/media/rc/imon.c:2233 [inline]
 #5: ffff88807b25d088 (&ictx->lock){+.+.}-{4:4}, at: imon_probe+0x402/0x3430 drivers/media/rc/imon.c:2434
6 locks held by kworker/0:2/978:
 #0: ffff88801e2d5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline]
 #0: ffff88801e2d5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 kernel/workqueue.c:3317
 #1: ffffc90003b47c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline]
 #1: ffffc90003b47c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 kernel/workqueue.c:3317
 #2: ffff888029021190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #2: ffff888029021190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5861
 #3: ffff8880216d5190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #3: ffff8880216d5190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1005
 #4: ffff88807dcb3160 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #4: ffff88807dcb3160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 drivers/base/dd.c:1005
 #5: ffff88807dcb5088 (&ictx->lock){+.+.}-{4:4}, at: imon_init_intf0 drivers/media/rc/imon.c:2233 [inline]
 #5: ffff88807dcb5088 (&ictx->lock){+.+.}-{4:4}, at: imon_probe+0x402/0x3430 drivers/media/rc/imon.c:2434
2 locks held by getty/5585:
 #0: ffff8880358ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 drivers/tty/n_tty.c:2211
4 locks held by udevd/5834:
 #0: ffff88801fb1c9e0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xd70 fs/seq_file.c:182
 #1: ffff888034f4b888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154
 #2: ffff88814cc88a58 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155
 #3: ffff888035ab4190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #3: ffff888035ab4190 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2729
1 lock held by syz-executor287/5836:
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: usbdev_do_ioctl drivers/usb/core/devio.c:2611 [inline]
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x26a/0x63c0 drivers/usb/core/devio.c:2827
1 lock held by syz-executor287/5838:
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: usbdev_do_ioctl drivers/usb/core/devio.c:2611 [inline]
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x26a/0x63c0 drivers/usb/core/devio.c:2827
1 lock held by syz-executor287/5840:
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: usbdev_do_ioctl drivers/usb/core/devio.c:2611 [inline]
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x26a/0x63c0 drivers/usb/core/devio.c:2827
1 lock held by syz-executor287/5841:
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: usbdev_do_ioctl drivers/usb/core/devio.c:2611 [inline]
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x26a/0x63c0 drivers/usb/core/devio.c:2827
1 lock held by syz-executor287/5843:
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: usbdev_do_ioctl drivers/usb/core/devio.c:2611 [inline]
 #0: ffff888144fe9190 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x26a/0x63c0 drivers/usb/core/devio.c:2827
4 locks held by udevd/5845:
 #0: ffff88801fb1c790 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xd70 fs/seq_file.c:182
 #1: ffff88801cf59488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154
 #2: ffff88814cc4de18 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155
 #3: ffff888020a98190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #3: ffff888020a98190 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2729
4 locks held by udevd/5846:
 #0: ffff88807e5010a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xd70 fs/seq_file.c:182
 #1: ffff88803446a888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154
 #2: ffff88814cbe8a58 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155
 #3: ffff888035ab5190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #3: ffff888035ab5190 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2729
4 locks held by udevd/5847:
 #0: ffff88801fb1c8b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xd70 fs/seq_file.c:182
 #1: ffff88801cf58488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154
 #2: ffff88814cc18008 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155
 #3: ffff8880216d5190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #3: ffff8880216d5190 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2729
4 locks held by udevd/5850:
 #0: ffff88801fb1c668 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xd70 fs/seq_file.c:182
 #1: ffff888079be2c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154
 #2: ffff88814cba9b48 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155
 #3: ffff8880216d7190 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1030 [inline]
 #3: ffff8880216d7190 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2729

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:236 [inline]
 watchdog+0x1058/0x10a0 kernel/hung_task.c:399
 kthread+0x7a9/0x920 kernel/kthread.c:464
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.14.0-rc4-syzkaller-00073-g5394eea10651 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:arch_static_branch arch/x86/include/asm/jump_label.h:36 [inline]
RIP: 0010:native_write_msr arch/x86/include/asm/msr.h:149 [inline]
RIP: 0010:wrmsr arch/x86/include/asm/msr.h:256 [inline]
RIP: 0010:native_apic_msr_write+0x39/0x50 arch/x86/include/asm/apic.h:212
Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 93 31 bb 03 0f 1f
RSP: 0018:ffffc90000007d88 EFLAGS: 00000046
RAX: 0000000000000317 RBX: 0000000000000020 RCX: 0000000000000838
RDX: 0000000000000000 RSI: 0000000000000317 RDI: 0000000000000838
RBP: 0000000000000317 R08: ffffffff81b23c49 R09: 1ffffffff207784e
R10: dffffc0000000000 R11: ffffffff816a7380 R12: 000000000000317c
R13: dffffc0000000000 R14: 0000000010005a98 R15: ffff8880b8628340
FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055584ee43cf8 CR3: 0000000033bf8000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 apic_write arch/x86/include/asm/apic.h:405 [inline]
 lapic_next_event+0x11/0x20 arch/x86/kernel/apic/apic.c:415
 clockevents_program_event+0x1c1/0x350 kernel/time/clockevents.c:334
 hrtimer_update_softirq_timer kernel/time/hrtimer.c:1226 [inline]
 hrtimer_run_softirq+0x253/0x2c0 kernel/time/hrtimer.c:1885
 handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561
 __do_softirq kernel/softirq.c:595 [inline]
 invoke_softirq kernel/softirq.c:435 [inline]
 __irq_exit_rcu+0xf7/0x220 kernel/softirq.c:662
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:678
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1049
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:37 [inline]
RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:92 [inline]
RIP: 0010:acpi_safe_halt+0x21/0x30 drivers/acpi/processor_idle.c:112
Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 00 d5 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d c5 ec 88 00 f3 0f 1e fa fb f4 <fa> c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90
RSP: 0018:ffffffff8e807ca8 EFLAGS: 00000246
RAX: ffffffff8e896580 RBX: ffff888141ab6864 RCX: 000000000141b7c1
RDX: 0000000000000001 RSI: ffff888141ab6800 RDI: ffff888141ab6864
RBP: 000000000003a938 R08: ffff8880b863799b R09: 1ffff110170c6f33
R10: dffffc0000000000 R11: ffffffff8c00c010 R12: ffff88802077b000
R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f325720
 acpi_idle_enter+0xe4/0x140 drivers/acpi/processor_idle.c:699
 cpuidle_enter_state+0x109/0x470 drivers/cpuidle/cpuidle.c:268
 cpuidle_enter+0x5d/0xa0 drivers/cpuidle/cpuidle.c:389
 call_cpuidle kernel/sched/idle.c:155 [inline]
 cpuidle_idle_call kernel/sched/idle.c:230 [inline]
 do_idle+0x372/0x5c0 kernel/sched/idle.c:325
 cpu_startup_entry+0x42/0x60 kernel/sched/idle.c:423
 rest_init+0x2dc/0x300 init/main.c:743
 start_kernel+0x484/0x510 init/main.c:1099
 x86_64_start_reservations+0x2a/0x30 arch/x86/kernel/head64.c:515
 x86_64_start_kernel+0x66/0x70 arch/x86/kernel/head64.c:496
 common_startup_64+0x13e/0x147
 </TASK>
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.219 msecs