Extracting prog: 38.40114485s Minimizing prog: 25m12.844814308s Simplifying prog options: 2m50.666112183s Extracting C: 56.524173762s Simplifying C: 0s extracting reproducer from 31 programs testing a last program of every proc single: executing 6 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) getsockopt$sock_int(r5, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r3, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program crashed: WARNING: locking bug in __set_page_owner single: successfully extracted reproducer found reproducer with 13 syscalls minimizing guilty program testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) getsockopt$sock_int(r5, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) getsockopt$sock_int(r5, 0x1, 0x4a, 0x0, &(0x7f0000000080)) write(r3, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-accept$alg-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept$alg(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r3, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r3, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept$alg(r4, 0x0, 0x0) getsockopt$sock_int(r5, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r3, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r3 = socket(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(r4, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r3, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) getsockopt$sock_int(r4, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(0xffffffffffffffff, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-socket-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) getsockopt$sock_int(r4, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r2, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) getsockopt$sock_int(r4, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r2, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) getsockopt$sock_int(r4, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r2, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)=0x1000, 0x12) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) getsockopt$sock_int(r3, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r1, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000003c0)=0x1000, 0x12) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) getsockopt$sock_int(r4, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r2, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) getsockopt$sock_int(r5, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r3, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) getsockopt$sock_int(r5, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r3, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) getsockopt$sock_int(r5, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r3, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) getsockopt$sock_int(r5, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r3, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) getsockopt$sock_int(r5, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r3, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) getsockopt$sock_int(r5, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r3, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) getsockopt$sock_int(r5, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r3, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) getsockopt$sock_int(r5, 0x1, 0x4a, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r3, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) getsockopt$sock_int(r5, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) write(r3, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) getsockopt$sock_int(r5, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r3, 0x0, 0x0) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) getsockopt$sock_int(r5, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r3, &(0x7f0000000100), 0x0) program did not crash extracting C reproducer testing compiled C program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write program did not crash simplifying guilty program options testing program (duration=50.208291841s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) getsockopt$sock_int(r5, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r3, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) getsockopt$sock_int(r5, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r3, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program did not crash testing program (duration=50.208291841s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_int-write$cgroup_int-syz_open_dev$tty1-ioctl$KDSETKEYCODE-socket-socket$alg-bind$alg-accept$alg-getsockopt$sock_int-setsockopt$netlink_NETLINK_TX_RING-write detailed listing: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) getsockopt$sock_int(r5, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r3, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) program did not crash reproducing took 29m38.436271745s repro crashed as (corrupted=false): ============================= [ BUG: Invalid wait context ] 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 Not tainted ----------------------------- syz-executor/5936 is trying to lock: ffffffff8e3a4278 (stack_list_lock){-.-.}-{3:3}, at: add_stack_record_to_list mm/page_owner.c:182 [inline] ffffffff8e3a4278 (stack_list_lock){-.-.}-{3:3}, at: inc_stack_record_count mm/page_owner.c:214 [inline] ffffffff8e3a4278 (stack_list_lock){-.-.}-{3:3}, at: __set_page_owner+0x3ea/0x560 mm/page_owner.c:329 other info that might help us debug this: context-{2:2} 1 lock held by syz-executor/5936: #0: ffff88806a93ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:598 stack backtrace: CPU: 3 UID: 0 PID: 5936 Comm: syz-executor Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_lock_invalid_wait_context kernel/locking/lockdep.c:4826 [inline] check_wait_context kernel/locking/lockdep.c:4898 [inline] __lock_acquire+0x878/0x3c40 kernel/locking/lockdep.c:5176 lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5849 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:162 add_stack_record_to_list mm/page_owner.c:182 [inline] inc_stack_record_count mm/page_owner.c:214 [inline] __set_page_owner+0x3ea/0x560 mm/page_owner.c:329 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x2d1/0x350 mm/page_alloc.c:1558 prep_new_page mm/page_alloc.c:1566 [inline] get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3476 __alloc_pages_noprof+0x223/0x25b0 mm/page_alloc.c:4753 alloc_pages_mpol_noprof+0x2c9/0x610 mm/mempolicy.c:2269 stack_depot_save_flags+0x8aa/0x9c0 lib/stackdepot.c:627 kasan_save_stack+0x42/0x60 mm/kasan/common.c:48 __kasan_record_aux_stack+0xba/0xd0 mm/kasan/generic.c:544 task_work_add+0xc0/0x3b0 kernel/task_work.c:77 task_tick_numa kernel/sched/fair.c:3616 [inline] task_tick_fair+0x524/0x8e0 kernel/sched/fair.c:13101 sched_tick+0x1dd/0x4f0 kernel/sched/core.c:5652 update_process_times+0x19c/0x2d0 kernel/time/timer.c:2524 tick_sched_handle kernel/time/tick-sched.c:276 [inline] tick_nohz_handler+0x376/0x530 kernel/time/tick-sched.c:297 __run_hrtimer kernel/time/hrtimer.c:1739 [inline] __hrtimer_run_queues+0x5fb/0xae0 kernel/time/hrtimer.c:1803 hrtimer_interrupt+0x392/0x8e0 kernel/time/hrtimer.c:1865 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline] __sysvec_apic_timer_interrupt+0x10f/0x400 arch/x86/kernel/apic/apic.c:1055 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0033:0x7f0847a46038 Code: 20 c7 44 24 0c 30 00 00 00 48 89 44 24 18 e8 9f 83 0e 00 48 8b 3d 80 5b 30 00 e8 63 e2 0e 00 44 89 65 00 48 81 c4 d0 00 00 00 <5b> 5d 41 5c c3 0f 1f 00 55 48 89 fe 31 c0 53 48 89 fb 48 8d 3d ed RSP: 002b:00007ffd913565f0 EFLAGS: 00000206 RAX: 0000000000000000 RBX: 00007f0847c19ee8 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 00000000000008ba RDI: 00007f0847c19ee8 RBP: 00007ffd91356910 R08: 000000000001df88 R09: 0000000000000014 R10: 0000000000000001 R11: 000000000000001e R12: 00007ffd91356970 R13: 0000555572f257d0 R14: 00007ffd91356690 R15: 00007ffd91356760 final repro crashed as (corrupted=false): ============================= [ BUG: Invalid wait context ] 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 Not tainted ----------------------------- syz-executor/5936 is trying to lock: ffffffff8e3a4278 (stack_list_lock){-.-.}-{3:3}, at: add_stack_record_to_list mm/page_owner.c:182 [inline] ffffffff8e3a4278 (stack_list_lock){-.-.}-{3:3}, at: inc_stack_record_count mm/page_owner.c:214 [inline] ffffffff8e3a4278 (stack_list_lock){-.-.}-{3:3}, at: __set_page_owner+0x3ea/0x560 mm/page_owner.c:329 other info that might help us debug this: context-{2:2} 1 lock held by syz-executor/5936: #0: ffff88806a93ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:598 stack backtrace: CPU: 3 UID: 0 PID: 5936 Comm: syz-executor Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_lock_invalid_wait_context kernel/locking/lockdep.c:4826 [inline] check_wait_context kernel/locking/lockdep.c:4898 [inline] __lock_acquire+0x878/0x3c40 kernel/locking/lockdep.c:5176 lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5849 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:162 add_stack_record_to_list mm/page_owner.c:182 [inline] inc_stack_record_count mm/page_owner.c:214 [inline] __set_page_owner+0x3ea/0x560 mm/page_owner.c:329 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x2d1/0x350 mm/page_alloc.c:1558 prep_new_page mm/page_alloc.c:1566 [inline] get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3476 __alloc_pages_noprof+0x223/0x25b0 mm/page_alloc.c:4753 alloc_pages_mpol_noprof+0x2c9/0x610 mm/mempolicy.c:2269 stack_depot_save_flags+0x8aa/0x9c0 lib/stackdepot.c:627 kasan_save_stack+0x42/0x60 mm/kasan/common.c:48 __kasan_record_aux_stack+0xba/0xd0 mm/kasan/generic.c:544 task_work_add+0xc0/0x3b0 kernel/task_work.c:77 task_tick_numa kernel/sched/fair.c:3616 [inline] task_tick_fair+0x524/0x8e0 kernel/sched/fair.c:13101 sched_tick+0x1dd/0x4f0 kernel/sched/core.c:5652 update_process_times+0x19c/0x2d0 kernel/time/timer.c:2524 tick_sched_handle kernel/time/tick-sched.c:276 [inline] tick_nohz_handler+0x376/0x530 kernel/time/tick-sched.c:297 __run_hrtimer kernel/time/hrtimer.c:1739 [inline] __hrtimer_run_queues+0x5fb/0xae0 kernel/time/hrtimer.c:1803 hrtimer_interrupt+0x392/0x8e0 kernel/time/hrtimer.c:1865 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline] __sysvec_apic_timer_interrupt+0x10f/0x400 arch/x86/kernel/apic/apic.c:1055 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0033:0x7f0847a46038 Code: 20 c7 44 24 0c 30 00 00 00 48 89 44 24 18 e8 9f 83 0e 00 48 8b 3d 80 5b 30 00 e8 63 e2 0e 00 44 89 65 00 48 81 c4 d0 00 00 00 <5b> 5d 41 5c c3 0f 1f 00 55 48 89 fe 31 c0 53 48 89 fb 48 8d 3d ed RSP: 002b:00007ffd913565f0 EFLAGS: 00000206 RAX: 0000000000000000 RBX: 00007f0847c19ee8 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 00000000000008ba RDI: 00007f0847c19ee8 RBP: 00007ffd91356910 R08: 000000000001df88 R09: 0000000000000014 R10: 0000000000000001 R11: 000000000000001e R12: 00007ffd91356970 R13: 0000555572f257d0 R14: 00007ffd91356690 R15: 00007ffd91356760