Extracting prog: 39.370901997s
Minimizing prog: 24m15.773997686s
Simplifying prog options: 0s
Extracting C: 23.947699885s
Simplifying C: 3m24.087396287s


extracting reproducer from 52 programs
testing a last program of every proc
single: executing 12 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-bind$alg-setsockopt$ALG_SET_KEY-accept4-socket$vsock_stream-bind$vsock_stream-listen-socket$vsock_stream-connect$vsock_stream-accept-bpf$MAP_CREATE-bpf$MAP_UPDATE_ELEM-shutdown-recvfrom$unix-sendmsg$nl_route_sched_retired-syz_io_uring_setup-openat$cachefiles-socket$pppl2tp-ioctl$SIOCSIFMTU-getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY-setsockopt$inet_sctp_SCTP_RTOINFO-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r5 = accept(r3, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1200000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r5}, 0x47)
shutdown(r5, 0x0)
recvfrom$unix(r5, 0x0, 0x0, 0x40002060, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
r7 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x501002, 0x0)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r11, 0x8922, &(0x7f00000005c0)={'veth0_vlan\x00', 0xff})
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000000080)={<r12=>0x0, 0x3}, &(0x7f00000000c0)=0xfffffffffffffde8)
setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000100)={r12, 0x2108, 0x3ff, 0x9}, 0x10)
syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0)

program crashed: BUG: stack guard page was hit in io_wq_worker
single: successfully extracted reproducer
found reproducer with 28 syscalls
minimizing guilty program
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-bind$alg-setsockopt$ALG_SET_KEY-accept4-socket$vsock_stream-bind$vsock_stream-listen-socket$vsock_stream-connect$vsock_stream-accept-bpf$MAP_CREATE-bpf$MAP_UPDATE_ELEM-shutdown-recvfrom$unix-sendmsg$nl_route_sched_retired-syz_io_uring_setup-openat$cachefiles-socket$pppl2tp-ioctl$SIOCSIFMTU-getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY-setsockopt$inet_sctp_SCTP_RTOINFO-syz_io_uring_submit
detailed listing:
executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r5 = accept(r3, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1200000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r5}, 0x47)
shutdown(r5, 0x0)
recvfrom$unix(r5, 0x0, 0x0, 0x40002060, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x501002, 0x0)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f00000005c0)={'veth0_vlan\x00', 0xff})
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000080)={<r11=>0x0, 0x3}, &(0x7f00000000c0)=0xfffffffffffffde8)
setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000100)={r11, 0x2108, 0x3ff, 0x9}, 0x10)
syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-bind$alg-setsockopt$ALG_SET_KEY-accept4-socket$vsock_stream-bind$vsock_stream-listen-socket$vsock_stream-connect$vsock_stream-accept-bpf$MAP_CREATE-bpf$MAP_UPDATE_ELEM-shutdown-recvfrom$unix-sendmsg$nl_route_sched_retired-syz_io_uring_setup-openat$cachefiles-socket$pppl2tp-ioctl$SIOCSIFMTU-getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY-setsockopt$inet_sctp_SCTP_RTOINFO-io_uring_enter
detailed listing:
executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r5 = accept(r3, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1200000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r5}, 0x47)
shutdown(r5, 0x0)
recvfrom$unix(r5, 0x0, 0x0, 0x40002060, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
r7 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540), &(0x7f0000000140))
r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x501002, 0x0)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f00000005c0)={'veth0_vlan\x00', 0xff})
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000080)={<r10=>0x0, 0x3}, &(0x7f00000000c0)=0xfffffffffffffde8)
setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000100)={r10, 0x2108, 0x3ff, 0x9}, 0x10)
io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-bind$alg-setsockopt$ALG_SET_KEY-accept4-socket$vsock_stream-bind$vsock_stream-listen-socket$vsock_stream-connect$vsock_stream-accept-bpf$MAP_CREATE-bpf$MAP_UPDATE_ELEM-shutdown-recvfrom$unix-sendmsg$nl_route_sched_retired-syz_io_uring_setup-openat$cachefiles-socket$pppl2tp-ioctl$SIOCSIFMTU-getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r5 = accept(r3, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1200000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r5}, 0x47)
shutdown(r5, 0x0)
recvfrom$unix(r5, 0x0, 0x0, 0x40002060, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
r7 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x501002, 0x0)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r11, 0x8922, &(0x7f00000005c0)={'veth0_vlan\x00', 0xff})
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0xfffffffffffffde8)
syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0)

program crashed: kernel panic: corrupted stack end in corrupted
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-bind$alg-setsockopt$ALG_SET_KEY-accept4-socket$vsock_stream-bind$vsock_stream-listen-socket$vsock_stream-connect$vsock_stream-accept-bpf$MAP_CREATE-bpf$MAP_UPDATE_ELEM-shutdown-recvfrom$unix-sendmsg$nl_route_sched_retired-syz_io_uring_setup-openat$cachefiles-socket$pppl2tp-ioctl$SIOCSIFMTU-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r5 = accept(r3, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1200000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r5}, 0x47)
shutdown(r5, 0x0)
recvfrom$unix(r5, 0x0, 0x0, 0x40002060, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
r7 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x501002, 0x0)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f00000005c0)={'veth0_vlan\x00', 0xff})
syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0)

program crashed: BUG: stack guard page was hit in io_wq_worker
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-bind$alg-setsockopt$ALG_SET_KEY-accept4-socket$vsock_stream-bind$vsock_stream-listen-socket$vsock_stream-connect$vsock_stream-accept-bpf$MAP_CREATE-bpf$MAP_UPDATE_ELEM-shutdown-recvfrom$unix-sendmsg$nl_route_sched_retired-syz_io_uring_setup-openat$cachefiles-socket$pppl2tp-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r5 = accept(r3, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1200000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r5}, 0x47)
shutdown(r5, 0x0)
recvfrom$unix(r5, 0x0, 0x0, 0x40002060, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
r7 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x501002, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0)

program crashed: BUG: stack guard page was hit in io_wq_worker
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-bind$alg-setsockopt$ALG_SET_KEY-accept4-socket$vsock_stream-bind$vsock_stream-listen-socket$vsock_stream-connect$vsock_stream-accept-bpf$MAP_CREATE-bpf$MAP_UPDATE_ELEM-shutdown-recvfrom$unix-sendmsg$nl_route_sched_retired-syz_io_uring_setup-openat$cachefiles-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r5 = accept(r3, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1200000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r5}, 0x47)
shutdown(r5, 0x0)
recvfrom$unix(r5, 0x0, 0x0, 0x40002060, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
r7 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x501002, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0)

program crashed: BUG: stack guard page was hit in io_wq_worker
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-bind$alg-setsockopt$ALG_SET_KEY-accept4-socket$vsock_stream-bind$vsock_stream-listen-socket$vsock_stream-connect$vsock_stream-accept-bpf$MAP_CREATE-bpf$MAP_UPDATE_ELEM-shutdown-recvfrom$unix-sendmsg$nl_route_sched_retired-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r5 = accept(r3, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1200000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r5}, 0x47)
shutdown(r5, 0x0)
recvfrom$unix(r5, 0x0, 0x0, 0x40002060, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
r7 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0)

program crashed: BUG: stack guard page was hit in io_wq_worker
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-bind$alg-setsockopt$ALG_SET_KEY-accept4-socket$vsock_stream-bind$vsock_stream-listen-socket$vsock_stream-connect$vsock_stream-accept-bpf$MAP_CREATE-bpf$MAP_UPDATE_ELEM-shutdown-recvfrom$unix-sendmsg$nl_route_sched_retired-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r5 = accept(r3, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1200000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r5}, 0x47)
shutdown(r5, 0x0)
recvfrom$unix(r5, 0x0, 0x0, 0x40002060, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-bind$alg-setsockopt$ALG_SET_KEY-accept4-socket$vsock_stream-bind$vsock_stream-listen-socket$vsock_stream-connect$vsock_stream-accept-bpf$MAP_CREATE-bpf$MAP_UPDATE_ELEM-shutdown-recvfrom$unix-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r4 = accept(r2, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1200000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r4}, 0x47)
shutdown(r4, 0x0)
recvfrom$unix(r4, 0x0, 0x0, 0x40002060, 0x0, 0x0)
r6 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0)

program crashed: BUG: stack guard page was hit in io_wq_worker
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-bind$alg-setsockopt$ALG_SET_KEY-accept4-socket$vsock_stream-bind$vsock_stream-listen-socket$vsock_stream-connect$vsock_stream-accept-bpf$MAP_CREATE-bpf$MAP_UPDATE_ELEM-shutdown-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r4 = accept(r2, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1200000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r4}, 0x47)
shutdown(r4, 0x0)
r6 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0)

program crashed: BUG: stack guard page was hit in io_wq_worker
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-bind$alg-setsockopt$ALG_SET_KEY-accept4-socket$vsock_stream-bind$vsock_stream-listen-socket$vsock_stream-connect$vsock_stream-accept-bpf$MAP_CREATE-bpf$MAP_UPDATE_ELEM-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r4 = accept(r2, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1200000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r4}, 0x47)
r6 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0)

program crashed: BUG: stack guard page was hit in io_wq_worker
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-bind$alg-setsockopt$ALG_SET_KEY-accept4-socket$vsock_stream-bind$vsock_stream-listen-socket$vsock_stream-connect$vsock_stream-accept-bpf$MAP_CREATE-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
accept(r2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1200000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d7e0590375a329251ef1413fded68d69aca6b5815df853ce383163b46e6d142f5ab15805342aeb3eafb32a2351cdf2fac701ec3158b43ed24377fd633935623a6fadfabe17544be9f3b3ae164fe88efa0791ad33ea7626942c6029babcf31a4dd4ec6536fd378ed0c53e771ef12612b360a08c2b0cfd59682b5f618bd49e7587c1ee728522f2b5a2d53135356eb41b723325c7ef11a2faf6af1356461ceeecd21a14a7a325b38094b44bd8b9614eab81039d1cc154353353c691c121b7c7ed75eb21741a36a9b2cda4ed749ac244d0b82e07f006becbe9e87d53118da2982b5535c74ed649dab8f46ed81b7e4be12f79462288b2ec45b7578cb2a04f1dcd48d47e24bbe3b968e958293390dc9858e370106334913106ebda2cdb6eb785d987dd2e833093d552b7bfdd9d9c1e8ab1081769989a76a8c4ef72463b7579e8e79534f95b12bfc00d7eb06d77f3fcc4"], 0x50)
r4 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0)

program crashed: BUG: stack guard page was hit in io_wq_worker
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-bind$alg-setsockopt$ALG_SET_KEY-accept4-socket$vsock_stream-bind$vsock_stream-listen-socket$vsock_stream-connect$vsock_stream-accept-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
accept(r2, 0x0, 0x0)
r4 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0)

program crashed: BUG: stack guard page was hit in io_wq_worker
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-bind$alg-setsockopt$ALG_SET_KEY-accept4-socket$vsock_stream-bind$vsock_stream-listen-socket$vsock_stream-connect$vsock_stream-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r4 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0)

program crashed: BUG: stack guard page was hit in io_wq_worker
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-bind$alg-setsockopt$ALG_SET_KEY-accept4-socket$vsock_stream-bind$vsock_stream-listen-socket$vsock_stream-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0)

program crashed: BUG: stack guard page was hit in io_wq_worker
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-bind$alg-setsockopt$ALG_SET_KEY-accept4-socket$vsock_stream-bind$vsock_stream-listen-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r2, 0x0)
r3 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0)

program crashed: BUG: stack guard page was hit in io_wq_worker
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-bind$alg-setsockopt$ALG_SET_KEY-accept4-socket$vsock_stream-bind$vsock_stream-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
r3 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0)

program crashed: BUG: stack guard page was hit in io_wq_worker
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-bind$alg-setsockopt$ALG_SET_KEY-accept4-socket$vsock_stream-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r0, 0x0, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r2 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0)

program crashed: BUG: stack guard page was hit in io_wq_worker
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-bind$alg-setsockopt$ALG_SET_KEY-accept4-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0)

program crashed: BUG: stack guard page was hit in io_wq_worker
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-bind$alg-setsockopt$ALG_SET_KEY-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0)

program crashed: BUG: stack guard page was hit in io_wq_worker
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-bind$alg-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r2 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0)

program crashed: BUG: stack guard page was hit in io_wq_worker
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x118)
r1 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)

program crashed: BUG: stack guard page was hit in io_wq_worker
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
r0 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
r0 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x118)
r1 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x118)
r1 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
socket$alg(0x26, 0x5, 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x118)
r1 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x118)
r1 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x118)
r1 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x118)
r1 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x118)
r1 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x118)
r1 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x118)
r1 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x118)
r1 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x118)
r1 = syz_io_uring_setup(0x417a, 0x0, &(0x7f0000000540)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x118)
r1 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, 0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x118)
r1 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r2=>0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x118)
r1 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, 0x0)
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x118)
r1 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
detailed listing:
executing program 0:
socket$alg(0x26, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x118)
r1 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{0x0}], 0x1})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
program crashed: BUG: stack guard page was hit in io_wq_worker
simplifying C reproducer
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
program crashed: BUG: stack guard page was hit in io_wq_worker
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
program crashed: BUG: stack guard page was hit in io_wq_worker
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
program crashed: BUG: stack guard page was hit in io_wq_worker
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
program crashed: BUG: stack guard page was hit in io_wq_worker
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
program crashed: BUG: stack guard page was hit in io_wq_worker
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
program crashed: BUG: stack guard page was hit in io_wq_worker
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-mkdirat-mount$9p_virtio-chdir-openat$cgroup_ro-write$UHID_CREATE2-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter
program crashed: BUG: stack guard page was hit in io_wq_worker
reproducing took 28m43.180015429s
repro crashed as (corrupted=false):
BUG: TASK stack guard page was hit at ffffc900034d7ff8 (stack is ffffc900034d8000..ffffc900034e0000)
Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN NOPTI
CPU: 2 UID: 0 PID: 5942 Comm: iou-wrk-5940 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:kasan_check_range+0x19/0x1a0 mm/kasan/generic.c:188
Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 85 f6 0f 84 50 01 00 00 48 89 f8 41 54 44 0f b6 c2 48 01 f0 <55> 53 0f 82 c6 00 00 00 48 b8 ff ff ff ff ff 7f ff ff 48 39 f8 0f
RSP: 0018:ffffc900034d8000 EFLAGS: 00010082
RAX: ffffffff96e51cc8 RBX: 0000000000000021 RCX: ffffffff8175d18e
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff96e51cc0
RBP: ffffc900034d8158 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff96e51daf R11: 000000000009dbe3 R12: ffff888025064880
R13: 0000000000000200 R14: 0000000000000009 R15: 1ffff9200069b00a
FS:  000055556e7a2380(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc900034d7ff8 CR3: 00000000208ec000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <#DF>
 </#DF>
 <TASK>
 instrument_atomic_read include/linux/instrumented.h:68 [inline]
 _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
 hlock_class+0x4e/0x130 kernel/locking/lockdep.c:228
 mark_lock+0xb5/0xc60 kernel/locking/lockdep.c:4727
 mark_usage kernel/locking/lockdep.c:4670 [inline]
 __lock_acquire+0x9f1/0x3c40 kernel/locking/lockdep.c:5180
 lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5849
 rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
 rcu_read_lock include/linux/rcupdate.h:849 [inline]
 page_ext_get+0x3a/0x310 mm/page_ext.c:525
 __set_page_owner+0x96/0x560 mm/page_owner.c:322
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x2d1/0x350 mm/page_alloc.c:1558
 prep_new_page mm/page_alloc.c:1566 [inline]
 get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3476
 __alloc_pages_noprof+0x223/0x25b0 mm/page_alloc.c:4753
 alloc_pages_mpol_noprof+0x2c9/0x610 mm/mempolicy.c:2269
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2589 [inline]
 new_slab+0x2c9/0x410 mm/slub.c:2642
 ___slab_alloc+0xd7d/0x17a0 mm/slub.c:3830
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3920
 __slab_alloc_node mm/slub.c:3995 [inline]
 slab_alloc_node mm/slub.c:4156 [inline]
 __do_kmalloc_node mm/slub.c:4297 [inline]
 __kmalloc_noprof+0x2ec/0x510 mm/slub.c:4310
 kmalloc_noprof include/linux/slab.h:905 [inline]
 p9_fcall_init+0x97/0x260 net/9p/client.c:233
 p9_tag_alloc+0x21c/0x870 net/9p/client.c:300
 p9_client_prepare_req+0x19f/0x4d0 net/9p/client.c:644
 p9_client_rpc+0x1c3/0xc10 net/9p/client.c:691
 p9_client_flush.isra.0+0x1ff/0x420 net/9p/client.c:609
 p9_client_zc_rpc.constprop.0+0x7d2/0x880 net/9p/client.c:826
 p9_client_read_once+0x443/0x820 net/9p/client.c:1570
 p9_client_read+0x13f/0x1b0 net/9p/client.c:1534
 v9fs_issue_read+0x115/0x340 fs/9p/vfs_addr.c:76
 netfs_retry_read_subrequests fs/netfs/read_retry.c:62 [inline]
 netfs_retry_reads+0x1508/0x1d40 fs/netfs/read_retry.c:234
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_dispatch_unbuffered_reads fs/netfs/direct_read.c:103 [inline]
 netfs_unbuffered_read fs/netfs/direct_read.c:127 [inline]
 netfs_unbuffered_read_iter_locked+0x12e1/0x19a0 fs/netfs/direct_read.c:221
 netfs_unbuffered_read_iter+0xc5/0x100 fs/netfs/direct_read.c:256
 v9fs_file_read_iter+0xbf/0x100 fs/9p/vfs_file.c:361
 io_iter_do_read io_uring/rw.c:770 [inline]
 __io_read+0x320/0x1190 io_uring/rw.c:869
 io_read+0x1e/0x70 io_uring/rw.c:947
 io_issue_sqe+0x175/0x1200 io_uring/io_uring.c:1740
 io_wq_submit_work+0x3fc/0xec0 io_uring/io_uring.c:1849
 io_worker_handle_work+0x4e5/0x1680 io_uring/io-wq.c:601
 io_wq_worker+0x33f/0xdf0 io_uring/io-wq.c:655
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:kasan_check_range+0x19/0x1a0 mm/kasan/generic.c:188
Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 85 f6 0f 84 50 01 00 00 48 89 f8 41 54 44 0f b6 c2 48 01 f0 <55> 53 0f 82 c6 00 00 00 48 b8 ff ff ff ff ff 7f ff ff 48 39 f8 0f
RSP: 0018:ffffc900034d8000 EFLAGS: 00010082
RAX: ffffffff96e51cc8 RBX: 0000000000000021 RCX: ffffffff8175d18e
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff96e51cc0
RBP: ffffc900034d8158 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff96e51daf R11: 000000000009dbe3 R12: ffff888025064880
R13: 0000000000000200 R14: 0000000000000009 R15: 1ffff9200069b00a
FS:  000055556e7a2380(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc900034d7ff8 CR3: 00000000208ec000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	00 90 90 90 90 90    	add    %dl,-0x6f6f6f70(%rax)
   6:	90                   	nop
   7:	90                   	nop
   8:	90                   	nop
   9:	90                   	nop
   a:	90                   	nop
   b:	90                   	nop
   c:	90                   	nop
   d:	90                   	nop
   e:	90                   	nop
   f:	90                   	nop
  10:	90                   	nop
  11:	66 0f 1f 00          	nopw   (%rax)
  15:	48 85 f6             	test   %rsi,%rsi
  18:	0f 84 50 01 00 00    	je     0x16e
  1e:	48 89 f8             	mov    %rdi,%rax
  21:	41 54                	push   %r12
  23:	44 0f b6 c2          	movzbl %dl,%r8d
  27:	48 01 f0             	add    %rsi,%rax
* 2a:	55                   	push   %rbp <-- trapping instruction
  2b:	53                   	push   %rbx
  2c:	0f 82 c6 00 00 00    	jb     0xf8
  32:	48 b8 ff ff ff ff ff 	movabs $0xffff7fffffffffff,%rax
  39:	7f ff ff
  3c:	48 39 f8             	cmp    %rdi,%rax
  3f:	0f                   	.byte 0xf

final repro crashed as (corrupted=false):
BUG: TASK stack guard page was hit at ffffc900034d7ff8 (stack is ffffc900034d8000..ffffc900034e0000)
Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN NOPTI
CPU: 2 UID: 0 PID: 5942 Comm: iou-wrk-5940 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:kasan_check_range+0x19/0x1a0 mm/kasan/generic.c:188
Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 85 f6 0f 84 50 01 00 00 48 89 f8 41 54 44 0f b6 c2 48 01 f0 <55> 53 0f 82 c6 00 00 00 48 b8 ff ff ff ff ff 7f ff ff 48 39 f8 0f
RSP: 0018:ffffc900034d8000 EFLAGS: 00010082
RAX: ffffffff96e51cc8 RBX: 0000000000000021 RCX: ffffffff8175d18e
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff96e51cc0
RBP: ffffc900034d8158 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff96e51daf R11: 000000000009dbe3 R12: ffff888025064880
R13: 0000000000000200 R14: 0000000000000009 R15: 1ffff9200069b00a
FS:  000055556e7a2380(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc900034d7ff8 CR3: 00000000208ec000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <#DF>
 </#DF>
 <TASK>
 instrument_atomic_read include/linux/instrumented.h:68 [inline]
 _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
 hlock_class+0x4e/0x130 kernel/locking/lockdep.c:228
 mark_lock+0xb5/0xc60 kernel/locking/lockdep.c:4727
 mark_usage kernel/locking/lockdep.c:4670 [inline]
 __lock_acquire+0x9f1/0x3c40 kernel/locking/lockdep.c:5180
 lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5849
 rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
 rcu_read_lock include/linux/rcupdate.h:849 [inline]
 page_ext_get+0x3a/0x310 mm/page_ext.c:525
 __set_page_owner+0x96/0x560 mm/page_owner.c:322
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x2d1/0x350 mm/page_alloc.c:1558
 prep_new_page mm/page_alloc.c:1566 [inline]
 get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3476
 __alloc_pages_noprof+0x223/0x25b0 mm/page_alloc.c:4753
 alloc_pages_mpol_noprof+0x2c9/0x610 mm/mempolicy.c:2269
 alloc_slab_page mm/slub.c:2423 [inline]
 allocate_slab mm/slub.c:2589 [inline]
 new_slab+0x2c9/0x410 mm/slub.c:2642
 ___slab_alloc+0xd7d/0x17a0 mm/slub.c:3830
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3920
 __slab_alloc_node mm/slub.c:3995 [inline]
 slab_alloc_node mm/slub.c:4156 [inline]
 __do_kmalloc_node mm/slub.c:4297 [inline]
 __kmalloc_noprof+0x2ec/0x510 mm/slub.c:4310
 kmalloc_noprof include/linux/slab.h:905 [inline]
 p9_fcall_init+0x97/0x260 net/9p/client.c:233
 p9_tag_alloc+0x21c/0x870 net/9p/client.c:300
 p9_client_prepare_req+0x19f/0x4d0 net/9p/client.c:644
 p9_client_rpc+0x1c3/0xc10 net/9p/client.c:691
 p9_client_flush.isra.0+0x1ff/0x420 net/9p/client.c:609
 p9_client_zc_rpc.constprop.0+0x7d2/0x880 net/9p/client.c:826
 p9_client_read_once+0x443/0x820 net/9p/client.c:1570
 p9_client_read+0x13f/0x1b0 net/9p/client.c:1534
 v9fs_issue_read+0x115/0x340 fs/9p/vfs_addr.c:76
 netfs_retry_read_subrequests fs/netfs/read_retry.c:62 [inline]
 netfs_retry_reads+0x1508/0x1d40 fs/netfs/read_retry.c:234
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237
 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374
 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409
 netfs_dispatch_unbuffered_reads fs/netfs/direct_read.c:103 [inline]
 netfs_unbuffered_read fs/netfs/direct_read.c:127 [inline]
 netfs_unbuffered_read_iter_locked+0x12e1/0x19a0 fs/netfs/direct_read.c:221
 netfs_unbuffered_read_iter+0xc5/0x100 fs/netfs/direct_read.c:256
 v9fs_file_read_iter+0xbf/0x100 fs/9p/vfs_file.c:361
 io_iter_do_read io_uring/rw.c:770 [inline]
 __io_read+0x320/0x1190 io_uring/rw.c:869
 io_read+0x1e/0x70 io_uring/rw.c:947
 io_issue_sqe+0x175/0x1200 io_uring/io_uring.c:1740
 io_wq_submit_work+0x3fc/0xec0 io_uring/io_uring.c:1849
 io_worker_handle_work+0x4e5/0x1680 io_uring/io-wq.c:601
 io_wq_worker+0x33f/0xdf0 io_uring/io-wq.c:655
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:kasan_check_range+0x19/0x1a0 mm/kasan/generic.c:188
Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 85 f6 0f 84 50 01 00 00 48 89 f8 41 54 44 0f b6 c2 48 01 f0 <55> 53 0f 82 c6 00 00 00 48 b8 ff ff ff ff ff 7f ff ff 48 39 f8 0f
RSP: 0018:ffffc900034d8000 EFLAGS: 00010082
RAX: ffffffff96e51cc8 RBX: 0000000000000021 RCX: ffffffff8175d18e
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff96e51cc0
RBP: ffffc900034d8158 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff96e51daf R11: 000000000009dbe3 R12: ffff888025064880
R13: 0000000000000200 R14: 0000000000000009 R15: 1ffff9200069b00a
FS:  000055556e7a2380(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc900034d7ff8 CR3: 00000000208ec000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	00 90 90 90 90 90    	add    %dl,-0x6f6f6f70(%rax)
   6:	90                   	nop
   7:	90                   	nop
   8:	90                   	nop
   9:	90                   	nop
   a:	90                   	nop
   b:	90                   	nop
   c:	90                   	nop
   d:	90                   	nop
   e:	90                   	nop
   f:	90                   	nop
  10:	90                   	nop
  11:	66 0f 1f 00          	nopw   (%rax)
  15:	48 85 f6             	test   %rsi,%rsi
  18:	0f 84 50 01 00 00    	je     0x16e
  1e:	48 89 f8             	mov    %rdi,%rax
  21:	41 54                	push   %r12
  23:	44 0f b6 c2          	movzbl %dl,%r8d
  27:	48 01 f0             	add    %rsi,%rax
* 2a:	55                   	push   %rbp <-- trapping instruction
  2b:	53                   	push   %rbx
  2c:	0f 82 c6 00 00 00    	jb     0xf8
  32:	48 b8 ff ff ff ff ff 	movabs $0xffff7fffffffffff,%rax
  39:	7f ff ff
  3c:	48 39 f8             	cmp    %rdi,%rax
  3f:	0f                   	.byte 0xf