Extracting prog: 27m50.909410216s Minimizing prog: 1h40m42.030536035s Simplifying prog options: 0s Extracting C: 2m22.732142418s Simplifying C: 43m19.287790182s extracting reproducer from 59 programs testing a last program of every proc single: executing 14 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-socket$kcm-socket$inet6_sctp-sendto$inet6-setsockopt$inet_sctp6_SCTP_AUTO_ASCONF-sendmsg$kcm-socket$nl_route-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_WOL_SET-ioctl$BTRFS_IOC_GET_SUBVOL_INFO-syz_open_dev$tty20-socket$nl_route-socket$nl_xfrm-sendmsg$nl_xfrm-ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF-ioctl$BTRFS_IOC_INO_LOOKUP_USER detailed listing: executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0xfe}}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000019640)={0x44, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x4}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_WOL_MODES={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x15}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="df000000"], 0x14c}}, 0x4810) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000600)={0xbfe6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x8d, "e59d3d04067718"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001880)={r7, 0x0, "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", "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"}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io$cdc_ecm-socket$nl_netfilter-sendmsg$IPCTNL_MSG_CT_NEW-syz_usb_control_io-syz_usb_control_io-syz_open_dev$ttys-openat$nullb-sendfile-ppoll-ioctl$TIOCSETD-socket$nl_xfrm-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x0, 0x17, 0x1, "ef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x83, 0x2, "93bd"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000040)={0x0, 0xe, 0x2, "29d8"}, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0x70}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001c00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x40, 0x13, 0x3, "03caa0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2f02, 0x0) sendfile(r2, r3, 0x0, 0x2000fb) ppoll(&(0x7f00000000c0)=[{r2, 0x100}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x11) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a"], 0x104}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$l2tp-bind$inet-bind$l2tp-bind$inet6-sendto$inet6-sendmmsg$sock-shutdown-close_range-futex-futex-landlock_create_ruleset-syz_open_dev$vbi-write-socket$inet6-socket$netlink-writev-openat$tun-ioctl$TUNSETIFF-readv-landlock_restrict_self-ioctl$AUTOFS_DEV_IOCTL_REQUESTER-setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ-mmap-mkdir-mount-chdir-openat$incfs-fchown-socket$kcm-sendmsg$kcm detailed listing: executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x1}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="38827300", 0x4}], 0x1}}], 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f00000001c0), 0x80, 0x1, 0x0, &(0x7f0000000180), 0x20000) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2201}, 0x18, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) write(r2, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560aff820fffff5bab00070000940f6a0325010ebc000000000000008000f0fffeffe009005300fff5dd00000010000100030c100000000000224e00"/88, 0x58}], 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000940)=""/4100, 0x1004}], 0x1) landlock_restrict_self(r1, 0xf) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x111, 0x2, 0x1, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='\x03{\x00\x00\x00\x00\x00\x00') chdir(&(0x7f0000000280)='./file1\x00') r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x181ac1, 0x0) fchown(r6, 0xee01, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0040000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120400010003080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000020000080) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-pipe-fsopen-socket$inet_udp-ioctl$sock_SIOCETHTOOL-fsconfig$FSCONFIG_SET_FD-write$tun-syz_usb_connect$uac2-fsconfig$FSCONFIG_CMD_CREATE-fsmount-openat$cgroup_ro-sendmsg$IPSET_CMD_CREATE-write$cgroup_subtree-mmap-syz_clone-setpgid-setpgid-fchdir-chdir-sendmsg$nl_generic-connect$pppl2tp-openat$cgroup_ro-write$cgroup_subtree-mmap-socket$inet_icmp_raw-setsockopt$inet_buf-lstat-mount$overlay-openat$dir-mount detailed listing: executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000a80)={'veth0_to_bond\x00', &(0x7f0000001040)=@ethtool_flash={0x26, 0x8000, './file0\x00'}}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) syz_usb_connect$uac2(0x3, 0x86, &(0x7f0000000080)=ANY=[@ANYBLOB="120150020000004082057d004000010203010902740003012b4006080b0201010320080904000000010120000924010080090900090904010000010220000904010101010220000b2401020003310b068d9a09050109000232000908250102300001000904020000010220000904"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='P'], 0x50}}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) fchdir(r3) chdir(&(0x7f0000000080)='./file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @remote}}}, 0x3a) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r7, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='\x00', 0x0, 0x4, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file0\x00', 0x40, 0x80) mount(&(0x7f0000000100)=@nullb, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000000)='romfs\x00', 0x2008087, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-ioctl$sock_inet_SIOCSIFNETMASK-socketpair$unix-connect$unix-sched_setscheduler-sched_setscheduler-openat$tun-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun-write$tun-getrandom-madvise-madvise-madvise-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-ioctl$UFFDIO_COPY-ioctl$DVB_DEMUX_DMX_SET_FILTER-ioctl$DVB_DEMUX_DMX_SET_FILTER detailed listing: executing program 0: r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r1 = getpid() r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r1, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) (async) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000400)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0xa71, {"815c01f53ede7560e2cf57e0c4462023", "e0285a9a8697e253fee604c38842ffa6", "d82173682e63dacc724477e1204d3f56"}, 0x2, 0x6}) (async) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0xa71, {"815c01f53ede7560e2cf57e0c4462023", "e0285a9a8697e253fee604c38842ffa6", "d82173682e63dacc724477e1204d3f56"}, 0x2, 0x6}) program crashed: general protection fault in rwsem_mark_wake single: successfully extracted reproducer found reproducer with 30 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-ioctl$sock_inet_SIOCSIFNETMASK-socketpair$unix-connect$unix-sched_setscheduler-sched_setscheduler-openat$tun-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun-write$tun-getrandom-madvise-madvise-madvise-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-ioctl$UFFDIO_COPY-ioctl$DVB_DEMUX_DMX_SET_FILTER detailed listing: executing program 0: r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r1 = getpid() r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r1, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) (async) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000400)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0xa71, {"815c01f53ede7560e2cf57e0c4462023", "e0285a9a8697e253fee604c38842ffa6", "d82173682e63dacc724477e1204d3f56"}, 0x2, 0x6}) (async) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-ioctl$sock_inet_SIOCSIFNETMASK-socketpair$unix-connect$unix-sched_setscheduler-sched_setscheduler-openat$tun-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun-write$tun-getrandom-madvise-madvise-madvise-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-ioctl$UFFDIO_COPY detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) (async) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000400)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-ioctl$sock_inet_SIOCSIFNETMASK-socketpair$unix-connect$unix-sched_setscheduler-sched_setscheduler-openat$tun-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun-write$tun-getrandom-madvise-madvise-madvise-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) (async) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-ioctl$sock_inet_SIOCSIFNETMASK-socketpair$unix-connect$unix-sched_setscheduler-sched_setscheduler-openat$tun-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun-write$tun-getrandom-madvise-madvise-madvise-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) (async) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-ioctl$sock_inet_SIOCSIFNETMASK-socketpair$unix-connect$unix-sched_setscheduler-sched_setscheduler-openat$tun-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun-write$tun-getrandom-madvise-madvise-madvise-userfaultfd-ioctl$UFFDIO_API detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) (async) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-ioctl$sock_inet_SIOCSIFNETMASK-socketpair$unix-connect$unix-sched_setscheduler-sched_setscheduler-openat$tun-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun-write$tun-getrandom-madvise-madvise-madvise-userfaultfd detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) (async) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) userfaultfd(0x1) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-ioctl$sock_inet_SIOCSIFNETMASK-socketpair$unix-connect$unix-sched_setscheduler-sched_setscheduler-openat$tun-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun-write$tun-getrandom-madvise-madvise-madvise detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) (async) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-ioctl$sock_inet_SIOCSIFNETMASK-socketpair$unix-connect$unix-sched_setscheduler-sched_setscheduler-openat$tun-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun-write$tun-getrandom-madvise-madvise detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) (async) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-ioctl$sock_inet_SIOCSIFNETMASK-socketpair$unix-connect$unix-sched_setscheduler-sched_setscheduler-openat$tun-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun-write$tun-getrandom-madvise detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) (async) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-ioctl$sock_inet_SIOCSIFNETMASK-socketpair$unix-connect$unix-sched_setscheduler-sched_setscheduler-openat$tun-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun-write$tun-getrandom-madvise detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) (async) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-ioctl$sock_inet_SIOCSIFNETMASK-socketpair$unix-connect$unix-sched_setscheduler-sched_setscheduler-openat$tun-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun-write$tun-madvise-madvise detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) (async) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-ioctl$sock_inet_SIOCSIFNETMASK-socketpair$unix-connect$unix-sched_setscheduler-sched_setscheduler-openat$tun-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun-getrandom-madvise-madvise detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd000015000000000005006300000000120000fc020000000000000000150000000001ff0200000000000000000000000000013c000004000000"], 0x48) (async) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-ioctl$sock_inet_SIOCSIFNETMASK-socketpair$unix-connect$unix-sched_setscheduler-sched_setscheduler-openat$tun-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-getrandom-madvise-madvise detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-ioctl$sock_inet_SIOCSIFNETMASK-socketpair$unix-connect$unix-sched_setscheduler-sched_setscheduler-openat$tun-openat$tun-ioctl$TUNSETIFF-socket$kcm-getrandom-madvise-madvise detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-ioctl$sock_inet_SIOCSIFNETMASK-socketpair$unix-connect$unix-sched_setscheduler-sched_setscheduler-openat$tun-openat$tun-ioctl$TUNSETIFF-getrandom-madvise-madvise detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-ioctl$sock_inet_SIOCSIFNETMASK-socketpair$unix-connect$unix-sched_setscheduler-sched_setscheduler-openat$tun-openat$tun-getrandom-madvise-madvise detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-ioctl$sock_inet_SIOCSIFNETMASK-socketpair$unix-connect$unix-sched_setscheduler-sched_setscheduler-openat$tun-getrandom-madvise-madvise detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-ioctl$sock_inet_SIOCSIFNETMASK-socketpair$unix-connect$unix-sched_setscheduler-sched_setscheduler-getrandom-madvise-madvise detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-ioctl$sock_inet_SIOCSIFNETMASK-socketpair$unix-connect$unix-sched_setscheduler-getrandom-madvise-madvise detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-ioctl$sock_inet_SIOCSIFNETMASK-socketpair$unix-connect$unix-getrandom-madvise-madvise detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-ioctl$sock_inet_SIOCSIFNETMASK-socketpair$unix-sched_setscheduler-getrandom-madvise-madvise detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-ioctl$sock_inet_SIOCSIFNETMASK-sched_setscheduler-getrandom-madvise-madvise detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-sched_setscheduler-getrandom-madvise-madvise detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000140)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-getrandom-madvise-madvise detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-getrandom-madvise-madvise detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4, 0x3, 0x1c, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-syz_open_dev$usbfs-sched_setscheduler-getrandom-madvise-madvise detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-getpid-sched_setscheduler-getrandom-madvise-madvise detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-prlimit64-sched_setscheduler-getrandom-madvise-madvise detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-sched_setscheduler-getrandom-madvise-madvise detailed listing: executing program 0: syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) program crashed: general protection fault in rwsem_mark_wake testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise detailed listing: executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getrandom(0x0, 0x0, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) program did not crash extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise program crashed: general protection fault in rwsem_mark_wake simplifying C reproducer testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise program crashed: general protection fault in rwsem_mark_wake testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise program crashed: general protection fault in rwsem_mark_wake testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise program crashed: general protection fault in rwsem_mark_wake testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise program crashed: general protection fault in rwsem_mark_wake testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise program crashed: general protection fault in rwsem_mark_wake testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise program crashed: general protection fault in rwsem_mark_wake testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise program crashed: general protection fault in rwsem_mark_wake testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise program crashed: general protection fault in rwsem_mark_wake testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise program crashed: general protection fault in rwsem_mark_wake testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise program crashed: general protection fault in rwsem_mark_wake testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise program crashed: general protection fault in rwsem_mark_wake testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) program crashed: general protection fault in rwsem_mark_wake validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) program crashed: general protection fault in rwsem_mark_wake validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getrandom-madvise-madvise detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) program crashed: general protection fault in rwsem_mark_wake validation run: crashed=true reproducing took 2h59m30.17870713s repro crashed as (corrupted=false): Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] CPU: 1 UID: 0 PID: 6058 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 kernel/locking/rwsem.c:445 Code: 01 00 74 08 4c 89 f7 e8 e4 c2 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be RSP: 0018:ffffc900034679a0 EFLAGS: 00010006 RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 RDX: 1ffff9200068cf40 RSI: ffffffff8e4a660a RDI: ffffffff8c4a5c80 RBP: ffffc90003467aa0 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffff5200068cf50 R12: 0000000000000000 R13: ffff8880784982d0 R14: 0000000000000018 R15: ffffc90003467c20 FS: 0000555571564500(0000) GS:ffff888124ee0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200001000000 CR3: 000000007268c000 CR4: 00000000003526f0 Call Trace: rwsem_del_wake_waiter+0x25d/0x2e0 kernel/locking/rwsem.c:612 rwsem_down_write_slowpath+0xa6f/0x1080 kernel/locking/rwsem.c:1234 __down_write_common kernel/locking/rwsem.c:1347 [inline] __down_write_killable kernel/locking/rwsem.c:1361 [inline] down_write_killable+0x1eb/0x240 kernel/locking/rwsem.c:1639 mmap_write_lock_killable include/linux/mmap_lock.h:554 [inline] vm_mmap_pgoff+0x234/0x4f0 mm/util.c:579 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7722f9c502 Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 RSP: 002b:00007fff2f3f99a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7722f9c502 RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 R10: 0000000000020022 R11: 0000000000000246 R12: 00007fff2f3f9b10 R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 kernel/locking/rwsem.c:445 Code: 01 00 74 08 4c 89 f7 e8 e4 c2 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be RSP: 0018:ffffc900034679a0 EFLAGS: 00010006 RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 RDX: 1ffff9200068cf40 RSI: ffffffff8e4a660a RDI: ffffffff8c4a5c80 RBP: ffffc90003467aa0 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffff5200068cf50 R12: 0000000000000000 R13: ffff8880784982d0 R14: 0000000000000018 R15: ffffc90003467c20 FS: 0000555571564500(0000) GS:ffff888124ee0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200001000000 CR3: 000000007268c000 CR4: 00000000003526f0 ---------------- Code disassembly (best guess): 0: 01 00 add %eax,(%rax) 2: 74 08 je 0xc 4: 4c 89 f7 mov %r14,%rdi 7: e8 e4 c2 8d 00 call 0x8dc2f0 c: 4c 89 74 24 10 mov %r14,0x10(%rsp) 11: 4d 8b 26 mov (%r14),%r12 14: 4d 8d 74 24 18 lea 0x18(%r12),%r14 19: 4c 89 f0 mov %r14,%rax 1c: 48 c1 e8 03 shr $0x3,%rax 20: 48 b9 00 00 00 00 00 movabs $0xdffffc0000000000,%rcx 27: fc ff df * 2a: 0f b6 04 08 movzbl (%rax,%rcx,1),%eax <-- trapping instruction 2e: 84 c0 test %al,%al 30: 0f 85 75 06 00 00 jne 0x6ab 36: 41 83 3e 00 cmpl $0x0,(%r14) 3a: 74 64 je 0xa0 3c: 4c 89 ef mov %r13,%rdi 3f: be .byte 0xbe final repro crashed as (corrupted=false): Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] CPU: 1 UID: 0 PID: 6058 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 kernel/locking/rwsem.c:445 Code: 01 00 74 08 4c 89 f7 e8 e4 c2 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be RSP: 0018:ffffc900034679a0 EFLAGS: 00010006 RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 RDX: 1ffff9200068cf40 RSI: ffffffff8e4a660a RDI: ffffffff8c4a5c80 RBP: ffffc90003467aa0 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffff5200068cf50 R12: 0000000000000000 R13: ffff8880784982d0 R14: 0000000000000018 R15: ffffc90003467c20 FS: 0000555571564500(0000) GS:ffff888124ee0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200001000000 CR3: 000000007268c000 CR4: 00000000003526f0 Call Trace: rwsem_del_wake_waiter+0x25d/0x2e0 kernel/locking/rwsem.c:612 rwsem_down_write_slowpath+0xa6f/0x1080 kernel/locking/rwsem.c:1234 __down_write_common kernel/locking/rwsem.c:1347 [inline] __down_write_killable kernel/locking/rwsem.c:1361 [inline] down_write_killable+0x1eb/0x240 kernel/locking/rwsem.c:1639 mmap_write_lock_killable include/linux/mmap_lock.h:554 [inline] vm_mmap_pgoff+0x234/0x4f0 mm/util.c:579 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7722f9c502 Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 RSP: 002b:00007fff2f3f99a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7722f9c502 RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 R10: 0000000000020022 R11: 0000000000000246 R12: 00007fff2f3f9b10 R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 kernel/locking/rwsem.c:445 Code: 01 00 74 08 4c 89 f7 e8 e4 c2 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be RSP: 0018:ffffc900034679a0 EFLAGS: 00010006 RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 RDX: 1ffff9200068cf40 RSI: ffffffff8e4a660a RDI: ffffffff8c4a5c80 RBP: ffffc90003467aa0 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffff5200068cf50 R12: 0000000000000000 R13: ffff8880784982d0 R14: 0000000000000018 R15: ffffc90003467c20 FS: 0000555571564500(0000) GS:ffff888124ee0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200001000000 CR3: 000000007268c000 CR4: 00000000003526f0 ---------------- Code disassembly (best guess): 0: 01 00 add %eax,(%rax) 2: 74 08 je 0xc 4: 4c 89 f7 mov %r14,%rdi 7: e8 e4 c2 8d 00 call 0x8dc2f0 c: 4c 89 74 24 10 mov %r14,0x10(%rsp) 11: 4d 8b 26 mov (%r14),%r12 14: 4d 8d 74 24 18 lea 0x18(%r12),%r14 19: 4c 89 f0 mov %r14,%rax 1c: 48 c1 e8 03 shr $0x3,%rax 20: 48 b9 00 00 00 00 00 movabs $0xdffffc0000000000,%rcx 27: fc ff df * 2a: 0f b6 04 08 movzbl (%rax,%rcx,1),%eax <-- trapping instruction 2e: 84 c0 test %al,%al 30: 0f 85 75 06 00 00 jne 0x6ab 36: 41 83 3e 00 cmpl $0x0,(%r14) 3a: 74 64 je 0xa0 3c: 4c 89 ef mov %r13,%rdi 3f: be .byte 0xbe