Extracting prog: 1h20m54.703723299s Minimizing prog: 2h40m25.188153031s Simplifying prog options: 0s Extracting C: 4m9.769390193s Simplifying C: 27m35.319091691s extracting reproducer from 74 programs testing a last program of every proc single: executing 24 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setaffinity-connect$unix-syz_create_resource$futex-syz_create_resource$futex-futex-futex-futex detailed listing: executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) r0 = syz_create_resource$futex(&(0x7f00000000c0)=0x1) r1 = syz_create_resource$futex(&(0x7f0000000100)) futex(r0, 0xb, 0x1, 0x0, r1, 0x0) futex(r0, 0xb, 0x1, 0x0, r1, 0x1) futex(r0, 0xc, 0x1, &(0x7f0000000580)={0x0, 0x3938700}, r1, 0x1) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x5, 0x0, 0x5, 0x0, 0x5}, {0x0, 0x0, 0x800, 0xa000000000000000}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x3c}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x0, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-openat$zero-openat$kvm-geteuid-ioctl$XFS_IOC_ATTRLIST_BY_HANDLE-openat-openat$kvm-write-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x2080, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) geteuid() ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x120) openat$kvm(0xffffffffffffff9c, 0x0, 0x8040, 0x0) write(r2, &(0x7f0000000540)='\a', 0x1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setaffinity-connect$unix-syz_create_resource$futex-syz_create_resource$futex-futex-futex-futex detailed listing: executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) r0 = syz_create_resource$futex(&(0x7f00000000c0)=0x1) r1 = syz_create_resource$futex(&(0x7f0000000100)) futex(r0, 0xb, 0x1, 0x0, r1, 0x0) futex(r0, 0xb, 0x1, 0x0, r1, 0x1) futex(r0, 0xc, 0x1, &(0x7f0000000580)={0x0, 0x3938700}, r1, 0x1) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x5, 0x0, 0x5, 0x0, 0x5}, {0x0, 0x0, 0x800, 0xa000000000000000}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x3c}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x0, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-ioctl$TUNSETIFF-prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-socket$inet_tcp-ioctl$sock_SIOCSIFBR-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-timer_create-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000140)=@generic={0x0, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x4000087, 0x2, 0x0) timer_create(0x2, 0x0, &(0x7f0000000340)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x20, 0x3, 0x3d0, 0x0, 0xa, 0x148, 0x0, 0x10, 0x338, 0x2a8, 0x2a8, 0x338, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00', {}, {0xff}}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x1c8, 0x200, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x1, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x6, 0x1, 0x3}, {0x0, 0x4, 0x7}, {0x0, 0x0, 0x7}, 0xb, 0x4}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x430) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-openat$zero-openat$kvm-geteuid-ioctl$XFS_IOC_ATTRLIST_BY_HANDLE-openat-openat$kvm-write-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x2080, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) geteuid() ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x120) openat$kvm(0xffffffffffffff9c, 0x0, 0x8040, 0x0) write(r2, &(0x7f0000000540)='\a', 0x1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-ioctl$TUNSETIFF-prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-socket$inet_tcp-ioctl$sock_SIOCSIFBR-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-timer_create-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000140)=@generic={0x0, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x4000087, 0x2, 0x0) timer_create(0x2, 0x0, &(0x7f0000000340)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x20, 0x3, 0x3d0, 0x0, 0xa, 0x148, 0x0, 0x10, 0x338, 0x2a8, 0x2a8, 0x338, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00', {}, {0xff}}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x1c8, 0x200, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x1, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x6, 0x1, 0x3}, {0x0, 0x4, 0x7}, {0x0, 0x0, 0x7}, 0xb, 0x4}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x430) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-socket$nl_route-prlimit64-sched_setscheduler-sched_setaffinity-getpid-sched_setscheduler-socketpair$unix-time-connect$unix-sendmmsg$unix-recvmmsg-rmdir-mmap$IORING_OFF_SQ_RING-syz_mount_image$ext4-syz_mount_image$vfat-symlinkat-renameat2 detailed listing: executing program 0: socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0xffffffffffffff25, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) time(&(0x7f00000000c0)) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408e, &(0x7f0000000400)={[{@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000fff}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time}]}, 0x3, 0x43b, &(0x7f0000001a40)="$eJzs289PHFUcAPDvzLI0/SVY64/Sqmg1En9AoVV78KLRxIMmJnqoRwTaILSYgoltiKIx9WiaeDceTfwLPOnFqCcTr3o3TRrDpdXTmtmdgWW7i4C7bO1+PsnAezNvee+7b97sm3lsAD1rOPuRRByIiN8iYqCW3VhguPbr5ury1F+ry1NJVCpv/plUy91YXZ4qihav259nRtKI9NMkjjapd/HS5bnJ+fmZi3l+bOn8e2OLly4/M3t+8tzMuZkLE6dPnzo5/vxzE8+2Jc6sTTeGPlw4duTVt6++PnXm6js/fZMU8TfE0SbDmx18vFJpc3XddbAunfR1sSFsSykisu4qV8f/QJRivfMG4pVPuto4oKMqlUplf+vDKxXgDpbEVkvO5dcL4M5QfNBn97/FtktTj9vC9RdrN0BZ3DfzrXakL9K8TLnh/radhiPizMrfX2ZbdOY5BADABt9l85+nm83/0rivrtxd+drQYETcHRGHIuKeiDgcEfdGVMveHxEPbLP+xkWSW+c/6bUdBbZF2fzvhXxta+P8r5j9xWApzx2sxl9Ozs7Oz5zI35ORKO/J8uOb1PH9y79+3upY/fwv27L6i7lg3o5rfXs2vmZ6cmnyv8Rc7/rHEUN9zeJP1lYCkog4EhFDO6xj9smvj7U61ir+8lb+cBvWmSpfRTxR6/+VaIi/kLRenyxaMHNirDgrbvXzL1feaFX/v/d/Z2X9v6/p+b8W/2BSv167uP06rvz+Wct7mp2e//3JW9V0f77vg8mlpYvjEf3Ja7VG1++fWH9tkS/KZ/GPHG8+/g/F+jtxNCKyk/jBiHgoIh7O2/5IRDwaEcc3if/Hlx57d+fxd1YW//S2+n890R+Ne5onSnM/fLuh0sHtxJ/1/6lqaiTfs5Xr32btyq7jOz+bAQAA4P8njYgDkaSja+k0HR2t/b/84diXzi8sLj11duH9C9O17wgMRjktnnQN1D0PHc9v64v8REP+ZP7c+IvS3mp+dGphfrrbwUOP299i/Gf+KHW7dUDH+b4W9C7jH3qX8Q+9y/iH3tVk/O/tRjuA3dfs8/+jLrQD2H0N49+yH/QQ9//Qu4x/6F3GP/Skxb2x+Zf3JSSaJiK9LZoh0aFEt69MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7fFPAAAA//+Ju+Aa") syz_mount_image$vfat(&(0x7f0000000980), &(0x7f0000001580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x41, 0x0, &(0x7f0000000ac0)) symlinkat(&(0x7f0000000b00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000e00)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-socket$inet6-socket$packet-setsockopt$packet_int-prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-mmap$IORING_OFF_SQ_RING-syz_open_procfs$namespace detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) prlimit64(0x0, 0x10, &(0x7f0000000180)={0x3, 0x400000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000440)='ns/time_for_children\x00') program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-socket$nl_route-prlimit64-sched_setscheduler-sched_setaffinity-getpid-sched_setscheduler-socketpair$unix-time-connect$unix-sendmmsg$unix-recvmmsg-rmdir-mmap$IORING_OFF_SQ_RING-syz_mount_image$ext4-syz_mount_image$vfat-symlinkat-renameat2 detailed listing: executing program 0: socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0xffffffffffffff25, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) time(&(0x7f00000000c0)) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408e, &(0x7f0000000400)={[{@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000fff}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time}]}, 0x3, 0x43b, &(0x7f0000001a40)="$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") syz_mount_image$vfat(&(0x7f0000000980), &(0x7f0000001580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x41, 0x0, &(0x7f0000000ac0)) symlinkat(&(0x7f0000000b00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000e00)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-socket$inet6-socket$packet-setsockopt$packet_int-prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-mmap$IORING_OFF_SQ_RING-syz_open_procfs$namespace detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) prlimit64(0x0, 0x10, &(0x7f0000000180)={0x3, 0x400000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000440)='ns/time_for_children\x00') program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate-pwrite64-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-ioctl$TUNSETFILTEREBPF-clock_gettime-timerfd_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) pwrite64(r5, &(0x7f0000000540)="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", 0x40b, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0xa, &(0x7f0000000980)=@raw=[@ldst={0x0, 0x3, 0x1, 0x0, 0x1, 0x30, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x6}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x63}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x1, 0xa, 0x8, 0x3, 0x18}, @jmp={0x5, 0x1, 0xb, 0x4, 0x8, 0x20, 0xfffffffffffffffc}], &(0x7f0000000a00)='GPL\x00', 0x1, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x9, 0x2, 0xffff8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[r0, r0, r0, r0], 0x0, 0x10, 0x5}, 0x94) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000001bc0)=r6) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{}, {r7, r8+60000000}}, 0x0) program crashed: INFO: rcu detected stall in corrupted single: successfully extracted reproducer found reproducer with 28 syscalls minimizing guilty program testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate-pwrite64-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-ioctl$TUNSETFILTEREBPF-clock_gettime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) pwrite64(r5, &(0x7f0000000540)="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", 0x40b, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0xa, &(0x7f0000000980)=@raw=[@ldst={0x0, 0x3, 0x1, 0x0, 0x1, 0x30, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x6}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x63}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x1, 0xa, 0x8, 0x3, 0x18}, @jmp={0x5, 0x1, 0xb, 0x4, 0x8, 0x20, 0xfffffffffffffffc}], &(0x7f0000000a00)='GPL\x00', 0x1, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x9, 0x2, 0xffff8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[r0, r0, r0, r0], 0x0, 0x10, 0x5}, 0x94) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000001bc0)=r6) clock_gettime(0x0, &(0x7f0000000000)) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate-pwrite64-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-ioctl$TUNSETFILTEREBPF detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) pwrite64(r5, &(0x7f0000000540)="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", 0x40b, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0xa, &(0x7f0000000980)=@raw=[@ldst={0x0, 0x3, 0x1, 0x0, 0x1, 0x30, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x6}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x63}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x1, 0xa, 0x8, 0x3, 0x18}, @jmp={0x5, 0x1, 0xb, 0x4, 0x8, 0x20, 0xfffffffffffffffc}], &(0x7f0000000a00)='GPL\x00', 0x1, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x9, 0x2, 0xffff8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[r0, r0, r0, r0], 0x0, 0x10, 0x5}, 0x94) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000001bc0)=r6) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate-pwrite64-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) pwrite64(r5, &(0x7f0000000540)="d8cbaeed5669cbcc2960fc4ca3fff4a2ed997e03ecaa98ebab3e35560191562f2f02dd00df14edf25c0c886a030cfbac691abab1d73159bba6990f2cbe3bb1ab7bf19ab55d016cdfa48d0c542349d3443be1d2ecd4324b0214bd124174623d6ec9742eaf95b4ed69c97e6e42ee32856b0edb41e528c9e6a194cbd9fb1bf1bf522dc7c275377b4aae4ab0e5605953c3a2760994f8771dc8ab28968b23883966e3b3f425aceae61b2747077c62c651ae971f7259a49da2a60b95119090fdd1caabfc384dfda22d86a99923115c87362643817cc4cbeae3dc4a9084b5a6a3bf1b6ba3e734d795d512b3d8e079233e909475a9ea3fd172343a8685aafbcc00c19e7898b9a6fd750b6c2508e9cc36d5d2890273b1add78f392c4569767f12ea3dda15787a0ab0330e79b0232be239230568b8b3aeb383c7e97b413fc6e6f8b3e3394fd5976a4d7e25c71874d17b998a37e18f1eebf82ffd06f423fb55bcda100b3bbdf5c9be26125be89ac80c60ed349716071d6af801a9f95fa6102bab19927adedc9ff57c986667e2b8ed03a98007df552a87e76fe859fef436c570dca98b8bbdd638ea942e6d661e8599724d9b1a19314d16de70730d765c380cb862c0720f04d9e214d38a309df061c5f7e6a68a28ac41cfb6ff9134372ff6c815e752d0680e9a3ebcd27e7b0ffb6bf736cd77e85114ff8358f92f1bd7c8ca0932e60e67f6f0031de80a55c97cec25d54835bc7e6a4d6b93b74235f398cbe00580629fa755165e7bfc82a4f4e9039e1703660f564d61a699a36811c673ea3f25da359c677f7f223681060c88b98de730d19c02fb3d6ab96262008f32b0ea3758ead1a235fef2ba5bcdd84e98c8d21d83f8a25fd904ae295774ccabd0ab4794d8fe62617f8bc74509fb6ad81697ecbbb39996af268e2648f65aa653cac0238952fd2f67bbb98bd11c229dcce9c6dd99c3d2c4fff35ed0f9b80ad76960b8693342abb3c2fe5887fac2448e0627fae026b67afb51f3f87a12b423fafb53173f842c9ff302984a7ad909922c370d7ee579a7ae7540a5940a84a4d2b44a9b43bb2402835a55b14f35c7f3a805e41536ff0fd28694ac60168d0f75768ca7f87087813766d8328d48154aa4e0b4e4627a41650417dce9d5cd9998db40c76d87d1349423ccaa0ace72b9048ecd7bfde6d827c2209efd732cfbf4290c76527940c24013912c9d9cc399b603730860769a9fd5f3212420a774be00666b08a56888c50d3b93020a8d9db41a27a3612500ba495b6bbfbb388566e7437bf4bd7f31c292d82b829992499260ddfbdf61a8247891d8985ace96b99f9d48a9bc14519ad2dde9d9ef80acd40b2e1bc6c27630eac54952313fa298e859145fa564ba46380086a1f15162948ecbd1d51a0830bb616336cf2c88d51ffae2ed7502c1787a863502b5abe9835800cc636b426f380022b1bac85496501e", 0x40b, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0xa, &(0x7f0000000980)=@raw=[@ldst={0x0, 0x3, 0x1, 0x0, 0x1, 0x30, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x6}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x63}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x1, 0xa, 0x8, 0x3, 0x18}, @jmp={0x5, 0x1, 0xb, 0x4, 0x8, 0x20, 0xfffffffffffffffc}], &(0x7f0000000a00)='GPL\x00', 0x1, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x9, 0x2, 0xffff8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[r0, r0, r0, r0], 0x0, 0x10, 0x5}, 0x94) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate-pwrite64 detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) pwrite64(r5, &(0x7f0000000540)="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", 0x40b, 0x4) program crashed: INFO: rcu detected stall in do_vmi_munmap testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) program crashed: INFO: rcu detected stall in worker_thread testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) program did not crash testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in sys_getpid testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in sys_getpid testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in sys_getpid testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, 0x0, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: INFO: rcu detected stall in corrupted simplifying C reproducer testing compiled C program (duration=4m55.93965637s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program did not crash testing compiled C program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program did not crash testing compiled C program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: INFO: rcu detected stall in corrupted testing compiled C program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: INFO: rcu detected stall in corrupted testing compiled C program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: INFO: rcu detected stall in corrupted testing compiled C program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program did not crash testing compiled C program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: INFO: rcu detected stall in syscall_exit_to_user_mode a never seen crash title: INFO: rcu detected stall in syscall_exit_to_user_mode, ignore testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted validation run: crashed=true testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted validation run: crashed=true testing program (duration=4m55.93965637s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in worker_thread validation run: crashed=true reproducing took 4h43m17.703831806s repro crashed as (corrupted=false): rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5941/1:b..l rcu: (detected by 1, t=10503 jiffies, g=13449, q=503 ncpus=2) task:syz-executor state:R running task stack:22344 pid:5941 ppid:5936 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 preempt_schedule_common+0x82/0xc0 kernel/sched/core.c:6868 preempt_schedule+0xc0/0xd0 kernel/sched/core.c:6892 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk_64.S:45 vprintk_emit+0x587/0x610 kernel/printk/printk.c:2342 _printk+0xde/0x130 kernel/printk/printk.c:2366 batadv_check_known_mac_addr+0x29a/0x3e0 net/batman-adv/hard-interface.c:526 batadv_hard_if_event+0x3a2/0x1570 net/batman-adv/hard-interface.c:998 notifier_call_chain+0x18f/0x380 kernel/notifier.c:93 call_netdevice_notifiers_extack net/core/dev.c:2077 [inline] call_netdevice_notifiers net/core/dev.c:2091 [inline] dev_set_mac_address+0x38e/0x4d0 net/core/dev.c:9011 dev_set_mac_address_user+0x31/0x50 net/core/dev.c:9025 do_setlink+0x78f/0x3f40 net/core/rtnetlink.c:2872 __rtnl_newlink net/core/rtnetlink.c:3715 [inline] rtnl_newlink+0x1848/0x2170 net/core/rtnetlink.c:3762 rtnetlink_rcv_msg+0x843/0xf90 net/core/rtnetlink.c:6484 netlink_rcv_skb+0x235/0x4c0 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x7b1/0x930 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x8d0/0xbf0 net/netlink/af_netlink.c:1899 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x4a9/0x6b0 net/socket.c:2201 __do_sys_sendto net/socket.c:2213 [inline] __se_sys_sendto net/socket.c:2209 [inline] __x64_sys_sendto+0xde/0xf0 net/socket.c:2209 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f1f6d75ed8e RSP: 002b:00007ffdc1f69dd8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 000055555938a500 RCX: 00007f1f6d75ed8e RDX: 000000000000002c RSI: 00007f1f6e554670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007ffdc1f69e54 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f1f6e554670 R15: 0000000000000000 rcu: rcu_preempt kthread starved for 10550 jiffies! g13449 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27848 pid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_timeout+0x188/0x2d0 kernel/time/timer.c:2168 rcu_gp_fqs_loop+0x30d/0x1590 kernel/rcu/tree.c:1667 rcu_gp_kthread+0x9d/0x3b0 kernel/rcu/tree.c:1866 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 8 Comm: kworker/0:0 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 Workqueue: events nsim_fib_event_work RIP: 0010:mark_usage kernel/locking/lockdep.c:4586 [inline] RIP: 0010:__lock_acquire+0xd89/0x7eb0 kernel/locking/lockdep.c:5125 Code: ff df 85 c0 0f 84 70 04 00 00 48 8b 84 24 d8 00 00 00 42 0f b6 04 00 84 c0 0f 85 eb 11 00 00 48 8b 84 24 a0 00 00 00 83 38 00 <74> 7e 4c 89 ef 48 89 de ba 05 00 00 00 eb 5a 85 c9 74 24 45 31 ed RSP: 0018:ffffc90000007a00 EFLAGS: 00000046 RAX: ffff88801c6764cc RBX: ffff88801c676560 RCX: ffffffff81695944 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff91ff1508 RBP: ffffc90000007c48 R08: dffffc0000000000 R09: 1ffffffff23fe2a1 R10: dffffc0000000000 R11: fffffbfff23fe2a2 R12: ffff88801c6764cc R13: ffff88801c675a00 R14: 0000000000000000 R15: ffff88801c676580 FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000058 CR3: 000000005ea84000 CR4: 00000000003506f0 Call Trace: lock_acquire+0x19e/0x420 kernel/locking/lockdep.c:5790 seqcount_lockdep_reader_access+0xd1/0x1d0 include/linux/seqlock.h:102 ktime_get+0x35/0x280 kernel/time/timekeeping.c:846 clockevents_program_event+0xe6/0x310 kernel/time/clockevents.c:326 hrtimer_interrupt+0x565/0x980 kernel/time/hrtimer.c:1893 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1077 [inline] __sysvec_apic_timer_interrupt+0xfb/0x3b0 arch/x86/kernel/apic/apic.c:1094 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1088 [inline] sysvec_apic_timer_interrupt+0x9f/0xc0 arch/x86/kernel/apic/apic.c:1088 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687 RIP: 0010:finish_task_switch+0x267/0x8f0 kernel/sched/core.c:5256 Code: 35 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 e3 e9 3e 09 e8 2e 28 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 RSP: 0018:ffffc900000d7440 EFLAGS: 00000286 RAX: 65cbc6747e71b600 RBX: 0000000000000000 RCX: 65cbc6747e71b600 RDX: dffffc0000000000 RSI: ffffffff8acacfe0 RDI: ffffffff8b1d5160 RBP: ffffc900000d7490 R08: ffffffff91ff15ff R09: 1ffffffff23fe2bf R10: dffffc0000000000 R11: fffffbfff23fe2c0 R12: ffff88801c675a00 R13: 1ffff110171879a1 R14: dffffc0000000000 R15: ffff8880b8c3cd08 context_switch kernel/sched/core.c:5385 [inline] __schedule+0x15b6/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_timeout+0x188/0x2d0 kernel/time/timer.c:2168 schedule_timeout_uninterruptible kernel/time/timer.c:2202 [inline] msleep+0xa1/0xe0 kernel/time/timer.c:2324 nsim_fib6_rt_add drivers/net/netdevsim/fib.c:693 [inline] nsim_fib6_rt_insert drivers/net/netdevsim/fib.c:759 [inline] nsim_fib6_event drivers/net/netdevsim/fib.c:856 [inline] nsim_fib_event drivers/net/netdevsim/fib.c:889 [inline] nsim_fib_event_work+0x27bb/0x32c0 drivers/net/netdevsim/fib.c:1494 process_one_work kernel/workqueue.c:2657 [inline] process_scheduled_works+0xa60/0x1600 kernel/workqueue.c:2734 worker_thread+0xa5e/0xfe0 kernel/workqueue.c:2815 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 sched: RT throttling activated hrtimer: interrupt took 1172797708 ns final repro crashed as (corrupted=false): rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5941/1:b..l rcu: (detected by 1, t=10503 jiffies, g=13449, q=503 ncpus=2) task:syz-executor state:R running task stack:22344 pid:5941 ppid:5936 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 preempt_schedule_common+0x82/0xc0 kernel/sched/core.c:6868 preempt_schedule+0xc0/0xd0 kernel/sched/core.c:6892 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk_64.S:45 vprintk_emit+0x587/0x610 kernel/printk/printk.c:2342 _printk+0xde/0x130 kernel/printk/printk.c:2366 batadv_check_known_mac_addr+0x29a/0x3e0 net/batman-adv/hard-interface.c:526 batadv_hard_if_event+0x3a2/0x1570 net/batman-adv/hard-interface.c:998 notifier_call_chain+0x18f/0x380 kernel/notifier.c:93 call_netdevice_notifiers_extack net/core/dev.c:2077 [inline] call_netdevice_notifiers net/core/dev.c:2091 [inline] dev_set_mac_address+0x38e/0x4d0 net/core/dev.c:9011 dev_set_mac_address_user+0x31/0x50 net/core/dev.c:9025 do_setlink+0x78f/0x3f40 net/core/rtnetlink.c:2872 __rtnl_newlink net/core/rtnetlink.c:3715 [inline] rtnl_newlink+0x1848/0x2170 net/core/rtnetlink.c:3762 rtnetlink_rcv_msg+0x843/0xf90 net/core/rtnetlink.c:6484 netlink_rcv_skb+0x235/0x4c0 net/netlink/af_netlink.c:2550 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x7b1/0x930 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x8d0/0xbf0 net/netlink/af_netlink.c:1899 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x4a9/0x6b0 net/socket.c:2201 __do_sys_sendto net/socket.c:2213 [inline] __se_sys_sendto net/socket.c:2209 [inline] __x64_sys_sendto+0xde/0xf0 net/socket.c:2209 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f1f6d75ed8e RSP: 002b:00007ffdc1f69dd8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 000055555938a500 RCX: 00007f1f6d75ed8e RDX: 000000000000002c RSI: 00007f1f6e554670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007ffdc1f69e54 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f1f6e554670 R15: 0000000000000000 rcu: rcu_preempt kthread starved for 10550 jiffies! g13449 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27848 pid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_timeout+0x188/0x2d0 kernel/time/timer.c:2168 rcu_gp_fqs_loop+0x30d/0x1590 kernel/rcu/tree.c:1667 rcu_gp_kthread+0x9d/0x3b0 kernel/rcu/tree.c:1866 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 8 Comm: kworker/0:0 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 Workqueue: events nsim_fib_event_work RIP: 0010:mark_usage kernel/locking/lockdep.c:4586 [inline] RIP: 0010:__lock_acquire+0xd89/0x7eb0 kernel/locking/lockdep.c:5125 Code: ff df 85 c0 0f 84 70 04 00 00 48 8b 84 24 d8 00 00 00 42 0f b6 04 00 84 c0 0f 85 eb 11 00 00 48 8b 84 24 a0 00 00 00 83 38 00 <74> 7e 4c 89 ef 48 89 de ba 05 00 00 00 eb 5a 85 c9 74 24 45 31 ed RSP: 0018:ffffc90000007a00 EFLAGS: 00000046 RAX: ffff88801c6764cc RBX: ffff88801c676560 RCX: ffffffff81695944 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff91ff1508 RBP: ffffc90000007c48 R08: dffffc0000000000 R09: 1ffffffff23fe2a1 R10: dffffc0000000000 R11: fffffbfff23fe2a2 R12: ffff88801c6764cc R13: ffff88801c675a00 R14: 0000000000000000 R15: ffff88801c676580 FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000058 CR3: 000000005ea84000 CR4: 00000000003506f0 Call Trace: lock_acquire+0x19e/0x420 kernel/locking/lockdep.c:5790 seqcount_lockdep_reader_access+0xd1/0x1d0 include/linux/seqlock.h:102 ktime_get+0x35/0x280 kernel/time/timekeeping.c:846 clockevents_program_event+0xe6/0x310 kernel/time/clockevents.c:326 hrtimer_interrupt+0x565/0x980 kernel/time/hrtimer.c:1893 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1077 [inline] __sysvec_apic_timer_interrupt+0xfb/0x3b0 arch/x86/kernel/apic/apic.c:1094 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1088 [inline] sysvec_apic_timer_interrupt+0x9f/0xc0 arch/x86/kernel/apic/apic.c:1088 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687 RIP: 0010:finish_task_switch+0x267/0x8f0 kernel/sched/core.c:5256 Code: 35 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 e3 e9 3e 09 e8 2e 28 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 RSP: 0018:ffffc900000d7440 EFLAGS: 00000286 RAX: 65cbc6747e71b600 RBX: 0000000000000000 RCX: 65cbc6747e71b600 RDX: dffffc0000000000 RSI: ffffffff8acacfe0 RDI: ffffffff8b1d5160 RBP: ffffc900000d7490 R08: ffffffff91ff15ff R09: 1ffffffff23fe2bf R10: dffffc0000000000 R11: fffffbfff23fe2c0 R12: ffff88801c675a00 R13: 1ffff110171879a1 R14: dffffc0000000000 R15: ffff8880b8c3cd08 context_switch kernel/sched/core.c:5385 [inline] __schedule+0x15b6/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_timeout+0x188/0x2d0 kernel/time/timer.c:2168 schedule_timeout_uninterruptible kernel/time/timer.c:2202 [inline] msleep+0xa1/0xe0 kernel/time/timer.c:2324 nsim_fib6_rt_add drivers/net/netdevsim/fib.c:693 [inline] nsim_fib6_rt_insert drivers/net/netdevsim/fib.c:759 [inline] nsim_fib6_event drivers/net/netdevsim/fib.c:856 [inline] nsim_fib_event drivers/net/netdevsim/fib.c:889 [inline] nsim_fib_event_work+0x27bb/0x32c0 drivers/net/netdevsim/fib.c:1494 process_one_work kernel/workqueue.c:2657 [inline] process_scheduled_works+0xa60/0x1600 kernel/workqueue.c:2734 worker_thread+0xa5e/0xfe0 kernel/workqueue.c:2815 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 sched: RT throttling activated hrtimer: interrupt took 1172797708 ns