Extracting prog: 1h19m29.997596327s Minimizing prog: 2h17m27.663161432s Simplifying prog options: 0s Extracting C: 3m35.654362639s Simplifying C: 33m42.143599791s extracting reproducer from 74 programs testing a last program of every proc single: executing 24 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setaffinity-connect$unix-syz_create_resource$futex-syz_create_resource$futex-futex-futex-futex detailed listing: executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) r0 = syz_create_resource$futex(&(0x7f00000000c0)=0x1) r1 = syz_create_resource$futex(&(0x7f0000000100)) futex(r0, 0xb, 0x1, 0x0, r1, 0x0) futex(r0, 0xb, 0x1, 0x0, r1, 0x1) futex(r0, 0xc, 0x1, &(0x7f0000000580)={0x0, 0x3938700}, r1, 0x1) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x5, 0x0, 0x5, 0x0, 0x5}, {0x0, 0x0, 0x800, 0xa000000000000000}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x3c}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x0, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-openat$zero-openat$kvm-geteuid-ioctl$XFS_IOC_ATTRLIST_BY_HANDLE-openat-openat$kvm-write-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x2080, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) geteuid() ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x120) openat$kvm(0xffffffffffffff9c, 0x0, 0x8040, 0x0) write(r2, &(0x7f0000000540)='\a', 0x1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setaffinity-connect$unix-syz_create_resource$futex-syz_create_resource$futex-futex-futex-futex detailed listing: executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) r0 = syz_create_resource$futex(&(0x7f00000000c0)=0x1) r1 = syz_create_resource$futex(&(0x7f0000000100)) futex(r0, 0xb, 0x1, 0x0, r1, 0x0) futex(r0, 0xb, 0x1, 0x0, r1, 0x1) futex(r0, 0xc, 0x1, &(0x7f0000000580)={0x0, 0x3938700}, r1, 0x1) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x5, 0x0, 0x5, 0x0, 0x5}, {0x0, 0x0, 0x800, 0xa000000000000000}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x3c}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x0, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-ioctl$TUNSETIFF-prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-socket$inet_tcp-ioctl$sock_SIOCSIFBR-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-timer_create-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000140)=@generic={0x0, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x4000087, 0x2, 0x0) timer_create(0x2, 0x0, &(0x7f0000000340)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x20, 0x3, 0x3d0, 0x0, 0xa, 0x148, 0x0, 0x10, 0x338, 0x2a8, 0x2a8, 0x338, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00', {}, {0xff}}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x1c8, 0x200, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x1, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x6, 0x1, 0x3}, {0x0, 0x4, 0x7}, {0x0, 0x0, 0x7}, 0xb, 0x4}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x430) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-openat$zero-openat$kvm-geteuid-ioctl$XFS_IOC_ATTRLIST_BY_HANDLE-openat-openat$kvm-write-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x2080, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) geteuid() ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x120) openat$kvm(0xffffffffffffff9c, 0x0, 0x8040, 0x0) write(r2, &(0x7f0000000540)='\a', 0x1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-ioctl$TUNSETIFF-prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-socket$inet_tcp-ioctl$sock_SIOCSIFBR-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-timer_create-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000140)=@generic={0x0, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x4000087, 0x2, 0x0) timer_create(0x2, 0x0, &(0x7f0000000340)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x20, 0x3, 0x3d0, 0x0, 0xa, 0x148, 0x0, 0x10, 0x338, 0x2a8, 0x2a8, 0x338, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00', {}, {0xff}}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x1c8, 0x200, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x1, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x6, 0x1, 0x3}, {0x0, 0x4, 0x7}, {0x0, 0x0, 0x7}, 0xb, 0x4}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x430) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-socket$nl_route-prlimit64-sched_setscheduler-sched_setaffinity-getpid-sched_setscheduler-socketpair$unix-time-connect$unix-sendmmsg$unix-recvmmsg-rmdir-mmap$IORING_OFF_SQ_RING-syz_mount_image$ext4-syz_mount_image$vfat-symlinkat-renameat2 detailed listing: executing program 0: socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0xffffffffffffff25, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) time(&(0x7f00000000c0)) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408e, &(0x7f0000000400)={[{@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000fff}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time}]}, 0x3, 0x43b, &(0x7f0000001a40)="$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") syz_mount_image$vfat(&(0x7f0000000980), &(0x7f0000001580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x41, 0x0, &(0x7f0000000ac0)) symlinkat(&(0x7f0000000b00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000e00)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-socket$inet6-socket$packet-setsockopt$packet_int-prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-mmap$IORING_OFF_SQ_RING-syz_open_procfs$namespace detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) prlimit64(0x0, 0x10, &(0x7f0000000180)={0x3, 0x400000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000440)='ns/time_for_children\x00') program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-socket$nl_route-prlimit64-sched_setscheduler-sched_setaffinity-getpid-sched_setscheduler-socketpair$unix-time-connect$unix-sendmmsg$unix-recvmmsg-rmdir-mmap$IORING_OFF_SQ_RING-syz_mount_image$ext4-syz_mount_image$vfat-symlinkat-renameat2 detailed listing: executing program 0: socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0xffffffffffffff25, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) time(&(0x7f00000000c0)) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408e, &(0x7f0000000400)={[{@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000fff}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time}]}, 0x3, 0x43b, &(0x7f0000001a40)="$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") syz_mount_image$vfat(&(0x7f0000000980), &(0x7f0000001580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x41, 0x0, &(0x7f0000000ac0)) symlinkat(&(0x7f0000000b00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000e00)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-socket$inet6-socket$packet-setsockopt$packet_int-prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-mmap$IORING_OFF_SQ_RING-syz_open_procfs$namespace detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) prlimit64(0x0, 0x10, &(0x7f0000000180)={0x3, 0x400000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000440)='ns/time_for_children\x00') program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate-pwrite64-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-ioctl$TUNSETFILTEREBPF-clock_gettime-timerfd_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) pwrite64(r5, &(0x7f0000000540)="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", 0x40b, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0xa, &(0x7f0000000980)=@raw=[@ldst={0x0, 0x3, 0x1, 0x0, 0x1, 0x30, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x6}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x63}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x1, 0xa, 0x8, 0x3, 0x18}, @jmp={0x5, 0x1, 0xb, 0x4, 0x8, 0x20, 0xfffffffffffffffc}], &(0x7f0000000a00)='GPL\x00', 0x1, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x9, 0x2, 0xffff8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[r0, r0, r0, r0], 0x0, 0x10, 0x5}, 0x94) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000001bc0)=r6) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{}, {r7, r8+60000000}}, 0x0) program crashed: INFO: rcu detected stall in mmap_pgoff single: successfully extracted reproducer found reproducer with 28 syscalls minimizing guilty program testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate-pwrite64-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-ioctl$TUNSETFILTEREBPF-clock_gettime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) pwrite64(r5, &(0x7f0000000540)="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", 0x40b, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0xa, &(0x7f0000000980)=@raw=[@ldst={0x0, 0x3, 0x1, 0x0, 0x1, 0x30, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x6}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x63}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x1, 0xa, 0x8, 0x3, 0x18}, @jmp={0x5, 0x1, 0xb, 0x4, 0x8, 0x20, 0xfffffffffffffffc}], &(0x7f0000000a00)='GPL\x00', 0x1, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x9, 0x2, 0xffff8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[r0, r0, r0, r0], 0x0, 0x10, 0x5}, 0x94) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000001bc0)=r6) clock_gettime(0x0, &(0x7f0000000000)) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate-pwrite64-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-ioctl$TUNSETFILTEREBPF detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) pwrite64(r5, &(0x7f0000000540)="d8cbaeed5669cbcc2960fc4ca3fff4a2ed997e03ecaa98ebab3e35560191562f2f02dd00df14edf25c0c886a030cfbac691abab1d73159bba6990f2cbe3bb1ab7bf19ab55d016cdfa48d0c542349d3443be1d2ecd4324b0214bd124174623d6ec9742eaf95b4ed69c97e6e42ee32856b0edb41e528c9e6a194cbd9fb1bf1bf522dc7c275377b4aae4ab0e5605953c3a2760994f8771dc8ab28968b23883966e3b3f425aceae61b2747077c62c651ae971f7259a49da2a60b95119090fdd1caabfc384dfda22d86a99923115c87362643817cc4cbeae3dc4a9084b5a6a3bf1b6ba3e734d795d512b3d8e079233e909475a9ea3fd172343a8685aafbcc00c19e7898b9a6fd750b6c2508e9cc36d5d2890273b1add78f392c4569767f12ea3dda15787a0ab0330e79b0232be239230568b8b3aeb383c7e97b413fc6e6f8b3e3394fd5976a4d7e25c71874d17b998a37e18f1eebf82ffd06f423fb55bcda100b3bbdf5c9be26125be89ac80c60ed349716071d6af801a9f95fa6102bab19927adedc9ff57c986667e2b8ed03a98007df552a87e76fe859fef436c570dca98b8bbdd638ea942e6d661e8599724d9b1a19314d16de70730d765c380cb862c0720f04d9e214d38a309df061c5f7e6a68a28ac41cfb6ff9134372ff6c815e752d0680e9a3ebcd27e7b0ffb6bf736cd77e85114ff8358f92f1bd7c8ca0932e60e67f6f0031de80a55c97cec25d54835bc7e6a4d6b93b74235f398cbe00580629fa755165e7bfc82a4f4e9039e1703660f564d61a699a36811c673ea3f25da359c677f7f223681060c88b98de730d19c02fb3d6ab96262008f32b0ea3758ead1a235fef2ba5bcdd84e98c8d21d83f8a25fd904ae295774ccabd0ab4794d8fe62617f8bc74509fb6ad81697ecbbb39996af268e2648f65aa653cac0238952fd2f67bbb98bd11c229dcce9c6dd99c3d2c4fff35ed0f9b80ad76960b8693342abb3c2fe5887fac2448e0627fae026b67afb51f3f87a12b423fafb53173f842c9ff302984a7ad909922c370d7ee579a7ae7540a5940a84a4d2b44a9b43bb2402835a55b14f35c7f3a805e41536ff0fd28694ac60168d0f75768ca7f87087813766d8328d48154aa4e0b4e4627a41650417dce9d5cd9998db40c76d87d1349423ccaa0ace72b9048ecd7bfde6d827c2209efd732cfbf4290c76527940c24013912c9d9cc399b603730860769a9fd5f3212420a774be00666b08a56888c50d3b93020a8d9db41a27a3612500ba495b6bbfbb388566e7437bf4bd7f31c292d82b829992499260ddfbdf61a8247891d8985ace96b99f9d48a9bc14519ad2dde9d9ef80acd40b2e1bc6c27630eac54952313fa298e859145fa564ba46380086a1f15162948ecbd1d51a0830bb616336cf2c88d51ffae2ed7502c1787a863502b5abe9835800cc636b426f380022b1bac85496501e", 0x40b, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0xa, &(0x7f0000000980)=@raw=[@ldst={0x0, 0x3, 0x1, 0x0, 0x1, 0x30, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x6}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x63}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x1, 0xa, 0x8, 0x3, 0x18}, @jmp={0x5, 0x1, 0xb, 0x4, 0x8, 0x20, 0xfffffffffffffffc}], &(0x7f0000000a00)='GPL\x00', 0x1, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x9, 0x2, 0xffff8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[r0, r0, r0, r0], 0x0, 0x10, 0x5}, 0x94) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000001bc0)=r6) program crashed: INFO: rcu detected stall in worker_thread testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate-pwrite64-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) pwrite64(r5, &(0x7f0000000540)="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", 0x40b, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0xa, &(0x7f0000000980)=@raw=[@ldst={0x0, 0x3, 0x1, 0x0, 0x1, 0x30, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x6}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x63}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x1, 0xa, 0x8, 0x3, 0x18}, @jmp={0x5, 0x1, 0xb, 0x4, 0x8, 0x20, 0xfffffffffffffffc}], &(0x7f0000000a00)='GPL\x00', 0x1, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x9, 0x2, 0xffff8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[r0, r0, r0, r0], 0x0, 0x10, 0x5}, 0x94) program crashed: INFO: rcu detected stall in syscall_exit_to_user_mode testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate-pwrite64 detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) pwrite64(r5, &(0x7f0000000540)="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", 0x40b, 0x4) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) program crashed: INFO: rcu detected stall in worker_thread testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in sys_getpid testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) program did not crash testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: WARNING in rcu_check_gp_start_stall testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in worker_thread testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in schedule_timeout testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in syscall_exit_to_user_mode testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in worker_thread testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in schedule_timeout testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, 0x0, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: INFO: rcu detected stall in corrupted simplifying C reproducer testing compiled C program (duration=4m53.477588134s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program did not crash testing compiled C program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program did not crash testing compiled C program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: INFO: rcu detected stall in corrupted testing compiled C program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: INFO: rcu detected stall in corrupted testing compiled C program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: INFO: rcu detected stall in schedule_timeout testing compiled C program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program did not crash testing compiled C program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in worker_thread validation run: crashed=true testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in futex validation run: crashed=true testing program (duration=4m53.477588134s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in worker_thread validation run: crashed=true reproducing took 4h27m8.862337066s repro crashed as (corrupted=false): rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P48/1:b..l rcu: (detected by 1, t=10503 jiffies, g=10893, q=577 ncpus=2) task:kworker/u4:3 state:R running task stack:25000 pid:48 ppid:2 flags:0x00004000 Workqueue: bat_events batadv_nc_worker Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 preempt_schedule_irq+0xbf/0x150 kernel/sched/core.c:7011 irqentry_exit+0x67/0x70 kernel/entry/common.c:441 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687 RIP: 0010:debug_lockdep_rcu_enabled+0x20/0x30 kernel/rcu/update.c:320 Code: cc cc cc cc cc cc cc cc cc cc f3 0f 1e fa 31 c0 83 3d 9f 4a d9 04 00 74 1d 83 3d 16 7e d9 04 00 74 14 65 48 8b 0d 60 a6 70 75 <31> c0 83 b9 e4 0a 00 00 00 0f 94 c0 c3 cc cc cc 66 0f 1f 00 48 8b RSP: 0018:ffffc90000b8fb58 EFLAGS: 00000202 RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88801b288000 RDX: 0000000000000000 RSI: ffffffff8b1d5140 RDI: ffffffff8b1d5100 RBP: 0000000000000000 R08: dffffc0000000000 R09: 1ffffffff23fe2a0 R10: dffffc0000000000 R11: fffffbfff23fe2a1 R12: dffffc0000000000 R13: ffffffff8a5a1712 R14: ffff88802636cd00 R15: 00000000000002fb rcu_read_unlock include/linux/rcupdate.h:815 [inline] batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:412 [inline] batadv_nc_worker+0x1ee/0x600 net/batman-adv/network-coding.c:719 process_one_work kernel/workqueue.c:2657 [inline] process_scheduled_works+0xa60/0x1600 kernel/workqueue.c:2734 worker_thread+0xa5e/0xfe0 kernel/workqueue.c:2815 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 rcu: rcu_preempt kthread starved for 10525 jiffies! g10893 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27848 pid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_timeout+0x188/0x2d0 kernel/time/timer.c:2168 rcu_gp_fqs_loop+0x30d/0x1590 kernel/rcu/tree.c:1667 rcu_gp_kthread+0x9d/0x3b0 kernel/rcu/tree.c:1866 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 5834 Comm: kworker/u5:2 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 Workqueue: hci2 hci_cmd_timeout RIP: 0010:__rcu_read_unlock+0x55/0xd0 kernel/rcu/tree_plugin.h:425 Code: ec 03 43 0f b6 04 3c 84 c0 75 48 ff 0b 75 1d 4c 8d b7 40 04 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 38 84 c0 75 5f 41 83 3e 00 <75> 20 43 0f b6 04 3c 84 c0 75 3a 8b 03 3d 00 00 00 40 73 0a 5b 41 RSP: 0018:ffffc90000007c68 EFLAGS: 00000046 RAX: 0000000000000000 RBX: ffff88807b8c223c RCX: ffff88807b8c1e00 RDX: 0000000000010000 RSI: ffffffff8b1d5140 RDI: ffff88807b8c1e00 RBP: ffff88807db8ac58 R08: ffff8880278040c3 R09: 1ffff11004f00818 R10: dffffc0000000000 R11: ffffed1004f00819 R12: 1ffff1100f718447 R13: ffff8880237d6320 R14: ffff88807b8c2240 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000058 CR3: 00000000261a5000 CR4: 00000000003506f0 Call Trace: rcu_read_unlock include/linux/rcupdate.h:818 [inline] send_sigqueue+0x562/0x710 kernel/signal.c:2053 posix_timer_event kernel/time/posix-timers.c:299 [inline] posix_timer_fn+0x14d/0x350 kernel/time/posix-timers.c:325 __run_hrtimer kernel/time/hrtimer.c:1754 [inline] __hrtimer_run_queues+0x525/0xc10 kernel/time/hrtimer.c:1818 hrtimer_interrupt+0x39d/0x980 kernel/time/hrtimer.c:1880 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1077 [inline] __sysvec_apic_timer_interrupt+0xfb/0x3b0 arch/x86/kernel/apic/apic.c:1094 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1088 [inline] sysvec_apic_timer_interrupt+0x9f/0xc0 arch/x86/kernel/apic/apic.c:1088 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687 RIP: 0010:finish_task_switch+0x267/0x8f0 kernel/sched/core.c:5256 Code: 35 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 e3 e9 3e 09 e8 2e 28 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 RSP: 0018:ffffc900048ef500 EFLAGS: 00000286 RAX: 3c1de00073c34200 RBX: 0000000000000000 RCX: 3c1de00073c34200 RDX: dffffc0000000000 RSI: ffffffff8acacfe0 RDI: ffffffff8b1d5160 RBP: ffffc900048ef550 R08: ffffffff91ff160f R09: 1ffffffff23fe2c1 R10: dffffc0000000000 R11: fffffbfff23fe2c2 R12: ffff88807b8c1e00 R13: 1ffff110171879a1 R14: dffffc0000000000 R15: ffff8880b8c3cd08 context_switch kernel/sched/core.c:5385 [inline] __schedule+0x15b6/0x4660 kernel/sched/core.c:6701 preempt_schedule_common+0x82/0xc0 kernel/sched/core.c:6868 preempt_schedule+0xc0/0xd0 kernel/sched/core.c:6892 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk_64.S:45 vprintk_emit+0x587/0x610 kernel/printk/printk.c:2342 _printk+0xde/0x130 kernel/printk/printk.c:2366 bt_err+0x122/0x180 net/bluetooth/lib.c:251 hci_cmd_timeout+0xff/0x1e0 net/bluetooth/hci_core.c:1469 process_one_work kernel/workqueue.c:2657 [inline] process_scheduled_works+0xa60/0x1600 kernel/workqueue.c:2734 worker_thread+0xa5e/0xfe0 kernel/workqueue.c:2815 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 final repro crashed as (corrupted=false): rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P48/1:b..l rcu: (detected by 1, t=10503 jiffies, g=10893, q=577 ncpus=2) task:kworker/u4:3 state:R running task stack:25000 pid:48 ppid:2 flags:0x00004000 Workqueue: bat_events batadv_nc_worker Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 preempt_schedule_irq+0xbf/0x150 kernel/sched/core.c:7011 irqentry_exit+0x67/0x70 kernel/entry/common.c:441 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687 RIP: 0010:debug_lockdep_rcu_enabled+0x20/0x30 kernel/rcu/update.c:320 Code: cc cc cc cc cc cc cc cc cc cc f3 0f 1e fa 31 c0 83 3d 9f 4a d9 04 00 74 1d 83 3d 16 7e d9 04 00 74 14 65 48 8b 0d 60 a6 70 75 <31> c0 83 b9 e4 0a 00 00 00 0f 94 c0 c3 cc cc cc 66 0f 1f 00 48 8b RSP: 0018:ffffc90000b8fb58 EFLAGS: 00000202 RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88801b288000 RDX: 0000000000000000 RSI: ffffffff8b1d5140 RDI: ffffffff8b1d5100 RBP: 0000000000000000 R08: dffffc0000000000 R09: 1ffffffff23fe2a0 R10: dffffc0000000000 R11: fffffbfff23fe2a1 R12: dffffc0000000000 R13: ffffffff8a5a1712 R14: ffff88802636cd00 R15: 00000000000002fb rcu_read_unlock include/linux/rcupdate.h:815 [inline] batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:412 [inline] batadv_nc_worker+0x1ee/0x600 net/batman-adv/network-coding.c:719 process_one_work kernel/workqueue.c:2657 [inline] process_scheduled_works+0xa60/0x1600 kernel/workqueue.c:2734 worker_thread+0xa5e/0xfe0 kernel/workqueue.c:2815 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 rcu: rcu_preempt kthread starved for 10525 jiffies! g10893 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27848 pid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_timeout+0x188/0x2d0 kernel/time/timer.c:2168 rcu_gp_fqs_loop+0x30d/0x1590 kernel/rcu/tree.c:1667 rcu_gp_kthread+0x9d/0x3b0 kernel/rcu/tree.c:1866 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 5834 Comm: kworker/u5:2 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 Workqueue: hci2 hci_cmd_timeout RIP: 0010:__rcu_read_unlock+0x55/0xd0 kernel/rcu/tree_plugin.h:425 Code: ec 03 43 0f b6 04 3c 84 c0 75 48 ff 0b 75 1d 4c 8d b7 40 04 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 38 84 c0 75 5f 41 83 3e 00 <75> 20 43 0f b6 04 3c 84 c0 75 3a 8b 03 3d 00 00 00 40 73 0a 5b 41 RSP: 0018:ffffc90000007c68 EFLAGS: 00000046 RAX: 0000000000000000 RBX: ffff88807b8c223c RCX: ffff88807b8c1e00 RDX: 0000000000010000 RSI: ffffffff8b1d5140 RDI: ffff88807b8c1e00 RBP: ffff88807db8ac58 R08: ffff8880278040c3 R09: 1ffff11004f00818 R10: dffffc0000000000 R11: ffffed1004f00819 R12: 1ffff1100f718447 R13: ffff8880237d6320 R14: ffff88807b8c2240 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000058 CR3: 00000000261a5000 CR4: 00000000003506f0 Call Trace: rcu_read_unlock include/linux/rcupdate.h:818 [inline] send_sigqueue+0x562/0x710 kernel/signal.c:2053 posix_timer_event kernel/time/posix-timers.c:299 [inline] posix_timer_fn+0x14d/0x350 kernel/time/posix-timers.c:325 __run_hrtimer kernel/time/hrtimer.c:1754 [inline] __hrtimer_run_queues+0x525/0xc10 kernel/time/hrtimer.c:1818 hrtimer_interrupt+0x39d/0x980 kernel/time/hrtimer.c:1880 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1077 [inline] __sysvec_apic_timer_interrupt+0xfb/0x3b0 arch/x86/kernel/apic/apic.c:1094 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1088 [inline] sysvec_apic_timer_interrupt+0x9f/0xc0 arch/x86/kernel/apic/apic.c:1088 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687 RIP: 0010:finish_task_switch+0x267/0x8f0 kernel/sched/core.c:5256 Code: 35 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 e3 e9 3e 09 e8 2e 28 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 RSP: 0018:ffffc900048ef500 EFLAGS: 00000286 RAX: 3c1de00073c34200 RBX: 0000000000000000 RCX: 3c1de00073c34200 RDX: dffffc0000000000 RSI: ffffffff8acacfe0 RDI: ffffffff8b1d5160 RBP: ffffc900048ef550 R08: ffffffff91ff160f R09: 1ffffffff23fe2c1 R10: dffffc0000000000 R11: fffffbfff23fe2c2 R12: ffff88807b8c1e00 R13: 1ffff110171879a1 R14: dffffc0000000000 R15: ffff8880b8c3cd08 context_switch kernel/sched/core.c:5385 [inline] __schedule+0x15b6/0x4660 kernel/sched/core.c:6701 preempt_schedule_common+0x82/0xc0 kernel/sched/core.c:6868 preempt_schedule+0xc0/0xd0 kernel/sched/core.c:6892 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk_64.S:45 vprintk_emit+0x587/0x610 kernel/printk/printk.c:2342 _printk+0xde/0x130 kernel/printk/printk.c:2366 bt_err+0x122/0x180 net/bluetooth/lib.c:251 hci_cmd_timeout+0xff/0x1e0 net/bluetooth/hci_core.c:1469 process_one_work kernel/workqueue.c:2657 [inline] process_scheduled_works+0xa60/0x1600 kernel/workqueue.c:2734 worker_thread+0xa5e/0xfe0 kernel/workqueue.c:2815 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293