Extracting prog: 1h18m7.988463794s Minimizing prog: 2h14m0.078203904s Simplifying prog options: 0s Extracting C: 3m24.485473763s Simplifying C: 32m38.221505057s extracting reproducer from 74 programs testing a last program of every proc single: executing 24 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setaffinity-connect$unix-syz_create_resource$futex-syz_create_resource$futex-futex-futex-futex detailed listing: executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) r0 = syz_create_resource$futex(&(0x7f00000000c0)=0x1) r1 = syz_create_resource$futex(&(0x7f0000000100)) futex(r0, 0xb, 0x1, 0x0, r1, 0x0) futex(r0, 0xb, 0x1, 0x0, r1, 0x1) futex(r0, 0xc, 0x1, &(0x7f0000000580)={0x0, 0x3938700}, r1, 0x1) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x5, 0x0, 0x5, 0x0, 0x5}, {0x0, 0x0, 0x800, 0xa000000000000000}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x3c}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x0, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-openat$zero-openat$kvm-geteuid-ioctl$XFS_IOC_ATTRLIST_BY_HANDLE-openat-openat$kvm-write-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x2080, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) geteuid() ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x120) openat$kvm(0xffffffffffffff9c, 0x0, 0x8040, 0x0) write(r2, &(0x7f0000000540)='\a', 0x1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setaffinity-connect$unix-syz_create_resource$futex-syz_create_resource$futex-futex-futex-futex detailed listing: executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) r0 = syz_create_resource$futex(&(0x7f00000000c0)=0x1) r1 = syz_create_resource$futex(&(0x7f0000000100)) futex(r0, 0xb, 0x1, 0x0, r1, 0x0) futex(r0, 0xb, 0x1, 0x0, r1, 0x1) futex(r0, 0xc, 0x1, &(0x7f0000000580)={0x0, 0x3938700}, r1, 0x1) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x5, 0x0, 0x5, 0x0, 0x5}, {0x0, 0x0, 0x800, 0xa000000000000000}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x3c}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x0, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-ioctl$TUNSETIFF-prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-socket$inet_tcp-ioctl$sock_SIOCSIFBR-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-timer_create-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000140)=@generic={0x0, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x4000087, 0x2, 0x0) timer_create(0x2, 0x0, &(0x7f0000000340)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x20, 0x3, 0x3d0, 0x0, 0xa, 0x148, 0x0, 0x10, 0x338, 0x2a8, 0x2a8, 0x338, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00', {}, {0xff}}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x1c8, 0x200, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x1, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x6, 0x1, 0x3}, {0x0, 0x4, 0x7}, {0x0, 0x0, 0x7}, 0xb, 0x4}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x430) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-openat$zero-openat$kvm-geteuid-ioctl$XFS_IOC_ATTRLIST_BY_HANDLE-openat-openat$kvm-write-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x2080, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) geteuid() ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x120) openat$kvm(0xffffffffffffff9c, 0x0, 0x8040, 0x0) write(r2, &(0x7f0000000540)='\a', 0x1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-ioctl$TUNSETIFF-prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-socket$inet_tcp-ioctl$sock_SIOCSIFBR-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-timer_create-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000140)=@generic={0x0, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x4000087, 0x2, 0x0) timer_create(0x2, 0x0, &(0x7f0000000340)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x20, 0x3, 0x3d0, 0x0, 0xa, 0x148, 0x0, 0x10, 0x338, 0x2a8, 0x2a8, 0x338, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00', {}, {0xff}}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x1c8, 0x200, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x1, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x6, 0x1, 0x3}, {0x0, 0x4, 0x7}, {0x0, 0x0, 0x7}, 0xb, 0x4}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x430) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-socket$nl_route-prlimit64-sched_setscheduler-sched_setaffinity-getpid-sched_setscheduler-socketpair$unix-time-connect$unix-sendmmsg$unix-recvmmsg-rmdir-mmap$IORING_OFF_SQ_RING-syz_mount_image$ext4-syz_mount_image$vfat-symlinkat-renameat2 detailed listing: executing program 0: socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0xffffffffffffff25, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) time(&(0x7f00000000c0)) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408e, &(0x7f0000000400)={[{@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000fff}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time}]}, 0x3, 0x43b, &(0x7f0000001a40)="$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") syz_mount_image$vfat(&(0x7f0000000980), &(0x7f0000001580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x41, 0x0, &(0x7f0000000ac0)) symlinkat(&(0x7f0000000b00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000e00)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-socket$inet6-socket$packet-setsockopt$packet_int-prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-mmap$IORING_OFF_SQ_RING-syz_open_procfs$namespace detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) prlimit64(0x0, 0x10, &(0x7f0000000180)={0x3, 0x400000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000440)='ns/time_for_children\x00') program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-socket$nl_route-prlimit64-sched_setscheduler-sched_setaffinity-getpid-sched_setscheduler-socketpair$unix-time-connect$unix-sendmmsg$unix-recvmmsg-rmdir-mmap$IORING_OFF_SQ_RING-syz_mount_image$ext4-syz_mount_image$vfat-symlinkat-renameat2 detailed listing: executing program 0: socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0xffffffffffffff25, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) time(&(0x7f00000000c0)) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408e, &(0x7f0000000400)={[{@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000fff}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time}]}, 0x3, 0x43b, &(0x7f0000001a40)="$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") syz_mount_image$vfat(&(0x7f0000000980), &(0x7f0000001580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x41, 0x0, &(0x7f0000000ac0)) symlinkat(&(0x7f0000000b00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000e00)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-socket$inet6-socket$packet-setsockopt$packet_int-prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-mmap$IORING_OFF_SQ_RING-syz_open_procfs$namespace detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) prlimit64(0x0, 0x10, &(0x7f0000000180)={0x3, 0x400000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000440)='ns/time_for_children\x00') program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate-pwrite64-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-ioctl$TUNSETFILTEREBPF-clock_gettime-timerfd_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) pwrite64(r5, &(0x7f0000000540)="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", 0x40b, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0xa, &(0x7f0000000980)=@raw=[@ldst={0x0, 0x3, 0x1, 0x0, 0x1, 0x30, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x6}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x63}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x1, 0xa, 0x8, 0x3, 0x18}, @jmp={0x5, 0x1, 0xb, 0x4, 0x8, 0x20, 0xfffffffffffffffc}], &(0x7f0000000a00)='GPL\x00', 0x1, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x9, 0x2, 0xffff8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[r0, r0, r0, r0], 0x0, 0x10, 0x5}, 0x94) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000001bc0)=r6) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{}, {r7, r8+60000000}}, 0x0) program crashed: INFO: rcu detected stall in corrupted single: successfully extracted reproducer found reproducer with 28 syscalls minimizing guilty program testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate-pwrite64-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-ioctl$TUNSETFILTEREBPF-clock_gettime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) pwrite64(r5, &(0x7f0000000540)="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", 0x40b, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0xa, &(0x7f0000000980)=@raw=[@ldst={0x0, 0x3, 0x1, 0x0, 0x1, 0x30, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x6}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x63}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x1, 0xa, 0x8, 0x3, 0x18}, @jmp={0x5, 0x1, 0xb, 0x4, 0x8, 0x20, 0xfffffffffffffffc}], &(0x7f0000000a00)='GPL\x00', 0x1, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x9, 0x2, 0xffff8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[r0, r0, r0, r0], 0x0, 0x10, 0x5}, 0x94) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000001bc0)=r6) clock_gettime(0x0, &(0x7f0000000000)) program crashed: INFO: rcu detected stall in sys_getpid testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate-pwrite64-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-ioctl$TUNSETFILTEREBPF detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) pwrite64(r5, &(0x7f0000000540)="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", 0x40b, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0xa, &(0x7f0000000980)=@raw=[@ldst={0x0, 0x3, 0x1, 0x0, 0x1, 0x30, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x6}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x63}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x1, 0xa, 0x8, 0x3, 0x18}, @jmp={0x5, 0x1, 0xb, 0x4, 0x8, 0x20, 0xfffffffffffffffc}], &(0x7f0000000a00)='GPL\x00', 0x1, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x9, 0x2, 0xffff8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[r0, r0, r0, r0], 0x0, 0x10, 0x5}, 0x94) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000001bc0)=r6) program crashed: INFO: rcu detected stall in sys_getpid testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate-pwrite64-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) pwrite64(r5, &(0x7f0000000540)="d8cbaeed5669cbcc2960fc4ca3fff4a2ed997e03ecaa98ebab3e35560191562f2f02dd00df14edf25c0c886a030cfbac691abab1d73159bba6990f2cbe3bb1ab7bf19ab55d016cdfa48d0c542349d3443be1d2ecd4324b0214bd124174623d6ec9742eaf95b4ed69c97e6e42ee32856b0edb41e528c9e6a194cbd9fb1bf1bf522dc7c275377b4aae4ab0e5605953c3a2760994f8771dc8ab28968b23883966e3b3f425aceae61b2747077c62c651ae971f7259a49da2a60b95119090fdd1caabfc384dfda22d86a99923115c87362643817cc4cbeae3dc4a9084b5a6a3bf1b6ba3e734d795d512b3d8e079233e909475a9ea3fd172343a8685aafbcc00c19e7898b9a6fd750b6c2508e9cc36d5d2890273b1add78f392c4569767f12ea3dda15787a0ab0330e79b0232be239230568b8b3aeb383c7e97b413fc6e6f8b3e3394fd5976a4d7e25c71874d17b998a37e18f1eebf82ffd06f423fb55bcda100b3bbdf5c9be26125be89ac80c60ed349716071d6af801a9f95fa6102bab19927adedc9ff57c986667e2b8ed03a98007df552a87e76fe859fef436c570dca98b8bbdd638ea942e6d661e8599724d9b1a19314d16de70730d765c380cb862c0720f04d9e214d38a309df061c5f7e6a68a28ac41cfb6ff9134372ff6c815e752d0680e9a3ebcd27e7b0ffb6bf736cd77e85114ff8358f92f1bd7c8ca0932e60e67f6f0031de80a55c97cec25d54835bc7e6a4d6b93b74235f398cbe00580629fa755165e7bfc82a4f4e9039e1703660f564d61a699a36811c673ea3f25da359c677f7f223681060c88b98de730d19c02fb3d6ab96262008f32b0ea3758ead1a235fef2ba5bcdd84e98c8d21d83f8a25fd904ae295774ccabd0ab4794d8fe62617f8bc74509fb6ad81697ecbbb39996af268e2648f65aa653cac0238952fd2f67bbb98bd11c229dcce9c6dd99c3d2c4fff35ed0f9b80ad76960b8693342abb3c2fe5887fac2448e0627fae026b67afb51f3f87a12b423fafb53173f842c9ff302984a7ad909922c370d7ee579a7ae7540a5940a84a4d2b44a9b43bb2402835a55b14f35c7f3a805e41536ff0fd28694ac60168d0f75768ca7f87087813766d8328d48154aa4e0b4e4627a41650417dce9d5cd9998db40c76d87d1349423ccaa0ace72b9048ecd7bfde6d827c2209efd732cfbf4290c76527940c24013912c9d9cc399b603730860769a9fd5f3212420a774be00666b08a56888c50d3b93020a8d9db41a27a3612500ba495b6bbfbb388566e7437bf4bd7f31c292d82b829992499260ddfbdf61a8247891d8985ace96b99f9d48a9bc14519ad2dde9d9ef80acd40b2e1bc6c27630eac54952313fa298e859145fa564ba46380086a1f15162948ecbd1d51a0830bb616336cf2c88d51ffae2ed7502c1787a863502b5abe9835800cc636b426f380022b1bac85496501e", 0x40b, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0xa, &(0x7f0000000980)=@raw=[@ldst={0x0, 0x3, 0x1, 0x0, 0x1, 0x30, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x6}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x63}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x1, 0xa, 0x8, 0x3, 0x18}, @jmp={0x5, 0x1, 0xb, 0x4, 0x8, 0x20, 0xfffffffffffffffc}], &(0x7f0000000a00)='GPL\x00', 0x1, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x9, 0x2, 0xffff8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[r0, r0, r0, r0], 0x0, 0x10, 0x5}, 0x94) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate-pwrite64 detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) pwrite64(r5, &(0x7f0000000540)="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", 0x40b, 0x4) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) program crashed: INFO: rcu detected stall in sys_getpid testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) program crashed: INFO: rcu detected stall in worker_thread testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) program did not crash testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in validate_mm testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in syscall_exit_to_user_mode testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in worker_thread testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in syscall_exit_to_user_mode testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, 0x0, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: INFO: rcu detected stall in corrupted simplifying C reproducer testing compiled C program (duration=4m59.45094972s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program did not crash testing compiled C program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program did not crash testing compiled C program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: INFO: rcu detected stall in corrupted testing compiled C program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: INFO: rcu detected stall in corrupted testing compiled C program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: INFO: rcu detected stall in corrupted testing compiled C program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program did not crash testing compiled C program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: INFO: rcu detected stall in corrupted testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in worker_thread validation run: crashed=true testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted validation run: crashed=true testing program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted validation run: crashed=true reproducing took 4h17m1.386162926s repro crashed as (corrupted=true): rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: (detected by 1, t=10502 jiffies, g=13949, q=554 ncpus=2) rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294958997-4294948494), jiffies_till_next_fqs=1, root ->qsmask 0x0 rcu: rcu_preempt kthread starved for 10504 jiffies! g13949 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26856 pid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_timeout+0x188/0x2d0 kernel/time/timer.c:2168 rcu_gp_fqs_loop+0x30d/0x1590 kernel/rcu/tree.c:1667 rcu_gp_kthread+0x9d/0x3b0 kernel/rcu/tree.c:1866 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 6052 Comm: syz.3.24 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 RIP: 0010:ktime_get_with_offset+0xcd/0x330 kernel/time/timekeeping.c:890 Code: ca 0f 00 89 d8 83 e0 01 75 07 e8 2e c7 0f 00 eb 19 f3 90 8b 1d f4 f2 7c 0c f6 c3 01 74 07 e8 1a c7 0f 00 eb ec e8 13 c7 0f 00 <48> 8b 05 3c f3 7c 0c 48 89 44 24 10 48 b8 00 00 00 00 00 fc ff df RSP: 0018:ffffc900035dfb70 EFLAGS: 00000093 RAX: ffffffff8177c982 RBX: 000000000000a366 RCX: ffff88802b929e00 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: ffffffff8f6c5aef R09: 1ffffffff1ed8b5d R10: dffffc0000000000 R11: fffffbfff1ed8b5e R12: dffffc0000000000 R13: dffffc0000000000 R14: ffffffff8df4bd48 R15: ffff8880b8c2b8a0 FS: 00007fb6abe576c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000058 CR3: 000000005f3af000 CR4: 00000000003506f0 Call Trace: common_hrtimer_rearm+0x61/0x110 kernel/time/posix-timers.c:248 posixtimer_rearm+0x12e/0x340 kernel/time/posix-timers.c:268 dequeue_signal+0x1be/0x4b0 kernel/signal.c:706 get_signal+0x536/0x1390 kernel/signal.c:2795 arch_do_signal_or_restart+0xc2/0x7b0 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop+0x70/0x110 kernel/entry/common.c:177 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:213 __syscall_exit_to_user_mode_work kernel/entry/common.c:294 [inline] syscall_exit_to_user_mode+0x1a/0x50 kernel/entry/common.c:305 do_syscall_64+0x61/0xb0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7fb6aaf9e557 Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 RSP: 002b:00007fb6abe570e8 EFLAGS: 00000246 RAX: 00000000000000ca RBX: 00007fb6ab225fa8 RCX: 00007fb6aaf9e559 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb6ab225fa8 RBP: 00007fb6ab225fa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fb6ab226038 R14: 00007ffd26e94b90 R15: 00007ffd26e94c78 report is corrupted, running repro again testing compiled C program (duration=4m59.45094972s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: INFO: rcu detected stall in syscall_exit_to_user_mode final repro crashed as (corrupted=false): rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: (detected by 1, t=10502 jiffies, g=9073, q=180 ncpus=2) rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294955652-4294945149), jiffies_till_next_fqs=1, root ->qsmask 0x0 rcu: rcu_preempt kthread starved for 10504 jiffies! g9073 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27848 pid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_timeout+0x188/0x2d0 kernel/time/timer.c:2168 rcu_gp_fqs_loop+0x30d/0x1590 kernel/rcu/tree.c:1667 rcu_gp_kthread+0x9d/0x3b0 kernel/rcu/tree.c:1866 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 5786 Comm: syz-executor185 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 RIP: 0010:arch_static_branch arch/x86/include/asm/jump_label.h:27 [inline] RIP: 0010:static_key_false include/linux/jump_label.h:207 [inline] RIP: 0010:native_write_msr arch/x86/include/asm/msr.h:147 [inline] RIP: 0010:wrmsr arch/x86/include/asm/msr.h:254 [inline] RIP: 0010:native_apic_msr_write+0x39/0x50 arch/x86/include/asm/apic.h:196 Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 cb 31 2e 03 66 2e 0f 1f 84 00 00 00 00 00 RSP: 0018:ffffc90000007e80 EFLAGS: 00000046 RAX: 0000000000021fe1 RBX: ffff8880b8c282c0 RCX: 0000000000000838 RDX: 0000000000000000 RSI: 0000000000021fe1 RDI: 0000000000000838 RBP: 0000000000000000 R08: ffffffff8f6c5aef R09: 1ffffffff1ed8b5d R10: dffffc0000000000 R11: fffffbfff1ed8b5e R12: dffffc0000000000 R13: 0000000010000863 R14: 0000000000021fe1 R15: 0000000000000020 FS: 00007f22631036c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000058 CR3: 0000000077457000 CR4: 00000000003506f0 Call Trace: apic_write arch/x86/include/asm/apic.h:404 [inline] lapic_next_event+0x11/0x20 arch/x86/kernel/apic/apic.c:448 clockevents_program_event+0x1c0/0x310 kernel/time/clockevents.c:334 hrtimer_interrupt+0x565/0x980 kernel/time/hrtimer.c:1893 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1077 [inline] __sysvec_apic_timer_interrupt+0xfb/0x3b0 arch/x86/kernel/apic/apic.c:1094 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1088 [inline] sysvec_apic_timer_interrupt+0x9f/0xc0 arch/x86/kernel/apic/apic.c:1088 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687 RIP: 0010:__rseq_handle_notify_resume+0x4/0x1140 kernel/rseq.c:338 Code: 25 28 00 00 00 48 3b 84 24 40 01 00 00 75 0f 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 83 e1 dd 08 0f 1f 00 f3 0f 1e fa <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec e0 00 RSP: 0018:ffffc90003cb7d78 EFLAGS: 00000293 RAX: ffffffff812ecc75 RBX: 1ffff92000796fb4 RCX: ffff88807a87bc00 RDX: 0000000000000000 RSI: ffffc90003cb7f58 RDI: ffffc90003cb7de0 RBP: ffffc90003cb7ec0 R08: ffffffff8f6c5aef R09: 1ffffffff1ed8b5d R10: dffffc0000000000 R11: fffffbfff1ed8b5e R12: 0000000000000000 R13: ffff88807a87d160 R14: dffffc0000000000 R15: ffffc90003cb7f58 rseq_handle_notify_resume include/linux/sched.h:2385 [inline] rseq_signal_deliver include/linux/sched.h:2393 [inline] setup_rt_frame arch/x86/kernel/signal.c:212 [inline] handle_signal arch/x86/kernel/signal.c:267 [inline] arch_do_signal_or_restart+0x3d2/0x7b0 arch/x86/kernel/signal.c:312 exit_to_user_mode_loop+0x70/0x110 kernel/entry/common.c:177 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:213 __syscall_exit_to_user_mode_work kernel/entry/common.c:294 [inline] syscall_exit_to_user_mode+0x1a/0x50 kernel/entry/common.c:305 do_syscall_64+0x61/0xb0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f2263124517 Code: 00 85 c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 RSP: 002b:00007f2263103178 EFLAGS: 00000246 RAX: 00000000000000ca RBX: 00007f22631d3b28 RCX: 00007f2263124519 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f22631d3b28 RBP: 00007f22631d3b20 R08: 00007f2263103cdc R09: 00007f2263103cdc R10: 0000000000000000 R11: 0000000000000246 R12: 00007f22631d3b2c R13: 0000000000000000 R14: 00007fff97cb1840 R15: 00007fff97cb1928