Extracting prog: 1h16m49.023328951s Minimizing prog: 2h25m3.931530201s Simplifying prog options: 0s Extracting C: 2m18.152852297s Simplifying C: 27m50.081005348s extracting reproducer from 74 programs testing a last program of every proc single: executing 24 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setaffinity-connect$unix-syz_create_resource$futex-syz_create_resource$futex-futex-futex-futex detailed listing: executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) r0 = syz_create_resource$futex(&(0x7f00000000c0)=0x1) r1 = syz_create_resource$futex(&(0x7f0000000100)) futex(r0, 0xb, 0x1, 0x0, r1, 0x0) futex(r0, 0xb, 0x1, 0x0, r1, 0x1) futex(r0, 0xc, 0x1, &(0x7f0000000580)={0x0, 0x3938700}, r1, 0x1) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x5, 0x0, 0x5, 0x0, 0x5}, {0x0, 0x0, 0x800, 0xa000000000000000}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x3c}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x0, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-openat$zero-openat$kvm-geteuid-ioctl$XFS_IOC_ATTRLIST_BY_HANDLE-openat-openat$kvm-write-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x2080, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) geteuid() ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x120) openat$kvm(0xffffffffffffff9c, 0x0, 0x8040, 0x0) write(r2, &(0x7f0000000540)='\a', 0x1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setaffinity-connect$unix-syz_create_resource$futex-syz_create_resource$futex-futex-futex-futex detailed listing: executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) r0 = syz_create_resource$futex(&(0x7f00000000c0)=0x1) r1 = syz_create_resource$futex(&(0x7f0000000100)) futex(r0, 0xb, 0x1, 0x0, r1, 0x0) futex(r0, 0xb, 0x1, 0x0, r1, 0x1) futex(r0, 0xc, 0x1, &(0x7f0000000580)={0x0, 0x3938700}, r1, 0x1) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_xfrm-sendmsg$nl_xfrm detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x5, 0x0, 0x5, 0x0, 0x5}, {0x0, 0x0, 0x800, 0xa000000000000000}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x3c}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x0, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-ioctl$TUNSETIFF-prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-socket$inet_tcp-ioctl$sock_SIOCSIFBR-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-timer_create-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000140)=@generic={0x0, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x4000087, 0x2, 0x0) timer_create(0x2, 0x0, &(0x7f0000000340)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x20, 0x3, 0x3d0, 0x0, 0xa, 0x148, 0x0, 0x10, 0x338, 0x2a8, 0x2a8, 0x338, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00', {}, {0xff}}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x1c8, 0x200, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x1, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x6, 0x1, 0x3}, {0x0, 0x4, 0x7}, {0x0, 0x0, 0x7}, 0xb, 0x4}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x430) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-openat$zero-openat$kvm-geteuid-ioctl$XFS_IOC_ATTRLIST_BY_HANDLE-openat-openat$kvm-write-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x2080, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) geteuid() ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x120) openat$kvm(0xffffffffffffff9c, 0x0, 0x8040, 0x0) write(r2, &(0x7f0000000540)='\a', 0x1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-ioctl$TUNSETIFF-prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-socket$inet_tcp-ioctl$sock_SIOCSIFBR-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-timer_create-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000140)=@generic={0x0, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x4000087, 0x2, 0x0) timer_create(0x2, 0x0, &(0x7f0000000340)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x20, 0x3, 0x3d0, 0x0, 0xa, 0x148, 0x0, 0x10, 0x338, 0x2a8, 0x2a8, 0x338, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00', {}, {0xff}}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x1c8, 0x200, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x1, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x6, 0x1, 0x3}, {0x0, 0x4, 0x7}, {0x0, 0x0, 0x7}, 0xb, 0x4}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x430) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-socket$nl_route-prlimit64-sched_setscheduler-sched_setaffinity-getpid-sched_setscheduler-socketpair$unix-time-connect$unix-sendmmsg$unix-recvmmsg-rmdir-mmap$IORING_OFF_SQ_RING-syz_mount_image$ext4-syz_mount_image$vfat-symlinkat-renameat2 detailed listing: executing program 0: socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0xffffffffffffff25, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) time(&(0x7f00000000c0)) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408e, &(0x7f0000000400)={[{@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000fff}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time}]}, 0x3, 0x43b, &(0x7f0000001a40)="$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") syz_mount_image$vfat(&(0x7f0000000980), &(0x7f0000001580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x41, 0x0, &(0x7f0000000ac0)) symlinkat(&(0x7f0000000b00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000e00)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-socket$inet6-socket$packet-setsockopt$packet_int-prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-mmap$IORING_OFF_SQ_RING-syz_open_procfs$namespace detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) prlimit64(0x0, 0x10, &(0x7f0000000180)={0x3, 0x400000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000440)='ns/time_for_children\x00') program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-socket$nl_route-prlimit64-sched_setscheduler-sched_setaffinity-getpid-sched_setscheduler-socketpair$unix-time-connect$unix-sendmmsg$unix-recvmmsg-rmdir-mmap$IORING_OFF_SQ_RING-syz_mount_image$ext4-syz_mount_image$vfat-symlinkat-renameat2 detailed listing: executing program 0: socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0xffffffffffffff25, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) time(&(0x7f00000000c0)) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408e, &(0x7f0000000400)={[{@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000fff}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time}]}, 0x3, 0x43b, &(0x7f0000001a40)="$eJzs289PHFUcAPDvzLI0/SVY64/Sqmg1En9AoVV78KLRxIMmJnqoRwTaILSYgoltiKIx9WiaeDceTfwLPOnFqCcTr3o3TRrDpdXTmtmdgWW7i4C7bO1+PsnAezNvee+7b97sm3lsAD1rOPuRRByIiN8iYqCW3VhguPbr5ury1F+ry1NJVCpv/plUy91YXZ4qihav259nRtKI9NMkjjapd/HS5bnJ+fmZi3l+bOn8e2OLly4/M3t+8tzMuZkLE6dPnzo5/vxzE8+2Jc6sTTeGPlw4duTVt6++PnXm6js/fZMU8TfE0SbDmx18vFJpc3XddbAunfR1sSFsSykisu4qV8f/QJRivfMG4pVPuto4oKMqlUplf+vDKxXgDpbEVkvO5dcL4M5QfNBn97/FtktTj9vC9RdrN0BZ3DfzrXakL9K8TLnh/radhiPizMrfX2ZbdOY5BADABt9l85+nm83/0rivrtxd+drQYETcHRGHIuKeiDgcEfdGVMveHxEPbLP+xkWSW+c/6bUdBbZF2fzvhXxta+P8r5j9xWApzx2sxl9Ozs7Oz5zI35ORKO/J8uOb1PH9y79+3upY/fwv27L6i7lg3o5rfXs2vmZ6cmnyv8Rc7/rHEUN9zeJP1lYCkog4EhFDO6xj9smvj7U61ir+8lb+cBvWmSpfRTxR6/+VaIi/kLRenyxaMHNirDgrbvXzL1feaFX/v/d/Z2X9v6/p+b8W/2BSv167uP06rvz+Wct7mp2e//3JW9V0f77vg8mlpYvjEf3Ja7VG1++fWH9tkS/KZ/GPHG8+/g/F+jtxNCKyk/jBiHgoIh7O2/5IRDwaEcc3if/Hlx57d+fxd1YW//S2+n890R+Ne5onSnM/fLuh0sHtxJ/1/6lqaiTfs5Xr32btyq7jOz+bAQAA4P8njYgDkaSja+k0HR2t/b/84diXzi8sLj11duH9C9O17wgMRjktnnQN1D0PHc9v64v8REP+ZP7c+IvS3mp+dGphfrrbwUOP299i/Gf+KHW7dUDH+b4W9C7jH3qX8Q+9y/iH3tVk/O/tRjuA3dfs8/+jLrQD2H0N49+yH/QQ9//Qu4x/6F3GP/Skxb2x+Zf3JSSaJiK9LZoh0aFEt69MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7fFPAAAA//+Ju+Aa") syz_mount_image$vfat(&(0x7f0000000980), &(0x7f0000001580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x41, 0x0, &(0x7f0000000ac0)) symlinkat(&(0x7f0000000b00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000e00)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-socket$inet6-socket$packet-setsockopt$packet_int-prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-mmap$IORING_OFF_SQ_RING-syz_open_procfs$namespace detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) prlimit64(0x0, 0x10, &(0x7f0000000180)={0x3, 0x400000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000440)='ns/time_for_children\x00') program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate-pwrite64-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-ioctl$TUNSETFILTEREBPF-clock_gettime-timerfd_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) pwrite64(r5, &(0x7f0000000540)="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", 0x40b, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0xa, &(0x7f0000000980)=@raw=[@ldst={0x0, 0x3, 0x1, 0x0, 0x1, 0x30, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x6}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x63}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x1, 0xa, 0x8, 0x3, 0x18}, @jmp={0x5, 0x1, 0xb, 0x4, 0x8, 0x20, 0xfffffffffffffffc}], &(0x7f0000000a00)='GPL\x00', 0x1, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x9, 0x2, 0xffff8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[r0, r0, r0, r0], 0x0, 0x10, 0x5}, 0x94) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000001bc0)=r6) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{}, {r7, r8+60000000}}, 0x0) program crashed: INFO: rcu detected stall in corrupted single: successfully extracted reproducer found reproducer with 28 syscalls minimizing guilty program testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate-pwrite64-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-ioctl$TUNSETFILTEREBPF-clock_gettime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) pwrite64(r5, &(0x7f0000000540)="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", 0x40b, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0xa, &(0x7f0000000980)=@raw=[@ldst={0x0, 0x3, 0x1, 0x0, 0x1, 0x30, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x6}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x63}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x1, 0xa, 0x8, 0x3, 0x18}, @jmp={0x5, 0x1, 0xb, 0x4, 0x8, 0x20, 0xfffffffffffffffc}], &(0x7f0000000a00)='GPL\x00', 0x1, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x9, 0x2, 0xffff8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[r0, r0, r0, r0], 0x0, 0x10, 0x5}, 0x94) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000001bc0)=r6) clock_gettime(0x0, &(0x7f0000000000)) program crashed: INFO: rcu detected stall in sys_getpid testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate-pwrite64-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-ioctl$TUNSETFILTEREBPF detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) pwrite64(r5, &(0x7f0000000540)="d8cbaeed5669cbcc2960fc4ca3fff4a2ed997e03ecaa98ebab3e35560191562f2f02dd00df14edf25c0c886a030cfbac691abab1d73159bba6990f2cbe3bb1ab7bf19ab55d016cdfa48d0c542349d3443be1d2ecd4324b0214bd124174623d6ec9742eaf95b4ed69c97e6e42ee32856b0edb41e528c9e6a194cbd9fb1bf1bf522dc7c275377b4aae4ab0e5605953c3a2760994f8771dc8ab28968b23883966e3b3f425aceae61b2747077c62c651ae971f7259a49da2a60b95119090fdd1caabfc384dfda22d86a99923115c87362643817cc4cbeae3dc4a9084b5a6a3bf1b6ba3e734d795d512b3d8e079233e909475a9ea3fd172343a8685aafbcc00c19e7898b9a6fd750b6c2508e9cc36d5d2890273b1add78f392c4569767f12ea3dda15787a0ab0330e79b0232be239230568b8b3aeb383c7e97b413fc6e6f8b3e3394fd5976a4d7e25c71874d17b998a37e18f1eebf82ffd06f423fb55bcda100b3bbdf5c9be26125be89ac80c60ed349716071d6af801a9f95fa6102bab19927adedc9ff57c986667e2b8ed03a98007df552a87e76fe859fef436c570dca98b8bbdd638ea942e6d661e8599724d9b1a19314d16de70730d765c380cb862c0720f04d9e214d38a309df061c5f7e6a68a28ac41cfb6ff9134372ff6c815e752d0680e9a3ebcd27e7b0ffb6bf736cd77e85114ff8358f92f1bd7c8ca0932e60e67f6f0031de80a55c97cec25d54835bc7e6a4d6b93b74235f398cbe00580629fa755165e7bfc82a4f4e9039e1703660f564d61a699a36811c673ea3f25da359c677f7f223681060c88b98de730d19c02fb3d6ab96262008f32b0ea3758ead1a235fef2ba5bcdd84e98c8d21d83f8a25fd904ae295774ccabd0ab4794d8fe62617f8bc74509fb6ad81697ecbbb39996af268e2648f65aa653cac0238952fd2f67bbb98bd11c229dcce9c6dd99c3d2c4fff35ed0f9b80ad76960b8693342abb3c2fe5887fac2448e0627fae026b67afb51f3f87a12b423fafb53173f842c9ff302984a7ad909922c370d7ee579a7ae7540a5940a84a4d2b44a9b43bb2402835a55b14f35c7f3a805e41536ff0fd28694ac60168d0f75768ca7f87087813766d8328d48154aa4e0b4e4627a41650417dce9d5cd9998db40c76d87d1349423ccaa0ace72b9048ecd7bfde6d827c2209efd732cfbf4290c76527940c24013912c9d9cc399b603730860769a9fd5f3212420a774be00666b08a56888c50d3b93020a8d9db41a27a3612500ba495b6bbfbb388566e7437bf4bd7f31c292d82b829992499260ddfbdf61a8247891d8985ace96b99f9d48a9bc14519ad2dde9d9ef80acd40b2e1bc6c27630eac54952313fa298e859145fa564ba46380086a1f15162948ecbd1d51a0830bb616336cf2c88d51ffae2ed7502c1787a863502b5abe9835800cc636b426f380022b1bac85496501e", 0x40b, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0xa, &(0x7f0000000980)=@raw=[@ldst={0x0, 0x3, 0x1, 0x0, 0x1, 0x30, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x6}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x63}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x1, 0xa, 0x8, 0x3, 0x18}, @jmp={0x5, 0x1, 0xb, 0x4, 0x8, 0x20, 0xfffffffffffffffc}], &(0x7f0000000a00)='GPL\x00', 0x1, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x9, 0x2, 0xffff8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[r0, r0, r0, r0], 0x0, 0x10, 0x5}, 0x94) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000001bc0)=r6) program crashed: INFO: rcu detected stall in corrupted testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate-pwrite64-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) pwrite64(r5, &(0x7f0000000540)="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", 0x40b, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0xa, &(0x7f0000000980)=@raw=[@ldst={0x0, 0x3, 0x1, 0x0, 0x1, 0x30, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x6}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x63}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x1, 0xa, 0x8, 0x3, 0x18}, @jmp={0x5, 0x1, 0xb, 0x4, 0x8, 0x20, 0xfffffffffffffffc}], &(0x7f0000000a00)='GPL\x00', 0x1, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x9, 0x2, 0xffff8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[r0, r0, r0, r0], 0x0, 0x10, 0x5}, 0x94) program crashed: INFO: rcu detected stall in corrupted testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate-pwrite64 detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) pwrite64(r5, &(0x7f0000000540)="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", 0x40b, 0x4) program crashed: INFO: rcu detected stall in corrupted testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat-fallocate detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) fallocate(r5, 0x0, 0xfff, 0x9) program crashed: INFO: rcu detected stall in corrupted testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read-openat detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141442, 0x40) program crashed: INFO: rcu detected stall in corrupted testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap-read detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) read(0xffffffffffffffff, &(0x7f0000002180)=""/257, 0x101) program crashed: INFO: rcu detected stall in corrupted testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime-mmap detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) program crashed: INFO: rcu detected stall in corrupted testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-mprotect detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) program did not crash testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-ioctl$sock_inet_SIOCSIFADDR-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-ioctl$sock_inet_SIOCSIFADDR-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-socket$inet_tcp-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in sys_getpid testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-ioctl$sock_inet_SIOCSIFBRDADDR-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-sched_setscheduler-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-ioctl$USBDEVFS_REAPURBNDELAY-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000003c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in worker_thread testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-syz_open_dev$usbfs-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) syz_open_dev$usbfs(&(0x7f0000000200), 0x1ff, 0x1501) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in schedule_timeout testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in do_vmi_munmap testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-recvfrom-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) recvfrom(r1, &(0x7f0000000480)=""/186, 0xba, 0x10021, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-bpf$MAP_UPDATE_ELEM-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340), &(0x7f0000000380)=@udp6=r1}, 0x3f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in schedule_timeout testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-socket$inet6_udp-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in sys_mprotect testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-bpf$MAP_CREATE-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-io_uring_setup-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x7939, &(0x7f0000001c00)={0x0, 0x0, 0x1000, 0x801, 0xfc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in schedule_timeout testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, 0x0, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program did not crash testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: INFO: rcu detected stall in corrupted simplifying C reproducer testing compiled C program (duration=5m5.278184684s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program did not crash testing compiled C program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: INFO: rcu detected stall in corrupted testing compiled C program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: INFO: rcu detected stall in corrupted testing compiled C program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: INFO: rcu detected stall in corrupted testing compiled C program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: INFO: rcu detected stall in corrupted testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted validation run: crashed=true testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted validation run: crashed=true testing program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) program crashed: INFO: rcu detected stall in corrupted validation run: crashed=true reproducing took 4h20m17.265844524s repro crashed as (corrupted=true): rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: (detected by 1, t=10502 jiffies, g=14017, q=618 ncpus=2) rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294962170-4294951667), jiffies_till_next_fqs=1, root ->qsmask 0x0 rcu: rcu_preempt kthread starved for 10505 jiffies! g14017 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27848 pid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_timeout+0x188/0x2d0 kernel/time/timer.c:2168 rcu_gp_fqs_loop+0x30d/0x1590 kernel/rcu/tree.c:1667 rcu_gp_kthread+0x9d/0x3b0 kernel/rcu/tree.c:1866 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 rcu: Stack dump where RCU GP kthread last ran: CPU: 1 PID: 6037 Comm: syz.1.18 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 RIP: 0010:bytes_is_nonzero mm/kasan/generic.c:85 [inline] RIP: 0010:memory_is_nonzero mm/kasan/generic.c:102 [inline] RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:127 [inline] RIP: 0010:memory_is_poisoned mm/kasan/generic.c:159 [inline] RIP: 0010:check_region_inline mm/kasan/generic.c:178 [inline] RIP: 0010:kasan_check_range+0x89/0x290 mm/kasan/generic.c:187 Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 8d 01 00 00 49 ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd RSP: 0018:ffffc90003957a30 EFLAGS: 00000246 RAX: 00000000b0ba6c01 RBX: ffffffffffffffff RCX: ffffffff817b999b RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000a23780 RBP: 00000000e10fba4f R08: ffffc90000a23783 R09: 1ffff920001446f0 R10: dffffc0000000000 R11: fffff520001446f0 R12: 0000000000000001 R13: 0000000000002780 R14: fffff520001446f1 R15: 1ffff920001446f0 FS: 00007fe04c7fe6c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000058 CR3: 0000000061256000 CR4: 00000000003506e0 Call Trace: instrument_atomic_read_write include/linux/instrumented.h:96 [inline] atomic_inc include/linux/atomic/atomic-instrumented.h:435 [inline] futex_hb_waiters_inc kernel/futex/futex.h:187 [inline] futex_q_lock+0x17b/0x250 kernel/futex/core.c:538 futex_wait_setup+0xed/0x270 kernel/futex/waitwake.c:607 futex_wait+0x1bc/0x5c0 kernel/futex/waitwake.c:651 do_futex+0x2ff/0x3e0 kernel/futex/syscalls.c:134 __do_sys_futex kernel/futex/syscalls.c:211 [inline] __se_sys_futex+0x3a9/0x440 kernel/futex/syscalls.c:192 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7fe04d19e559 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fe04c7fe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: ffffffffffffffda RBX: 00007fe04d425fa8 RCX: 00007fe04d19e559 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe04d425fa8 RBP: 00007fe04d425fa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fe04d426038 R14: 00007fffae96c800 R15: 00007fffae96c8e8 report is corrupted, running repro again testing compiled C program (duration=5m5.278184684s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-fcntl$lock-mprotect-timer_settime program crashed: INFO: rcu detected stall in syscall_exit_to_user_mode final repro crashed as (corrupted=false): rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: (detected by 1, t=10502 jiffies, g=9037, q=30 ncpus=2) rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294956997-4294946494), jiffies_till_next_fqs=1, root ->qsmask 0x0 rcu: rcu_preempt kthread starved for 10504 jiffies! g9037 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26856 pid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_timeout+0x188/0x2d0 kernel/time/timer.c:2168 rcu_gp_fqs_loop+0x30d/0x1590 kernel/rcu/tree.c:1667 rcu_gp_kthread+0x9d/0x3b0 kernel/rcu/tree.c:1866 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 5799 Comm: syz-executor217 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 RIP: 0010:__run_hrtimer kernel/time/hrtimer.c:1752 [inline] RIP: 0010:__hrtimer_run_queues+0x4cd/0xc10 kernel/time/hrtimer.c:1818 Code: 00 eb 0f e8 a5 11 10 00 49 bf 00 00 00 00 00 fc ff df 49 8d 5d 3b 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 da 02 00 00 <0f> b6 1b 31 ff 89 de e8 07 14 10 00 85 db 74 10 e8 6e 11 10 00 4c RSP: 0018:ffffc90000007d60 EFLAGS: 00000046 RAX: 0000000000000000 RBX: ffff888079574263 RCX: ffff888030fe5a00 RDX: 0000000000010000 RSI: ffffffff8b1d5140 RDI: ffffffff8b1d5100 RBP: ffffc90000007eb8 R08: ffffffff8f6c5aef R09: 1ffffffff1ed8b5d R10: dffffc0000000000 R11: fffffbfff1ed8b5e R12: ffffffff8179a5f0 R13: ffff888079574228 R14: ffff8880b8c2b888 R15: dffffc0000000000 FS: 00007fbe1a21f6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000058 CR3: 0000000075522000 CR4: 00000000003506f0 Call Trace: hrtimer_interrupt+0x39d/0x980 kernel/time/hrtimer.c:1880 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1077 [inline] __sysvec_apic_timer_interrupt+0xfb/0x3b0 arch/x86/kernel/apic/apic.c:1094 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1088 [inline] sysvec_apic_timer_interrupt+0x9f/0xc0 arch/x86/kernel/apic/apic.c:1088 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687 RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:160 [inline] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 kernel/locking/spinlock.c:202 Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ca 57 cc f6 48 89 df e8 72 2b cd f6 e8 cd 3c f1 f6 fb bf 01 00 00 00 22 35 c0 f6 65 8b 05 93 f2 66 75 85 c0 74 02 5b c3 e8 80 d7 63 RSP: 0018:ffffc9000466fc78 EFLAGS: 00000286 RAX: 0cab1f66bd140f00 RBX: ffff88802cba65c0 RCX: 0cab1f66bd140f00 RDX: dffffc0000000000 RSI: ffffffff8acacfe0 RDI: 0000000000000001 RBP: 0000000000000000 R08: ffffffff8f6c5aef R09: 1ffffffff1ed8b5d R10: dffffc0000000000 R11: fffffbfff1ed8b5e R12: 0000000000000021 R13: ffff88802cba6a58 R14: dffffc0000000000 R15: 000000001c000004 spin_unlock_irq include/linux/spinlock.h:401 [inline] get_signal+0x1197/0x1390 kernel/signal.c:2918 arch_do_signal_or_restart+0xc2/0x7b0 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop+0x70/0x110 kernel/entry/common.c:177 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:213 __syscall_exit_to_user_mode_work kernel/entry/common.c:294 [inline] syscall_exit_to_user_mode+0x1a/0x50 kernel/entry/common.c:305 do_syscall_64+0x61/0xb0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7fbe1a240517 Code: 00 85 c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 RSP: 002b:00007fbe1a21f178 EFLAGS: 00000246 RAX: 00000000000000ca RBX: 00007fbe1a2efb28 RCX: 00007fbe1a240519 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbe1a2efb28 RBP: 00007fbe1a2efb20 R08: 00007fbe1a21fcdc R09: 00007fbe1a21fcdc R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe1a2efb2c R13: 0000000000000000 R14: 00007ffeb25dfdf0 R15: 00007ffeb25dfed8