Extracting prog: 22m44.74411717s Minimizing prog: 51m25.487945736s Simplifying prog options: 6m21.801154728s Extracting C: 4m28.277433212s Simplifying C: 0s extracting reproducer from 30 programs testing a last program of every proc single: executing 5 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_bcm-socket$can_bcm-ioctl$ifreq_SIOCGIFINDEX_vcan-sendmsg$can_j1939-connect$can_bcm-sendmsg$can_bcm detailed listing: executing program 0: socket$can_bcm(0x1d, 0x2, 0x2) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)="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", 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x40) connect$can_bcm(r0, &(0x7f0000000080)={0x1d, r1}, 0xb) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r0, @ANYRES64, @ANYBLOB="000000000100000000000000840004"], 0x48}, 0x1, 0x0, 0x0, 0x400c011}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmsg$TIPC_CMD_SET_NODE_ADDR-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL-sendmsg$IPCTNL_MSG_TIMEOUT_NEW-bind$netlink-read$alg-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT-sendmsg$DEVLINK_CMD_TRAP_SET-ioctl-ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD-syz_genetlink_get_family_id$ipvs-sendmsg$IPVS_CMD_DEL_DEST-sendmsg$NL80211_CMD_GET_SURVEY-sendmsg$AUDIT_USER_TTY-accept$ax25-ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD-socket$pppoe-ioctl$PPPIOCSMRU-syz_init_net_socket$nl_rdma-socket$netlink-pipe-sendmsg$kcm-recvmmsg-bpf$MAP_CREATE-socket$inet6_sctp-openat$cgroup_ro-sendmsg$nl_route detailed listing: executing program 0: r0 = socket(0x3, 0xa, 0x924) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20048811) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r1, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x1e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4040) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) bind$netlink(r0, &(0x7f00000003c0)={0x10, 0x0, 0x25dfdbfe, 0x40000}, 0xc) read$alg(r0, &(0x7f0000000400)=""/100, 0x64) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x8804) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x11c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x804}, 0xc000) ioctl(r0, 0x59e, &(0x7f0000000800)="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") ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000001800)={0x3, 'pim6reg\x00', {0x4}, 0x31db}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001880), r0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000001a00)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x144000}, 0xc, &(0x7f00000019c0)={&(0x7f00000018c0)={0xe0, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x38}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x18b85274}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40800}, 0x40) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x2200280}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x76}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b80)={0xbc, 0x464, 0x2, 0x70bd25, 0x25dfdbfb, "960ed5869fcd6014564f361914e17c15eba3a7ae4b410bc07c111ecbd581c718d46b3f843c5416af9eaf97527e66bdb5e6ebd5a7d3200168a83483e24060fbf77e2edf757a89d63b3f554c1944d7ff2e5e687b2732ce53ab90ac4e7f385868b48158976e07d68981aa4853544c468cb281e8114e37f14c659e028a998eef3d408a95cd1a9f4967e3dfc368e14be0ee834e2e3ac62010cffd3043ba791e562240adf74a18852a10202b2486d1", ["", "", "", ""]}, 0xbc}, 0x1, 0x0, 0x0, 0x24008848}, 0x2400c0d5) r5 = accept$ax25(r0, &(0x7f0000001cc0)={{}, [@rose, @default, @rose, @rose, @bcast, @rose, @bcast, @netrom]}, &(0x7f0000001d40)=0x48) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000001d80)={0x7, 'ip6gre0\x00', {0x8}, 0x40}) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r6, 0x40047452, &(0x7f0000001dc0)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x5) pipe(&(0x7f0000001e00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r7, &(0x7f0000002380)={&(0x7f0000001e40)=@hci={0x1f, 0x1, 0x3}, 0x80, &(0x7f0000002180)=[{&(0x7f0000001ec0)="98bffdcd91a921abd5ebf06d674e16281ddefcd7efeecf0a8911cfe3fd8e5902cc34d01da5949621f6958800f2d6ac0ae500d5e180958a105ddcec115d20a9c1be118d0573bfa98b9d79b485908ed0d73131594b2bcf41922a9130f6ba3ad79376b7003d3d1093346d7e94389f000bb48cc6bd17f1c0d222a7bd79581a30fa86f70944674174d3c59019ae0e8c310891fb7b0e7c00ced693211f7f5f0ea43c6c3743fedf6758dbf2c53cacfa415416b28c25e8aac8b481b8b4af", 0xba}, {&(0x7f0000001f80)="61ff926367024d98cb6e597ad1b5f082f242e4f43453581fa3432b15ec76a6f0f95f062c92718dcaab8c9e02e9c5df52af0c6b5f424a6cb7e28fa7717680584a41a6572e32a8", 0x46}, {&(0x7f0000002000)="c3f63922f6cb4af82de45966201224e1df3abfb76805580af5c5745eeabd54010d9bdf0ad9e7b868cddd3f214b7fbb542be89f5d523ee6ddac53de05023e89b519", 0x41}, {&(0x7f0000002080)="d8e4908cff1f3c47e8c945c80cc3d07478e2e4f909f70aff8505dbd71ec1ca83fae47713d2469b4d4081e78563e880b30a46ba87115aeb7d1322b6f34b6bb097fbb9e2affe15264070284705ddb4117107325cbb6cceb10c4a0bad43894fb17841bf0d05ee55f262531f0b8bdface4b774e23a2b21d5e247081fdbf563aa1b2a4c6319eb69e4ee22c979a15d92693dfc5f2ddd5ccf2692038073ff038b21f7888007ababac1577d70a4340f2581d73564c2f916e0dc63b3b6b3fa60b8173", 0xbe}, {&(0x7f0000002140)}], 0x5, &(0x7f0000002200)=[{0x88, 0x1, 0x9, "07dd82edfa6d751547e0b8ccdc77dc222bf780890f5f6ca5381da19ffacf7e95873d33c448c3b46653560e39fa944a4ec1ea0ffafe710afd3b41318d2e7c1b04fb7073c33cef4698df391479726673e1afc0e1df31fb2227d606d775f4abe2a7d29a66f773d1169e7a6b6ae6157ea75a7d09b3fd"}, {0xc0, 0x6, 0x3ff, "479da958da8c70bc26b446e3e8f1917a2ec5f797c02c939d000b5776daeed6b4e1e26efcfae498640cf29f912f9fbf4c2b78f013e246dfad9ca05ff9e0ad170b6895836694147160ee328a0bee75222383ec0aeb5ee6edcaa2a1808041d697ad4177e88eabe818e35976b6719b1be51d5a1f518d84a8219aec23e634f427c33523559e96a540aa62c4b4416fa728b72346bccd04df3c516a499b39d7701fa2f20ea29e70836f659838"}], 0x148}, 0x40800) recvmmsg(r7, &(0x7f00000048c0)=[{{&(0x7f00000023c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/200, 0xc8}, {&(0x7f0000002540)=""/228, 0xe4}], 0x2, &(0x7f0000002680)=""/242, 0xf2}, 0x1}, {{&(0x7f0000002780)=@isdn, 0x80, &(0x7f0000003880)=[{&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/91, 0x5b}], 0x2, &(0x7f00000038c0)=""/4096, 0x1000}, 0xa7}], 0x2, 0x40000062, &(0x7f0000004940)={0x0, 0x989680}) bpf$MAP_CREATE(0x0, &(0x7f0000004980)=@bloom_filter={0x1e, 0x7, 0x7, 0x4, 0x60010, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0xd}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(r7, &(0x7f0000004a00)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000004b00)={&(0x7f0000004a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004a80)=@ipv6_getaddr={0x20, 0x16, 0x800, 0x70bd2c, 0x25dfdbfe, {0xa, 0x18, 0x1, 0xc8}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c050}, 0x200080c0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_int-socket$nl_route-socket-sendmsg$nl_route_sched-getsockname$packet-sendmsg$nl_route-sendmsg$nl_route_sched-bind$packet-sendto$inet6 detailed listing: executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x44}}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffff, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) program crashed: INFO: rcu detected stall in corrupted single: successfully extracted reproducer found reproducer with 4 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffff, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: socket(0x11, 0x800000003, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffff, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffff, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffff, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched program crashed: INFO: rcu detected stall in worker_thread a never seen crash title: INFO: rcu detected stall in worker_thread, ignore simplifying guilty program options testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffff, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) program crashed: INFO: rcu detected stall in sys_munmap a never seen crash title: INFO: rcu detected stall in sys_munmap, ignore testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffff, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) program crashed: INFO: rcu detected stall in x64_sys_call a never seen crash title: INFO: rcu detected stall in x64_sys_call, ignore testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffff, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) program crashed: INFO: rcu detected stall in worker_thread validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffff, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) program crashed: INFO: rcu detected stall in sys_sendto validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-ioctl$ifreq_SIOCGIFINDEX_team-socket$netlink-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffff, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) program crashed: INFO: rcu detected stall in x64_sys_call validation run: crashed=true reproducing took 1h35m36.332898692s repro crashed as (corrupted=false): rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 1-...!: (3 ticks this GP) idle=0e64/1/0x4000000000000000 softirq=18985/18985 fqs=0 rcu: (detected by 0, t=10505 jiffies, g=11453, q=1159 ncpus=2) Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 6121 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 RIP: 0010:hlock_class kernel/locking/lockdep.c:234 [inline] RIP: 0010:check_wait_context kernel/locking/lockdep.c:4879 [inline] RIP: 0010:__lock_acquire+0x50c/0xd20 kernel/locking/lockdep.c:5187 Code: 49 83 c7 28 41 89 c4 48 39 cb 0f 8d d6 00 00 00 48 83 fb 31 0f 83 92 00 00 00 41 8b 07 25 ff 1f 00 00 48 0f a3 05 64 2d 0b 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 10 93 49 93 eb 40 83 3d cb bc RSP: 0018:ffffc90000a08ad0 EFLAGS: 00000007 RAX: 0000000000000071 RBX: 0000000000000001 RCX: 00000000000841b7 RDX: 0000000000000002 RSI: 0000000000004000 RDI: ffff88802e9a0000 RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff84d0b64a R10: ffffc90000a08cb0 R11: fffff52000141198 R12: ffffffffffffff02 R13: 0000000000000002 R14: ffff88802e9a0b40 R15: ffff88802e9a0b38 FS: 0000000000000000(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fee27704e9c CR3: 000000000df36000 CR4: 00000000003526f0 Call Trace: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xa7/0xf0 kernel/locking/spinlock.c:162 debug_object_deactivate+0x9a/0x250 lib/debugobjects.c:873 debug_hrtimer_deactivate kernel/time/hrtimer.c:450 [inline] debug_deactivate+0x1d/0x200 kernel/time/hrtimer.c:490 __run_hrtimer kernel/time/hrtimer.c:1729 [inline] __hrtimer_run_queues+0x2b0/0xc60 kernel/time/hrtimer.c:1825 hrtimer_interrupt+0x45b/0xaa0 kernel/time/hrtimer.c:1887 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1039 [inline] __sysvec_apic_timer_interrupt+0x108/0x410 arch/x86/kernel/apic/apic.c:1056 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1050 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:get_current arch/x86/include/asm/current.h:25 [inline] RIP: 0010:rcu_preempt_read_enter kernel/rcu/tree_plugin.h:391 [inline] RIP: 0010:__rcu_read_lock+0x5/0x60 kernel/rcu/tree_plugin.h:414 Code: 00 e9 cc fa ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 <65> 48 8b 1c 25 08 d0 a0 92 48 81 c3 44 04 00 00 48 89 d8 48 c1 e8 RSP: 0018:ffffc90002ed7428 EFLAGS: 00000202 RAX: 0000000000000001 RBX: ffffffff82185c79 RCX: 7a49ca4b6a2a1e00 RDX: dffffc0000000000 RSI: ffffffff82185c79 RDI: ffffc90002ed7508 RBP: dffffc0000000000 R08: ffffc90002ed75d0 R09: 0000000000000003 R10: ffffc90002ed7558 R11: ffffffff81ac3b00 R12: 1ffff920005daea1 R13: ffffc90002ed7540 R14: ffffc90002ed7508 R15: ffffc90002ed79f0 rcu_read_lock include/linux/rcupdate.h:839 [inline] class_rcu_constructor include/linux/rcupdate.h:1155 [inline] unwind_next_frame+0x9e/0x2390 arch/x86/kernel/unwind_orc.c:479 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 kasan_save_stack+0x3e/0x60 mm/kasan/common.c:47 kasan_record_aux_stack+0xbd/0xd0 mm/kasan/generic.c:548 __call_rcu_common kernel/rcu/tree.c:3123 [inline] call_rcu+0x157/0x9c0 kernel/rcu/tree.c:3243 slab_free_hook mm/slub.c:2386 [inline] slab_free mm/slub.c:4695 [inline] kmem_cache_free+0x309/0x400 mm/slub.c:4797 exit_mmap+0x53f/0xb50 mm/mmap.c:1305 __mmput+0x118/0x430 kernel/fork.c:1129 exit_mm+0x1da/0x2c0 kernel/exit.c:582 do_exit+0x648/0x2300 kernel/exit.c:949 do_group_exit+0x21c/0x2d0 kernel/exit.c:1102 __do_sys_exit_group kernel/exit.c:1113 [inline] __se_sys_exit_group kernel/exit.c:1111 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1111 x64_sys_call+0x21f7/0x2200 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fee278636c5 Code: Unable to access opcode bytes at 0x7fee2786369b. RSP: 002b:00007ffd16e208d8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 00007fee27964fe8 RCX: 00007fee278636c5 RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 RBP: 0000000000000001 R08: 00007ffd16e20868 R09: 0000000000000000 R10: 00007ffd16e20700 R11: 0000000000000202 R12: 0000000000000000 R13: 0000000000000001 R14: 00007fee27963680 R15: 00007fee27965000 rcu: rcu_preempt kthread timer wakeup didn't happen for 10504 jiffies! g11453 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=1 timer-softirq=5197 rcu: rcu_preempt kthread starved for 10505 jiffies! g11453 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:27160 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] schedule+0x165/0x360 kernel/sched/core.c:7058 schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2083 rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2285 kthread+0x70e/0x8a0 kernel/kthread.c:463 ret_from_fork+0x439/0x7d0 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 final repro crashed as (corrupted=false): rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: 1-...!: (3 ticks this GP) idle=0e64/1/0x4000000000000000 softirq=18985/18985 fqs=0 rcu: (detected by 0, t=10505 jiffies, g=11453, q=1159 ncpus=2) Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 6121 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 RIP: 0010:hlock_class kernel/locking/lockdep.c:234 [inline] RIP: 0010:check_wait_context kernel/locking/lockdep.c:4879 [inline] RIP: 0010:__lock_acquire+0x50c/0xd20 kernel/locking/lockdep.c:5187 Code: 49 83 c7 28 41 89 c4 48 39 cb 0f 8d d6 00 00 00 48 83 fb 31 0f 83 92 00 00 00 41 8b 07 25 ff 1f 00 00 48 0f a3 05 64 2d 0b 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 10 93 49 93 eb 40 83 3d cb bc RSP: 0018:ffffc90000a08ad0 EFLAGS: 00000007 RAX: 0000000000000071 RBX: 0000000000000001 RCX: 00000000000841b7 RDX: 0000000000000002 RSI: 0000000000004000 RDI: ffff88802e9a0000 RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff84d0b64a R10: ffffc90000a08cb0 R11: fffff52000141198 R12: ffffffffffffff02 R13: 0000000000000002 R14: ffff88802e9a0b40 R15: ffff88802e9a0b38 FS: 0000000000000000(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fee27704e9c CR3: 000000000df36000 CR4: 00000000003526f0 Call Trace: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xa7/0xf0 kernel/locking/spinlock.c:162 debug_object_deactivate+0x9a/0x250 lib/debugobjects.c:873 debug_hrtimer_deactivate kernel/time/hrtimer.c:450 [inline] debug_deactivate+0x1d/0x200 kernel/time/hrtimer.c:490 __run_hrtimer kernel/time/hrtimer.c:1729 [inline] __hrtimer_run_queues+0x2b0/0xc60 kernel/time/hrtimer.c:1825 hrtimer_interrupt+0x45b/0xaa0 kernel/time/hrtimer.c:1887 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1039 [inline] __sysvec_apic_timer_interrupt+0x108/0x410 arch/x86/kernel/apic/apic.c:1056 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1050 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:get_current arch/x86/include/asm/current.h:25 [inline] RIP: 0010:rcu_preempt_read_enter kernel/rcu/tree_plugin.h:391 [inline] RIP: 0010:__rcu_read_lock+0x5/0x60 kernel/rcu/tree_plugin.h:414 Code: 00 e9 cc fa ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 <65> 48 8b 1c 25 08 d0 a0 92 48 81 c3 44 04 00 00 48 89 d8 48 c1 e8 RSP: 0018:ffffc90002ed7428 EFLAGS: 00000202 RAX: 0000000000000001 RBX: ffffffff82185c79 RCX: 7a49ca4b6a2a1e00 RDX: dffffc0000000000 RSI: ffffffff82185c79 RDI: ffffc90002ed7508 RBP: dffffc0000000000 R08: ffffc90002ed75d0 R09: 0000000000000003 R10: ffffc90002ed7558 R11: ffffffff81ac3b00 R12: 1ffff920005daea1 R13: ffffc90002ed7540 R14: ffffc90002ed7508 R15: ffffc90002ed79f0 rcu_read_lock include/linux/rcupdate.h:839 [inline] class_rcu_constructor include/linux/rcupdate.h:1155 [inline] unwind_next_frame+0x9e/0x2390 arch/x86/kernel/unwind_orc.c:479 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 kasan_save_stack+0x3e/0x60 mm/kasan/common.c:47 kasan_record_aux_stack+0xbd/0xd0 mm/kasan/generic.c:548 __call_rcu_common kernel/rcu/tree.c:3123 [inline] call_rcu+0x157/0x9c0 kernel/rcu/tree.c:3243 slab_free_hook mm/slub.c:2386 [inline] slab_free mm/slub.c:4695 [inline] kmem_cache_free+0x309/0x400 mm/slub.c:4797 exit_mmap+0x53f/0xb50 mm/mmap.c:1305 __mmput+0x118/0x430 kernel/fork.c:1129 exit_mm+0x1da/0x2c0 kernel/exit.c:582 do_exit+0x648/0x2300 kernel/exit.c:949 do_group_exit+0x21c/0x2d0 kernel/exit.c:1102 __do_sys_exit_group kernel/exit.c:1113 [inline] __se_sys_exit_group kernel/exit.c:1111 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1111 x64_sys_call+0x21f7/0x2200 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fee278636c5 Code: Unable to access opcode bytes at 0x7fee2786369b. RSP: 002b:00007ffd16e208d8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 00007fee27964fe8 RCX: 00007fee278636c5 RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 RBP: 0000000000000001 R08: 00007ffd16e20868 R09: 0000000000000000 R10: 00007ffd16e20700 R11: 0000000000000202 R12: 0000000000000000 R13: 0000000000000001 R14: 00007fee27963680 R15: 00007fee27965000 rcu: rcu_preempt kthread timer wakeup didn't happen for 10504 jiffies! g11453 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=1 timer-softirq=5197 rcu: rcu_preempt kthread starved for 10505 jiffies! g11453 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:27160 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] schedule+0x165/0x360 kernel/sched/core.c:7058 schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2083 rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2285 kthread+0x70e/0x8a0 kernel/kthread.c:463 ret_from_fork+0x439/0x7d0 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245