Extracting prog: 16m56.610624494s
Minimizing prog: 1h14m39.116457908s
Simplifying prog options: 11m25.766764308s
Extracting C: 5m58.355729788s
Simplifying C: 0s


extracting reproducer from 37 programs
testing a last program of every proc
single: executing 7 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-ioctl$sock_SIOCGIFINDEX-bpf$MAP_CREATE_CONST_STR-bpf$PROG_LOAD-bpf$BPF_LINK_CREATE_XDP-syz_emit_ethernet
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, r1, 0x25, 0x0, @val=@tracing={0x0, 0xfffffffffffffffd}}, 0x20)
syz_emit_ethernet(0xd81, &(0x7f0000000ec0)={@multicast, @broadcast, @void, {@mpls_uc={0x8847, {[], @llc={@snap={0x1, 0x0, "af", "c56709", 0x8848, "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"}}}}}}, 0x0)

program did not crash
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$ALG_SET_KEY-timer_create-timer_settime-prlimit64-sched_setscheduler-futex-futex-ioctl$KVM_SET_MSRS
detailed listing:
executing program 0:
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6", 0xd)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x1)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)

program crashed: INFO: rcu detected stall in corrupted
single: successfully extracted reproducer
found reproducer with 8 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$ALG_SET_KEY-timer_create-timer_settime-prlimit64-sched_setscheduler-futex-futex
detailed listing:
executing program 0:
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6", 0xd)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x1)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$ALG_SET_KEY-timer_create-timer_settime-prlimit64-sched_setscheduler-futex
detailed listing:
executing program 0:
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6", 0xd)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x1)

program crashed: INFO: rcu detected stall in batadv_nc_worker
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$ALG_SET_KEY-timer_create-timer_settime-prlimit64-sched_setscheduler
detailed listing:
executing program 0:
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6", 0xd)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$ALG_SET_KEY-timer_create-timer_settime-prlimit64-futex
detailed listing:
executing program 0:
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6", 0xd)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x1)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$ALG_SET_KEY-timer_create-timer_settime-sched_setscheduler-futex
detailed listing:
executing program 0:
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6", 0xd)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x1)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$ALG_SET_KEY-timer_create-prlimit64-sched_setscheduler-futex
detailed listing:
executing program 0:
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6", 0xd)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x1)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$ALG_SET_KEY-timer_settime-prlimit64-sched_setscheduler-futex
detailed listing:
executing program 0:
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6", 0xd)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x1)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-timer_settime-prlimit64-sched_setscheduler-futex
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x1)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-timer_settime-prlimit64-sched_setscheduler-futex
detailed listing:
executing program 0:
timer_create(0x0, 0x0, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x1)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-timer_settime-prlimit64-sched_setscheduler-futex
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x1)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-timer_settime-prlimit64-sched_setscheduler-futex
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x1)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-timer_settime-prlimit64-sched_setscheduler-futex
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x1)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-timer_settime-prlimit64-sched_setscheduler-futex
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x1)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-timer_settime-prlimit64-sched_setscheduler-futex
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x1)

program crashed: INFO: rcu detected stall in corrupted
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-timer_settime-prlimit64-sched_setscheduler-futex
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-timer_settime-prlimit64-sched_setscheduler-futex
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x1)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-timer_settime-prlimit64-sched_setscheduler-futex
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x1)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-timer_settime-prlimit64-sched_setscheduler-futex
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x1)

program crashed: WARNING in rcu_check_gp_start_stall
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-timer_settime-prlimit64-sched_setscheduler-futex
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x1)

program crashed: no output from test machine
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-timer_settime-prlimit64-sched_setscheduler-futex
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x1)

program did not crash
validation run: crashed=false
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-timer_settime-prlimit64-sched_setscheduler-futex
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x1)

program crashed: INFO: rcu detected stall in corrupted
validation run: crashed=true
reproducing took 2h16m54.034297317s
repro crashed as (corrupted=true):
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
	(detected by 1, t=10502 jiffies, g=16109, q=23 ncpus=2)
rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294964092-4294953590), jiffies_till_next_fqs=1, root ->qsmask 0x0
rcu: rcu_preempt kthread starved for 10502 jiffies! g16109 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:27432 pid:16    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0x10ec/0x40b0 kernel/sched/core.c:6561
 schedule+0xb9/0x180 kernel/sched/core.c:6637
 schedule_timeout+0x15c/0x280 kernel/time/timer.c:1965
 rcu_gp_fqs_loop+0x2f2/0x1310 kernel/rcu/tree.c:1706
 rcu_gp_kthread+0x95/0x380 kernel/rcu/tree.c:1905
 kthread+0x29d/0x330 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 4956 Comm: syz.3.201 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
RIP: 0010:bytes_is_nonzero mm/kasan/generic.c:84 [inline]
RIP: 0010:memory_is_nonzero mm/kasan/generic.c:102 [inline]
RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:128 [inline]
RIP: 0010:memory_is_poisoned mm/kasan/generic.c:159 [inline]
RIP: 0010:check_region_inline mm/kasan/generic.c:180 [inline]
RIP: 0010:kasan_check_range+0x71/0x290 mm/kasan/generic.c:189
Code: 00 fc ff df 4f 8d 0c 03 48 8d 5c 37 ff 48 c1 eb 03 4e 8d 14 3b 4d 89 d6 4d 29 ce 49 83 fe 10 7f 26 4d 85 f6 0f 84 39 01 00 00 <48> f7 d3 4c 01 db 41 80 39 00 0f 85 c1 01 00 00 49 ff c1 48 ff c3
RSP: 0018:ffffc900055776c0 EFLAGS: 00000002
RAX: 0000000000000001 RBX: 1ffffffff215c44e RCX: ffffffff8162fc62
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90ae2270
RBP: ffffc90005577930 R08: dffffc0000000000 R09: fffffbfff215c44e
R10: fffffbfff215c44f R11: 1ffffffff215c44e R12: ffff888029c6bb80
R13: 0000000000000030 R14: 0000000000000001 R15: dffffc0000000001
FS:  00007f6e9423e6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6e9421cf40 CR3: 000000001e7d5000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 instrument_atomic_read include/linux/instrumented.h:72 [inline]
 _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
 hlock_class kernel/locking/lockdep.c:228 [inline]
 check_wait_context kernel/locking/lockdep.c:4723 [inline]
 __lock_acquire+0x532/0x7c50 kernel/locking/lockdep.c:4999
 lock_acquire+0x1b4/0x490 kernel/locking/lockdep.c:5662
 __might_fault+0xc2/0x120 mm/memory.c:5852
 __copy_to_user include/linux/uaccess.h:111 [inline]
 save_xstate_epilog arch/x86/kernel/fpu/signal.c:127 [inline]
 copy_fpstate_to_sigframe+0xa53/0xcb0 arch/x86/kernel/fpu/signal.c:245
 get_sigframe arch/x86/kernel/signal.c:297 [inline]
 __setup_rt_frame arch/x86/kernel/signal.c:472 [inline]
 setup_rt_frame arch/x86/kernel/signal.c:784 [inline]
 handle_signal arch/x86/kernel/signal.c:828 [inline]
 arch_do_signal_or_restart+0x610/0x1230 arch/x86/kernel/signal.c:873
 exit_to_user_mode_loop+0x70/0x110 kernel/entry/common.c:174
 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:210
 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:303
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:87
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f6e9338eba9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f6e9423e0e8 EFLAGS: 00000246
RAX: fffffffffffffffc RBX: 00007f6e935d5fa8 RCX: 00007f6e9338eba9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6e935d5fa8
RBP: 00007f6e935d5fa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f6e935d6038 R14: 00007fff612493e0 R15: 00007fff612494c8
 </TASK>

report is corrupted, running repro again
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-timer_settime-prlimit64-sched_setscheduler-futex
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x1)

program did not crash
report is corrupted, running repro again
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-timer_settime-prlimit64-sched_setscheduler-futex
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x1)

program did not crash
report is corrupted, running repro again
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-timer_settime-prlimit64-sched_setscheduler-futex
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x1)

program crashed: INFO: rcu detected stall in corrupted
final repro crashed as (corrupted=true):
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
	(detected by 1, t=10502 jiffies, g=12249, q=18 ncpus=2)
rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294964202-4294953699), jiffies_till_next_fqs=1, root ->qsmask 0x0
rcu: rcu_preempt kthread starved for 10504 jiffies! g12249 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:28096 pid:16    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0x10ec/0x40b0 kernel/sched/core.c:6561
 schedule+0xb9/0x180 kernel/sched/core.c:6637
 schedule_timeout+0x15c/0x280 kernel/time/timer.c:1965
 rcu_gp_fqs_loop+0x2f2/0x1310 kernel/rcu/tree.c:1706
 rcu_gp_kthread+0x95/0x380 kernel/rcu/tree.c:1905
 kthread+0x29d/0x330 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
CPU: 1 PID: 4835 Comm: syz.3.137 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:160 [inline]
RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 kernel/locking/spinlock.c:202
Code: f5 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 3e 18 42 f7 48 89 df e8 96 dd 42 f7 e8 21 d1 65 f7 fb bf 01 00 00 00 <e8> e6 5a 36 f7 65 8b 05 e7 13 e1 75 85 c0 74 02 5b c3 e8 34 25 df
RSP: 0018:ffffc900043a7bb8 EFLAGS: 00000286
RAX: 97939cd54c0d8e00 RBX: ffff888060f965c0 RCX: 97939cd54c0d8e00
RDX: dffffc0000000000 RSI: ffffffff8a8c0300 RDI: 0000000000000001
RBP: ffff888060f96858 R08: dffffc0000000000 R09: ffffed100c1f2cb9
R10: ffffed100c1f2cb9 R11: 1ffff1100c1f2cb8 R12: 1ffff1100c1f2d0b
R13: 0000000000000011 R14: dffffc0000000000 R15: 0000000000000000
FS:  00007f9406b4a6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffb6dffdf98 CR3: 0000000026604000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 spin_unlock_irq include/linux/spinlock.h:401 [inline]
 get_signal+0x1163/0x1350 kernel/signal.c:2874
 arch_do_signal_or_restart+0xb0/0x1230 arch/x86/kernel/signal.c:871
 exit_to_user_mode_loop+0x70/0x110 kernel/entry/common.c:174
 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:210
 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:303
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:87
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f9405d8eba9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f9406b4a0e8 EFLAGS: 00000246
RAX: fffffffffffffffc RBX: 00007f9405fd6098 RCX: 00007f9405d8eba9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9405fd6098
RBP: 00007f9405fd6090 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f9405fd6128 R14: 00007ffefaa04da0 R15: 00007ffefaa04e88
 </TASK>