Extracting prog: 2m40.013497457s Minimizing prog: 1h4m23.675984635s Simplifying prog options: 14m0.355808675s Extracting C: 5m12.104533458s Simplifying C: 0s extracting reproducer from 85 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-connect$unix-gettid-timer_create-timer_settime-clock_gettime-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) connect$unix(0xffffffffffffffff, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000100)={{0x0, 0x989680}, {r2, r3+60000000}}, 0x0) program crashed: INFO: rcu detected stall in corrupted single: successfully extracted reproducer found reproducer with 8 syscalls minimizing guilty program testing program (duration=5m2.546190624s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-connect$unix-gettid-timer_create-timer_settime-clock_gettime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) connect$unix(0xffffffffffffffff, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) program crashed: INFO: rcu detected stall in corrupted testing program (duration=5m2.546190624s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-connect$unix-gettid-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) connect$unix(0xffffffffffffffff, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=5m2.546190624s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-connect$unix-gettid-timer_create detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) connect$unix(0xffffffffffffffff, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000040)) program did not crash testing program (duration=5m2.546190624s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-connect$unix-gettid-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) connect$unix(0xffffffffffffffff, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) program did not crash testing program (duration=5m2.546190624s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-connect$unix-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) connect$unix(0xffffffffffffffff, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x4}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) program did not crash testing program (duration=5m2.546190624s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-gettid-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=5m2.546190624s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-gettid-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x80000008b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) program did not crash testing program (duration=5m2.546190624s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sched_setscheduler-gettid-timer_create-timer_settime detailed listing: executing program 0: sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) program did not crash testing program (duration=5m2.546190624s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-gettid-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) program did not crash testing program (duration=5m2.546190624s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-gettid-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) program did not crash testing program (duration=5m2.546190624s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-gettid-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) gettid() timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) program did not crash testing program (duration=5m2.546190624s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-gettid-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x4, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) program did not crash testing program (duration=5m2.546190624s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-gettid-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=5m2.546190624s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-gettid-timer_create-timer_settime program did not crash simplifying guilty program options testing program (duration=5m2.546190624s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-gettid-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) program crashed: INFO: rcu detected stall in corrupted extracting C reproducer testing compiled C program (duration=5m2.546190624s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-gettid-timer_create-timer_settime program did not crash testing program (duration=5m2.546190624s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-gettid-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) program did not crash testing program (duration=5m2.546190624s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-gettid-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) program crashed: INFO: rcu detected stall in corrupted validation run: crashed=true testing program (duration=5m2.546190624s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-gettid-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) program crashed: INFO: rcu detected stall in corrupted validation run: crashed=true testing program (duration=5m2.546190624s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-gettid-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) program crashed: INFO: rcu detected stall in sys_clone validation run: crashed=true reproducing took 1h36m7.549560415s repro crashed as (corrupted=false): rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6040/1:b..l rcu: (detected by 0, t=10503 jiffies, g=13361, q=648 ncpus=2) task:dhcpcd-run-hook state:R running task stack:26088 pid:6040 ppid:6036 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5393 [inline] __schedule+0x15ae/0x4700 kernel/sched/core.c:6722 preempt_schedule_irq+0xbf/0x150 kernel/sched/core.c:7032 irqentry_exit+0x67/0x70 kernel/entry/common.c:441 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687 RIP: 0010:check_kcov_mode kernel/kcov.c:189 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60 kernel/kcov.c:212 Code: 10 e4 7b 7e 65 8b 15 11 e4 7b 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 24 16 00 00 00 74 2c 8b 91 00 16 00 00 <83> fa 02 75 21 48 8b 91 08 16 00 00 48 8b 32 48 8d 7e 01 8b 89 04 RSP: 0018:ffffc90003476f20 EFLAGS: 00000246 RAX: ffffffff819536d0 RBX: 0000000000000000 RCX: ffff88802cdfbc00 RDX: 0000000000000000 RSI: 00007f8b9389e636 RDI: ffffffffa0000c18 RBP: 0000000000000000 R08: dffffc0000000000 R09: 1ffffffff24446a0 R10: dffffc0000000000 R11: fffffbfff24446a1 R12: ffffffffa0000c18 R13: dffffc0000000000 R14: 00007f8b9389e636 R15: 0000000000000000 __lt_find include/linux/rbtree_latch.h:113 [inline] latch_tree_find include/linux/rbtree_latch.h:208 [inline] bpf_ksym_find kernel/bpf/core.c:710 [inline] is_bpf_text_address+0x1c0/0x2a0 kernel/bpf/core.c:744 kernel_text_address+0xa0/0xd0 kernel/extable.c:125 __kernel_text_address+0xd/0x30 kernel/extable.c:79 unwind_get_return_address+0x5d/0xc0 arch/x86/kernel/unwind_orc.c:369 arch_stack_walk+0x11d/0x190 arch/x86/kernel/stacktrace.c:26 stack_trace_save+0xaa/0x100 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:46 [inline] kasan_set_track+0x4e/0x70 mm/kasan/common.c:53 __kasan_slab_alloc+0x6c/0x80 mm/kasan/common.c:329 kasan_slab_alloc include/linux/kasan.h:188 [inline] slab_post_alloc_hook+0x6a/0x4d0 mm/slab.h:770 slab_alloc_node mm/slub.c:3518 [inline] slab_alloc mm/slub.c:3526 [inline] __kmem_cache_alloc_lru mm/slub.c:3533 [inline] kmem_cache_alloc+0x17e/0x2d0 mm/slub.c:3542 ptlock_alloc+0x20/0x70 mm/memory.c:6179 ptlock_init include/linux/mm.h:2964 [inline] pagetable_pte_ctor include/linux/mm.h:2987 [inline] __pte_alloc_one include/asm-generic/pgalloc.h:71 [inline] pte_alloc_one+0xcc/0x540 arch/x86/mm/pgtable.c:33 __pte_alloc+0x22/0x2a0 mm/memory.c:438 copy_pte_range mm/memory.c:1029 [inline] copy_pmd_range mm/memory.c:1168 [inline] copy_pud_range mm/memory.c:1205 [inline] copy_p4d_range mm/memory.c:1229 [inline] copy_page_range+0x2dca/0x3700 mm/memory.c:1323 dup_mmap kernel/fork.c:769 [inline] dup_mm kernel/fork.c:1700 [inline] copy_mm+0x1751/0x1e30 kernel/fork.c:1749 copy_process+0x16c9/0x3da0 kernel/fork.c:2510 kernel_clone+0x24b/0x8a0 kernel/fork.c:2919 __do_sys_clone kernel/fork.c:3062 [inline] __se_sys_clone kernel/fork.c:3046 [inline] __x64_sys_clone+0x1b7/0x230 kernel/fork.c:3046 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f8b9389e636 RSP: 002b:00007ffe1b3ecc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007ffe1b3ecc68 RCX: 00007f8b9389e636 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 0000560903998e60 R08: 0000000000000000 R09: 0000000000000000 R10: 00007f8b93704f50 R11: 0000000000000246 R12: 000056090399af70 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 rcu: rcu_preempt kthread starved for 10555 jiffies! g13361 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26856 pid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5393 [inline] __schedule+0x15ae/0x4700 kernel/sched/core.c:6722 schedule+0xbd/0x170 kernel/sched/core.c:6796 schedule_timeout+0x188/0x2d0 kernel/time/timer.c:2168 rcu_gp_fqs_loop+0x30d/0x1590 kernel/rcu/tree.c:1667 rcu_gp_kthread+0x9d/0x3b0 kernel/rcu/tree.c:1866 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 PID: 6041 Comm: syz.1.18 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 RIP: 0010:check_kcov_mode kernel/kcov.c:178 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x60 kernel/kcov.c:212 Code: 48 8b 3d cc 06 06 0e 48 89 de 5b e9 e3 33 58 00 cc cc cc f3 0f 1e fa 48 8b 04 24 65 48 8b 0d 10 e4 7b 7e 65 8b 15 11 e4 7b 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 24 16 00 00 RSP: 0018:ffffc900034678c0 EFLAGS: 00000286 RAX: ffffffff81cc929c RBX: ffff8880330f5f40 RCX: ffff8880330f5a00 RDX: 0000000080000000 RSI: ffffffff8aeae2c0 RDI: ffffffff8b3c50e0 RBP: 00000000000000a8 R08: ffffffff8f8dd86f R09: 1ffffffff1f1bb0d R10: dffffc0000000000 R11: fffffbfff1f1bb0e R12: dffffc0000000000 R13: 1ffff1100661ebe8 R14: ffffffff8ae59ec0 R15: ffff88807e148000 FS: 000055556b646500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff79f871220 CR3: 0000000078d86000 CR4: 00000000003506f0 Call Trace: __might_fault+0x9c/0x120 mm/memory.c:5970 __clear_user arch/x86/include/asm/uaccess_64.h:168 [inline] copy_fpstate_to_sigframe+0x14b/0xce0 arch/x86/kernel/fpu/signal.c:216 get_sigframe+0x5de/0x7d0 arch/x86/kernel/signal.c:142 x64_setup_rt_frame+0x164/0xc30 arch/x86/kernel/signal_64.c:175 setup_rt_frame arch/x86/kernel/signal.c:223 [inline] handle_signal arch/x86/kernel/signal.c:267 [inline] arch_do_signal_or_restart+0x411/0x7b0 arch/x86/kernel/signal.c:312 exit_to_user_mode_loop+0x70/0x110 kernel/entry/common.c:177 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:213 __syscall_exit_to_user_mode_work kernel/entry/common.c:294 [inline] syscall_exit_to_user_mode+0x1a/0x50 kernel/entry/common.c:305 do_syscall_64+0x61/0xb0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7ff79f99f559 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffc7f974718 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 00007ff79fc25fa0 RCX: 00007ff79f99f559 RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007ff79fa36b20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ff79fc25fac R14: 00007ff79fc25fa0 R15: 00007ff79fc25fa0 sched: RT throttling activated final repro crashed as (corrupted=false): rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6040/1:b..l rcu: (detected by 0, t=10503 jiffies, g=13361, q=648 ncpus=2) task:dhcpcd-run-hook state:R running task stack:26088 pid:6040 ppid:6036 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5393 [inline] __schedule+0x15ae/0x4700 kernel/sched/core.c:6722 preempt_schedule_irq+0xbf/0x150 kernel/sched/core.c:7032 irqentry_exit+0x67/0x70 kernel/entry/common.c:441 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687 RIP: 0010:check_kcov_mode kernel/kcov.c:189 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60 kernel/kcov.c:212 Code: 10 e4 7b 7e 65 8b 15 11 e4 7b 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 24 16 00 00 00 74 2c 8b 91 00 16 00 00 <83> fa 02 75 21 48 8b 91 08 16 00 00 48 8b 32 48 8d 7e 01 8b 89 04 RSP: 0018:ffffc90003476f20 EFLAGS: 00000246 RAX: ffffffff819536d0 RBX: 0000000000000000 RCX: ffff88802cdfbc00 RDX: 0000000000000000 RSI: 00007f8b9389e636 RDI: ffffffffa0000c18 RBP: 0000000000000000 R08: dffffc0000000000 R09: 1ffffffff24446a0 R10: dffffc0000000000 R11: fffffbfff24446a1 R12: ffffffffa0000c18 R13: dffffc0000000000 R14: 00007f8b9389e636 R15: 0000000000000000 __lt_find include/linux/rbtree_latch.h:113 [inline] latch_tree_find include/linux/rbtree_latch.h:208 [inline] bpf_ksym_find kernel/bpf/core.c:710 [inline] is_bpf_text_address+0x1c0/0x2a0 kernel/bpf/core.c:744 kernel_text_address+0xa0/0xd0 kernel/extable.c:125 __kernel_text_address+0xd/0x30 kernel/extable.c:79 unwind_get_return_address+0x5d/0xc0 arch/x86/kernel/unwind_orc.c:369 arch_stack_walk+0x11d/0x190 arch/x86/kernel/stacktrace.c:26 stack_trace_save+0xaa/0x100 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:46 [inline] kasan_set_track+0x4e/0x70 mm/kasan/common.c:53 __kasan_slab_alloc+0x6c/0x80 mm/kasan/common.c:329 kasan_slab_alloc include/linux/kasan.h:188 [inline] slab_post_alloc_hook+0x6a/0x4d0 mm/slab.h:770 slab_alloc_node mm/slub.c:3518 [inline] slab_alloc mm/slub.c:3526 [inline] __kmem_cache_alloc_lru mm/slub.c:3533 [inline] kmem_cache_alloc+0x17e/0x2d0 mm/slub.c:3542 ptlock_alloc+0x20/0x70 mm/memory.c:6179 ptlock_init include/linux/mm.h:2964 [inline] pagetable_pte_ctor include/linux/mm.h:2987 [inline] __pte_alloc_one include/asm-generic/pgalloc.h:71 [inline] pte_alloc_one+0xcc/0x540 arch/x86/mm/pgtable.c:33 __pte_alloc+0x22/0x2a0 mm/memory.c:438 copy_pte_range mm/memory.c:1029 [inline] copy_pmd_range mm/memory.c:1168 [inline] copy_pud_range mm/memory.c:1205 [inline] copy_p4d_range mm/memory.c:1229 [inline] copy_page_range+0x2dca/0x3700 mm/memory.c:1323 dup_mmap kernel/fork.c:769 [inline] dup_mm kernel/fork.c:1700 [inline] copy_mm+0x1751/0x1e30 kernel/fork.c:1749 copy_process+0x16c9/0x3da0 kernel/fork.c:2510 kernel_clone+0x24b/0x8a0 kernel/fork.c:2919 __do_sys_clone kernel/fork.c:3062 [inline] __se_sys_clone kernel/fork.c:3046 [inline] __x64_sys_clone+0x1b7/0x230 kernel/fork.c:3046 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f8b9389e636 RSP: 002b:00007ffe1b3ecc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007ffe1b3ecc68 RCX: 00007f8b9389e636 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 0000560903998e60 R08: 0000000000000000 R09: 0000000000000000 R10: 00007f8b93704f50 R11: 0000000000000246 R12: 000056090399af70 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 rcu: rcu_preempt kthread starved for 10555 jiffies! g13361 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26856 pid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5393 [inline] __schedule+0x15ae/0x4700 kernel/sched/core.c:6722 schedule+0xbd/0x170 kernel/sched/core.c:6796 schedule_timeout+0x188/0x2d0 kernel/time/timer.c:2168 rcu_gp_fqs_loop+0x30d/0x1590 kernel/rcu/tree.c:1667 rcu_gp_kthread+0x9d/0x3b0 kernel/rcu/tree.c:1866 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 PID: 6041 Comm: syz.1.18 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 RIP: 0010:check_kcov_mode kernel/kcov.c:178 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x60 kernel/kcov.c:212 Code: 48 8b 3d cc 06 06 0e 48 89 de 5b e9 e3 33 58 00 cc cc cc f3 0f 1e fa 48 8b 04 24 65 48 8b 0d 10 e4 7b 7e 65 8b 15 11 e4 7b 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 24 16 00 00 RSP: 0018:ffffc900034678c0 EFLAGS: 00000286 RAX: ffffffff81cc929c RBX: ffff8880330f5f40 RCX: ffff8880330f5a00 RDX: 0000000080000000 RSI: ffffffff8aeae2c0 RDI: ffffffff8b3c50e0 RBP: 00000000000000a8 R08: ffffffff8f8dd86f R09: 1ffffffff1f1bb0d R10: dffffc0000000000 R11: fffffbfff1f1bb0e R12: dffffc0000000000 R13: 1ffff1100661ebe8 R14: ffffffff8ae59ec0 R15: ffff88807e148000 FS: 000055556b646500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff79f871220 CR3: 0000000078d86000 CR4: 00000000003506f0 Call Trace: __might_fault+0x9c/0x120 mm/memory.c:5970 __clear_user arch/x86/include/asm/uaccess_64.h:168 [inline] copy_fpstate_to_sigframe+0x14b/0xce0 arch/x86/kernel/fpu/signal.c:216 get_sigframe+0x5de/0x7d0 arch/x86/kernel/signal.c:142 x64_setup_rt_frame+0x164/0xc30 arch/x86/kernel/signal_64.c:175 setup_rt_frame arch/x86/kernel/signal.c:223 [inline] handle_signal arch/x86/kernel/signal.c:267 [inline] arch_do_signal_or_restart+0x411/0x7b0 arch/x86/kernel/signal.c:312 exit_to_user_mode_loop+0x70/0x110 kernel/entry/common.c:177 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:213 __syscall_exit_to_user_mode_work kernel/entry/common.c:294 [inline] syscall_exit_to_user_mode+0x1a/0x50 kernel/entry/common.c:305 do_syscall_64+0x61/0xb0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7ff79f99f559 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffc7f974718 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 00007ff79fc25fa0 RCX: 00007ff79f99f559 RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007ff79fa36b20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ff79fc25fac R14: 00007ff79fc25fa0 R15: 00007ff79fc25fa0 sched: RT throttling activated