Extracting prog: 6m36.411670812s
Minimizing prog: 1h53m17.28768283s
Simplifying prog options: 13m55.696620285s
Extracting C: 5m9.564547703s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-fcntl$lock-mprotect-timer_settime-mmap-sched_setscheduler-prctl$PR_SCHED_CORE-mmap-openat$zero-mmap
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x8202, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

program did not crash
program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-fcntl$lock-mprotect-timer_settime-mmap-sched_setscheduler-prctl$PR_SCHED_CORE-mmap-openat$zero-mmap
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x8202, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

program crashed: BUG: workqueue lockup
single: successfully extracted reproducer
found reproducer with 11 syscalls
minimizing guilty program
testing program (duration=6m54.40105437s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-fcntl$lock-mprotect-timer_settime-mmap-sched_setscheduler-prctl$PR_SCHED_CORE-mmap-openat$zero
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x8202, 0x0)

program crashed: BUG: workqueue lockup
testing program (duration=6m54.40105437s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-fcntl$lock-mprotect-timer_settime-mmap-sched_setscheduler-prctl$PR_SCHED_CORE-mmap
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)

program crashed: BUG: workqueue lockup
testing program (duration=6m54.40105437s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-fcntl$lock-mprotect-timer_settime-mmap-sched_setscheduler-prctl$PR_SCHED_CORE
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)

program crashed: BUG: workqueue lockup
testing program (duration=6m54.40105437s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-fcntl$lock-mprotect-timer_settime-mmap-sched_setscheduler
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)

program did not crash
testing program (duration=6m54.40105437s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-fcntl$lock-mprotect-timer_settime-mmap-prctl$PR_SCHED_CORE
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=6m54.40105437s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-fcntl$lock-mprotect-timer_settime-sched_setscheduler-prctl$PR_SCHED_CORE
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=6m54.40105437s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-fcntl$lock-mprotect-mmap-sched_setscheduler-prctl$PR_SCHED_CORE
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=6m54.40105437s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-fcntl$lock-timer_settime-mmap-sched_setscheduler-prctl$PR_SCHED_CORE
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=6m54.40105437s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-mprotect-timer_settime-mmap-sched_setscheduler-prctl$PR_SCHED_CORE
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=6m54.40105437s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-fcntl$lock-mprotect-timer_settime-mmap-sched_setscheduler-prctl$PR_SCHED_CORE
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=6m54.40105437s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-sched_setscheduler-prctl$PR_SCHED_CORE
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=6m54.40105437s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-fcntl$lock-mprotect-timer_settime-mmap-sched_setscheduler-prctl$PR_SCHED_CORE
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=6m54.40105437s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-fcntl$lock-mprotect-timer_settime-mmap-sched_setscheduler-prctl$PR_SCHED_CORE
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=6m54.40105437s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-fcntl$lock-mprotect-timer_settime-mmap-sched_setscheduler-prctl$PR_SCHED_CORE
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=6m54.40105437s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-fcntl$lock-mprotect-timer_settime-mmap-sched_setscheduler-prctl$PR_SCHED_CORE
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=6m54.40105437s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-fcntl$lock-mprotect-timer_settime-mmap-sched_setscheduler-prctl$PR_SCHED_CORE
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=6m54.40105437s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-fcntl$lock-mprotect-timer_settime-mmap-sched_setscheduler-prctl$PR_SCHED_CORE
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m54.40105437s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-fcntl$lock-mprotect-timer_settime-mmap-sched_setscheduler-prctl$PR_SCHED_CORE
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m54.40105437s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-fcntl$lock-mprotect-timer_settime-mmap-sched_setscheduler-prctl$PR_SCHED_CORE
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=6m54.40105437s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-fcntl$lock-mprotect-timer_settime-mmap-sched_setscheduler-prctl$PR_SCHED_CORE
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=6m54.40105437s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-fcntl$lock-mprotect-timer_settime-mmap-sched_setscheduler-prctl$PR_SCHED_CORE
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=6m54.40105437s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-fcntl$lock-mprotect-timer_settime-mmap-sched_setscheduler-prctl$PR_SCHED_CORE
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)

program crashed: BUG: workqueue lockup
validation run: crashed=true
testing program (duration=6m54.40105437s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-fcntl$lock-mprotect-timer_settime-mmap-sched_setscheduler-prctl$PR_SCHED_CORE
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)

program crashed: BUG: workqueue lockup
validation run: crashed=true
testing program (duration=6m54.40105437s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-fcntl$lock-mprotect-timer_settime-mmap-sched_setscheduler-prctl$PR_SCHED_CORE
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)

program crashed: BUG: workqueue lockup
validation run: crashed=true
reproducing took 2h39m51.677392592s
repro crashed as (corrupted=false):
BUG: workqueue lockup - pool cpus=0 node=0 flags=0x1 nice=0 stuck for 154s!
BUG: workqueue lockup - pool cpus=1 node=0 flags=0x1 nice=0 stuck for 154s!
Showing busy workqueues and worker pools:
workqueue events: flags=0x0
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=2/256 refcnt=3
    pending: psi_avgs_work, kfree_rcu_monitor
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=3/256 refcnt=4
    in-flight: 6:free_work
    pending: vmstat_shepherd, kfree_rcu_monitor
workqueue events_unbound: flags=0x2
  pwq 4: cpus=0-1 flags=0x5 nice=0 active=4/512 refcnt=6
    in-flight: 434:flush_memcg_stats_dwork, 10:toggle_allocation_gate, 43:linkwatch_event linkwatch_event
workqueue events_power_efficient: flags=0x80
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=2/256 refcnt=3
    in-flight: 369:wg_ratelimiter_gc_entries
    pending: gc_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=5/256 refcnt=6
    pending: neigh_managed_work, neigh_managed_work, neigh_periodic_work, neigh_periodic_work, check_lifetime
workqueue netns: flags=0xe000a
  pwq 4: cpus=0-1 flags=0x5 nice=0 active=1/1 refcnt=3
    in-flight: 8:cleanup_net
workqueue mm_percpu_wq: flags=0x8
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: vmstat_update
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: vmstat_update
workqueue writeback: flags=0x4a
  pwq 4: cpus=0-1 flags=0x5 nice=0 active=1/256 refcnt=3
    in-flight: 415:wb_workfn
workqueue dm_bufio_cache: flags=0x8
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: work_fn
workqueue ipv6_addrconf: flags=0x40008
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/1 refcnt=62
    in-flight: 24:addrconf_dad_work
    inactive: addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work
, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/1 refcnt=89
    in-flight: 397:addrconf_dad_work
    inactive: addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work
, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work
workqueue wg-crypt-wg0: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=2/256 refcnt=3
    pending: wg_packet_tx_worker, wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-crypt-wg1: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-kex-wg2: flags=0x6
  pwq 4: cpus=0-1 flags=0x5 nice=0 active=1/256 refcnt=3
    pending: wg_packet_handshake_send_worker
workqueue wg-crypt-wg2: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-crypt-wg0: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=2/256 refcnt=3
    pending: wg_packet_tx_worker, wg_packet_encrypt_worker
workqueue wg-crypt-wg0: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=2/256 refcnt=3
    pending: wg_packet_tx_worker, wg_packet_encrypt_worker
workqueue wg-crypt-wg1: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-crypt-wg2: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-crypt-wg1: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-crypt-wg2: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-kex-wg0: flags=0x6
  pwq 4: cpus=0-1 flags=0x5 nice=0 active=1/256 refcnt=3
    pending: wg_packet_handshake_send_worker
workqueue wg-crypt-wg0: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=2/256 refcnt=3
    pending: wg_packet_tx_worker, wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-kex-wg1: flags=0x6
  pwq 4: cpus=0-1 flags=0x5 nice=0 active=1/256 refcnt=3
    in-flight: 324:wg_packet_handshake_send_worker
workqueue wg-crypt-wg1: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-crypt-wg2: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-crypt-wg0: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=2/256 refcnt=3
    pending: wg_packet_tx_worker, wg_packet_encrypt_worker
workqueue wg-crypt-wg1: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-crypt-wg2: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
pool 0: cpus=0 node=0 flags=0x1 nice=0 hung=155s workers=5 manager: 349 idle: 437 19
pool 2: cpus=1 node=0 flags=0x1 nice=0 hung=155s workers=4 manager: 39 idle: 368
pool 4: cpus=0-1 flags=0x5 nice=0 hung=98s workers=7 manager: 398
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P6/1:b..l
	(detected by 0, t=10002 jiffies, g=2121, q=137 ncpus=2)
task:kworker/0:0     state:R  running task     stack:27600 pid:6     ppid:2      flags:0x00004000
Workqueue: events free_work
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5425 [inline]
 __schedule+0xba6/0x1500 kernel/sched/core.c:6755
 preempt_schedule_irq+0xaa/0x120 kernel/sched/core.c:7067
 raw_irqentry_exit_cond_resched+0x29/0x30 kernel/entry/common.c:396
 irqentry_exit+0x37/0x40 kernel/entry/common.c:439
 sysvec_apic_timer_interrupt+0x64/0xc0 arch/x86/kernel/apic/apic.c:1118
 asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:check_kcov_mode kernel/kcov.c:184 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:245 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp2+0x30/0x90 kernel/kcov.c:306
Code: 45 08 65 48 8b 15 e0 f3 90 7e 65 8b 0d e1 f3 90 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 6c 0b 00 00 00 74 52 <8b> 8a 48 0b 00 00 83 f9 03 75 47 48 8b 8a 50 0b 00 00 44 8b 8a 4c
RSP: 0018:ffffc90000067a10 EFLAGS: 00000246
RAX: ffffffff81bc6937 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff88810028d100 RSI: 0000000000000000 RDI: 0000000000000020
RBP: ffffc90000067a10 R08: ffff8881f5a00000 R09: 0000000000064853
R10: 00000000b434af87 R11: 0000000000000001 R12: 0000000000000000
R13: ffffea00048e9688 R14: ffff8881040e9680 R15: dffffc0000000000
 __reset_page_owner+0x67/0x190 mm/page_owner.c:-1
 reset_page_owner include/linux/page_owner.h:26 [inline]
 free_pages_prepare mm/page_alloc.c:1580 [inline]
 free_pcp_prepare mm/page_alloc.c:1654 [inline]
 free_unref_page_prepare+0x7f8/0x800 mm/page_alloc.c:3620
 free_unref_page+0x95/0x540 mm/page_alloc.c:3718
 free_the_page mm/page_alloc.c:863 [inline]
 __free_pages+0x67/0x100 mm/page_alloc.c:6016
 __vunmap+0x9c0/0xb80 mm/vmalloc.c:2739
 free_work+0x5a/0x80 mm/vmalloc.c:98
 process_one_work+0x71f/0xc40 kernel/workqueue.c:2302
 worker_thread+0xa29/0x11e0 kernel/workqueue.c:2449
 kthread+0x281/0x320 kernel/kthread.c:386
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
----------------
Code disassembly (best guess):
   0:	45 08 65 48          	or     %r12b,0x48(%r13)
   4:	8b 15 e0 f3 90 7e    	mov    0x7e90f3e0(%rip),%edx        # 0x7e90f3ea
   a:	65 8b 0d e1 f3 90 7e 	mov    %gs:0x7e90f3e1(%rip),%ecx        # 0x7e90f3f2
  11:	81 e1 00 01 ff 00    	and    $0xff0100,%ecx
  17:	74 11                	je     0x2a
  19:	81 f9 00 01 00 00    	cmp    $0x100,%ecx
  1f:	75 5b                	jne    0x7c
  21:	83 ba 6c 0b 00 00 00 	cmpl   $0x0,0xb6c(%rdx)
  28:	74 52                	je     0x7c
* 2a:	8b 8a 48 0b 00 00    	mov    0xb48(%rdx),%ecx <-- trapping instruction
  30:	83 f9 03             	cmp    $0x3,%ecx
  33:	75 47                	jne    0x7c
  35:	48 8b 8a 50 0b 00 00 	mov    0xb50(%rdx),%rcx
  3c:	44                   	rex.R
  3d:	8b                   	.byte 0x8b
  3e:	8a                   	.byte 0x8a
  3f:	4c                   	rex.WR

final repro crashed as (corrupted=false):
BUG: workqueue lockup - pool cpus=0 node=0 flags=0x1 nice=0 stuck for 154s!
BUG: workqueue lockup - pool cpus=1 node=0 flags=0x1 nice=0 stuck for 154s!
Showing busy workqueues and worker pools:
workqueue events: flags=0x0
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=2/256 refcnt=3
    pending: psi_avgs_work, kfree_rcu_monitor
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=3/256 refcnt=4
    in-flight: 6:free_work
    pending: vmstat_shepherd, kfree_rcu_monitor
workqueue events_unbound: flags=0x2
  pwq 4: cpus=0-1 flags=0x5 nice=0 active=4/512 refcnt=6
    in-flight: 434:flush_memcg_stats_dwork, 10:toggle_allocation_gate, 43:linkwatch_event linkwatch_event
workqueue events_power_efficient: flags=0x80
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=2/256 refcnt=3
    in-flight: 369:wg_ratelimiter_gc_entries
    pending: gc_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=5/256 refcnt=6
    pending: neigh_managed_work, neigh_managed_work, neigh_periodic_work, neigh_periodic_work, check_lifetime
workqueue netns: flags=0xe000a
  pwq 4: cpus=0-1 flags=0x5 nice=0 active=1/1 refcnt=3
    in-flight: 8:cleanup_net
workqueue mm_percpu_wq: flags=0x8
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: vmstat_update
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: vmstat_update
workqueue writeback: flags=0x4a
  pwq 4: cpus=0-1 flags=0x5 nice=0 active=1/256 refcnt=3
    in-flight: 415:wb_workfn
workqueue dm_bufio_cache: flags=0x8
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: work_fn
workqueue ipv6_addrconf: flags=0x40008
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/1 refcnt=62
    in-flight: 24:addrconf_dad_work
    inactive: addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work
, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/1 refcnt=89
    in-flight: 397:addrconf_dad_work
    inactive: addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work
, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work
workqueue wg-crypt-wg0: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=2/256 refcnt=3
    pending: wg_packet_tx_worker, wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-crypt-wg1: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-kex-wg2: flags=0x6
  pwq 4: cpus=0-1 flags=0x5 nice=0 active=1/256 refcnt=3
    pending: wg_packet_handshake_send_worker
workqueue wg-crypt-wg2: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-crypt-wg0: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=2/256 refcnt=3
    pending: wg_packet_tx_worker, wg_packet_encrypt_worker
workqueue wg-crypt-wg0: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=2/256 refcnt=3
    pending: wg_packet_tx_worker, wg_packet_encrypt_worker
workqueue wg-crypt-wg1: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-crypt-wg2: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-crypt-wg1: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-crypt-wg2: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-kex-wg0: flags=0x6
  pwq 4: cpus=0-1 flags=0x5 nice=0 active=1/256 refcnt=3
    pending: wg_packet_handshake_send_worker
workqueue wg-crypt-wg0: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=2/256 refcnt=3
    pending: wg_packet_tx_worker, wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-kex-wg1: flags=0x6
  pwq 4: cpus=0-1 flags=0x5 nice=0 active=1/256 refcnt=3
    in-flight: 324:wg_packet_handshake_send_worker
workqueue wg-crypt-wg1: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-crypt-wg2: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-crypt-wg0: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=2/256 refcnt=3
    pending: wg_packet_tx_worker, wg_packet_encrypt_worker
workqueue wg-crypt-wg1: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
workqueue wg-crypt-wg2: flags=0x28
  pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
  pwq 0: cpus=0 node=0 flags=0x1 nice=0 active=1/256 refcnt=2
    pending: wg_packet_encrypt_worker
pool 0: cpus=0 node=0 flags=0x1 nice=0 hung=155s workers=5 manager: 349 idle: 437 19
pool 2: cpus=1 node=0 flags=0x1 nice=0 hung=155s workers=4 manager: 39 idle: 368
pool 4: cpus=0-1 flags=0x5 nice=0 hung=98s workers=7 manager: 398
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P6/1:b..l
	(detected by 0, t=10002 jiffies, g=2121, q=137 ncpus=2)
task:kworker/0:0     state:R  running task     stack:27600 pid:6     ppid:2      flags:0x00004000
Workqueue: events free_work
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5425 [inline]
 __schedule+0xba6/0x1500 kernel/sched/core.c:6755
 preempt_schedule_irq+0xaa/0x120 kernel/sched/core.c:7067
 raw_irqentry_exit_cond_resched+0x29/0x30 kernel/entry/common.c:396
 irqentry_exit+0x37/0x40 kernel/entry/common.c:439
 sysvec_apic_timer_interrupt+0x64/0xc0 arch/x86/kernel/apic/apic.c:1118
 asm_sysvec_apic_timer_interrupt+0x1b/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:check_kcov_mode kernel/kcov.c:184 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:245 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp2+0x30/0x90 kernel/kcov.c:306
Code: 45 08 65 48 8b 15 e0 f3 90 7e 65 8b 0d e1 f3 90 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 6c 0b 00 00 00 74 52 <8b> 8a 48 0b 00 00 83 f9 03 75 47 48 8b 8a 50 0b 00 00 44 8b 8a 4c
RSP: 0018:ffffc90000067a10 EFLAGS: 00000246
RAX: ffffffff81bc6937 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff88810028d100 RSI: 0000000000000000 RDI: 0000000000000020
RBP: ffffc90000067a10 R08: ffff8881f5a00000 R09: 0000000000064853
R10: 00000000b434af87 R11: 0000000000000001 R12: 0000000000000000
R13: ffffea00048e9688 R14: ffff8881040e9680 R15: dffffc0000000000
 __reset_page_owner+0x67/0x190 mm/page_owner.c:-1
 reset_page_owner include/linux/page_owner.h:26 [inline]
 free_pages_prepare mm/page_alloc.c:1580 [inline]
 free_pcp_prepare mm/page_alloc.c:1654 [inline]
 free_unref_page_prepare+0x7f8/0x800 mm/page_alloc.c:3620
 free_unref_page+0x95/0x540 mm/page_alloc.c:3718
 free_the_page mm/page_alloc.c:863 [inline]
 __free_pages+0x67/0x100 mm/page_alloc.c:6016
 __vunmap+0x9c0/0xb80 mm/vmalloc.c:2739
 free_work+0x5a/0x80 mm/vmalloc.c:98
 process_one_work+0x71f/0xc40 kernel/workqueue.c:2302
 worker_thread+0xa29/0x11e0 kernel/workqueue.c:2449
 kthread+0x281/0x320 kernel/kthread.c:386
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
----------------
Code disassembly (best guess):
   0:	45 08 65 48          	or     %r12b,0x48(%r13)
   4:	8b 15 e0 f3 90 7e    	mov    0x7e90f3e0(%rip),%edx        # 0x7e90f3ea
   a:	65 8b 0d e1 f3 90 7e 	mov    %gs:0x7e90f3e1(%rip),%ecx        # 0x7e90f3f2
  11:	81 e1 00 01 ff 00    	and    $0xff0100,%ecx
  17:	74 11                	je     0x2a
  19:	81 f9 00 01 00 00    	cmp    $0x100,%ecx
  1f:	75 5b                	jne    0x7c
  21:	83 ba 6c 0b 00 00 00 	cmpl   $0x0,0xb6c(%rdx)
  28:	74 52                	je     0x7c
* 2a:	8b 8a 48 0b 00 00    	mov    0xb48(%rdx),%ecx <-- trapping instruction
  30:	83 f9 03             	cmp    $0x3,%ecx
  33:	75 47                	jne    0x7c
  35:	48 8b 8a 50 0b 00 00 	mov    0xb50(%rdx),%rcx
  3c:	44                   	rex.R
  3d:	8b                   	.byte 0x8b
  3e:	8a                   	.byte 0x8a
  3f:	4c                   	rex.WR