Extracting prog: 3m22.464751895s
Minimizing prog: 28m13.003446929s
Simplifying prog options: 0s
Extracting C: 39.892793132s
Simplifying C: 10m38.977116903s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mmap-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mmap-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)

program crashed: WARNING in update_rq_clock
single: successfully extracted reproducer
found reproducer with 7 syscalls
minimizing guilty program
testing program (duration=1m29.056889044s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mmap-mkdirat-mount-openat-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)

program did not crash
testing program (duration=1m29.056889044s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mmap-mkdirat-mount-openat-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='on\n', 0x3)

program did not crash
testing program (duration=1m29.056889044s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mmap-mkdirat-mount-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)='off', 0x3)
write(0xffffffffffffffff, &(0x7f0000000180)='on\n', 0x3)

program did not crash
testing program (duration=1m29.056889044s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mmap-mkdirat-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)

program did not crash
testing program (duration=1m29.056889044s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mmap-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)

program did not crash
testing program (duration=1m29.056889044s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)

program crashed: WARNING in update_rq_clock
testing program (duration=1m29.056889044s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)

program did not crash
testing program (duration=1m29.056889044s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)

program did not crash
testing program (duration=1m29.056889044s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)

program did not crash
testing program (duration=1m29.056889044s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)

program did not crash
testing program (duration=1m29.056889044s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)

program did not crash
testing program (duration=1m29.056889044s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
write(r0, &(0x7f0000000180)='on\n', 0x3)

program did not crash
testing program (duration=1m29.056889044s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140), 0x0)
write(r0, &(0x7f0000000180)='on\n', 0x3)

program did not crash
testing program (duration=1m29.056889044s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, 0x0, 0x0)

program did not crash
testing program (duration=1m29.056889044s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180), 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m29.056889044s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
program crashed: WARNING in update_rq_clock
simplifying C reproducer
testing compiled C program (duration=1m29.056889044s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
program crashed: WARNING in update_rq_clock
testing compiled C program (duration=1m29.056889044s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
program did not crash
testing compiled C program (duration=1m29.056889044s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
program crashed: WARNING in update_rq_clock
testing compiled C program (duration=1m29.056889044s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
program crashed: WARNING in update_rq_clock
testing compiled C program (duration=1m29.056889044s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
program crashed: WARNING in update_rq_clock
testing compiled C program (duration=1m29.056889044s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
program crashed: WARNING in update_rq_clock
testing compiled C program (duration=1m29.056889044s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
program crashed: WARNING in update_rq_clock
testing program (duration=1m29.056889044s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)

program crashed: WARNING in update_rq_clock
validation run: crashed=true
testing program (duration=1m29.056889044s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)

program crashed: WARNING in update_rq_clock
validation run: crashed=true
testing program (duration=1m29.056889044s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)

program crashed: WARNING in update_rq_clock
validation run: crashed=true
reproducing took 47m53.041131699s
repro crashed as (corrupted=false):
------------[ cut here ]------------
debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0)
WARNING: kernel/sched/sched.h:1673 at lockdep_assert_rq_held kernel/sched/sched.h:1673 [inline], CPU#0: syz.1.181/6107
WARNING: kernel/sched/sched.h:1673 at update_rq_clock+0x34d/0x560 kernel/sched/core.c:876, CPU#0: syz.1.181/6107
Modules linked in:
CPU: 0 UID: 0 PID: 6107 Comm: syz.1.181 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
RIP: 0010:lockdep_assert_rq_held kernel/sched/sched.h:1673 [inline]
RIP: 0010:update_rq_clock+0x34d/0x560 kernel/sched/core.c:876
Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 0b ff a4 00 4c 01 3b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 95 0a 6d 0a cc 90 <0f> 0b 90 e9 42 fd ff ff 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e
RSP: 0000:ffffc900044bf218 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffff8880b853c140 RCX: 0000000000000002
RDX: 00000000000000ff RSI: ffffffff8e9dafe5 RDI: ffffffff8c8f3280
RBP: dffffc0000000000 R08: ffffffff90bc9ebf R09: 1ffffffff21793d7
R10: dffffc0000000000 R11: ffffffff81a16d00 R12: ffff88802a532728
R13: dffffc0000000001 R14: ffff8880b853d008 R15: ffff8880b853c140
FS:  000055555a305500(0000) GS:ffff888124623000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbab1e22000 CR3: 0000000070e5a000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 pick_next_task kernel/sched/core.c:6425 [inline]
 __schedule+0x3c54/0x5b40 kernel/sched/core.c:7296
 preempt_schedule_irq+0x4b/0x90 kernel/sched/core.c:7664
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:524 [inline]
 irqentry_exit+0x14f/0x910 kernel/entry/common.c:154
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:lock_acquire+0x232/0x350 kernel/locking/lockdep.c:5947
Code: ff ff ff e8 40 a9 5b 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 d2 83 3b 12 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 37 8c 1b
RSP: 0000:ffffc900044bf588 EFLAGS: 00000286
RAX: 8c54b622db197500 RBX: 0000000000000000 RCX: 0000000000000046
RDX: 00000000742394c2 RSI: ffffffff8e9dafe5 RDI: ffffffff8c8f3280
RBP: ffff88802a531f40 R08: ffffffff8246e54c R09: 0000000000000000
R10: dffffc0000000000 R11: ffffed1006bd5190 R12: ffffffff8f15c520
R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
 rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 rcu_read_lock include/linux/rcupdate.h:849 [inline]
 __page_table_check_zero+0x89/0x430 mm/page_table_check.c:138
 page_table_check_alloc include/linux/page_table_check.h:38 [inline]
 post_alloc_hook+0x208/0x250 mm/page_alloc.c:1855
 prep_new_page mm/page_alloc.c:1862 [inline]
 get_page_from_freelist+0x220f/0x2280 mm/page_alloc.c:3933
 __alloc_frozen_pages_noprof+0x1fc/0x400 mm/page_alloc.c:5441
 alloc_pages_mpol+0x21e/0x390 mm/mempolicy.c:2512
 folio_alloc_mpol_noprof+0x39/0x160 mm/mempolicy.c:2531
 vma_alloc_folio_noprof+0xe1/0x1e0 mm/mempolicy.c:2566
 folio_prealloc mm/memory.c:-1 [inline]
 wp_page_copy mm/memory.c:4069 [inline]
 do_wp_page+0x1166/0x4b60 mm/memory.c:4534
 handle_pte_fault mm/memory.c:6650 [inline]
 __handle_mm_fault mm/memory.c:6775 [inline]
 handle_mm_fault+0x15d7/0x3750 mm/memory.c:6942
 do_user_addr_fault+0xb35/0x1480 arch/x86/mm/fault.c:1343
 handle_page_fault arch/x86/mm/fault.c:1483 [inline]
 exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x7fbab1a66723
Code: 53 48 83 ec 38 80 3d fb b8 3b 00 00 89 7c 24 18 48 89 74 24 28 0f 85 cd 09 00 00 80 3d cb ef ee 00 00 49 89 f1 41 89 d2 89 cb <c6> 05 d6 b8 3b 00 01 41 89 d7 0f 85 45 04 00 00 80 3d 96 ef ee 00
RSP: 002b:00007ffd556cd670 EFLAGS: 00010246
RAX: 00007fbab1e25fa0 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000003 RSI: 00007fbab1e26038 RDI: 0000000000000000
RBP: 00007fbab1e25fb0 R08: 0000000000000000 R09: 00007fbab1e26038
R10: 0000000000000003 R11: 0000000000000000 R12: 00007fbab1e25fa0
R13: 0000200000000000 R14: 00007ffd556cd6e8 R15: 00007fbab1e25fa0
 </TASK>
----------------
Code disassembly (best guess), 2 bytes skipped:
   0:	ff                   	ljmp   (bad)
   1:	e8 40 a9 5b 0a       	call   0xa5ba946
   6:	f7 44 24 10 00 02 00 	testl  $0x200,0x10(%rsp)
   d:	00
   e:	0f 84 38 ff ff ff    	je     0xffffff4c
  14:	65 48 8b 05 d2 83 3b 	mov    %gs:0x123b83d2(%rip),%rax        # 0x123b83ee
  1b:	12
  1c:	48 3b 44 24 50       	cmp    0x50(%rsp),%rax
  21:	75 33                	jne    0x56
  23:	fb                   	sti
  24:	48 83 c4 58          	add    $0x58,%rsp
* 28:	5b                   	pop    %rbx <-- trapping instruction
  29:	41 5c                	pop    %r12
  2b:	41 5d                	pop    %r13
  2d:	41 5e                	pop    %r14
  2f:	41 5f                	pop    %r15
  31:	5d                   	pop    %rbp
  32:	c3                   	ret
  33:	cc                   	int3
  34:	cc                   	int3
  35:	cc                   	int3
  36:	cc                   	int3
  37:	cc                   	int3
  38:	48                   	rex.W
  39:	8d                   	.byte 0x8d
  3a:	3d                   	.byte 0x3d
  3b:	37                   	(bad)
  3c:	8c 1b                	mov    %ds,(%rbx)

final repro crashed as (corrupted=false):
------------[ cut here ]------------
debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0)
WARNING: kernel/sched/sched.h:1673 at lockdep_assert_rq_held kernel/sched/sched.h:1673 [inline], CPU#0: syz.1.181/6107
WARNING: kernel/sched/sched.h:1673 at update_rq_clock+0x34d/0x560 kernel/sched/core.c:876, CPU#0: syz.1.181/6107
Modules linked in:
CPU: 0 UID: 0 PID: 6107 Comm: syz.1.181 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
RIP: 0010:lockdep_assert_rq_held kernel/sched/sched.h:1673 [inline]
RIP: 0010:update_rq_clock+0x34d/0x560 kernel/sched/core.c:876
Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 0b ff a4 00 4c 01 3b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 95 0a 6d 0a cc 90 <0f> 0b 90 e9 42 fd ff ff 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e
RSP: 0000:ffffc900044bf218 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffff8880b853c140 RCX: 0000000000000002
RDX: 00000000000000ff RSI: ffffffff8e9dafe5 RDI: ffffffff8c8f3280
RBP: dffffc0000000000 R08: ffffffff90bc9ebf R09: 1ffffffff21793d7
R10: dffffc0000000000 R11: ffffffff81a16d00 R12: ffff88802a532728
R13: dffffc0000000001 R14: ffff8880b853d008 R15: ffff8880b853c140
FS:  000055555a305500(0000) GS:ffff888124623000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbab1e22000 CR3: 0000000070e5a000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 pick_next_task kernel/sched/core.c:6425 [inline]
 __schedule+0x3c54/0x5b40 kernel/sched/core.c:7296
 preempt_schedule_irq+0x4b/0x90 kernel/sched/core.c:7664
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:524 [inline]
 irqentry_exit+0x14f/0x910 kernel/entry/common.c:154
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:lock_acquire+0x232/0x350 kernel/locking/lockdep.c:5947
Code: ff ff ff e8 40 a9 5b 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 d2 83 3b 12 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 37 8c 1b
RSP: 0000:ffffc900044bf588 EFLAGS: 00000286
RAX: 8c54b622db197500 RBX: 0000000000000000 RCX: 0000000000000046
RDX: 00000000742394c2 RSI: ffffffff8e9dafe5 RDI: ffffffff8c8f3280
RBP: ffff88802a531f40 R08: ffffffff8246e54c R09: 0000000000000000
R10: dffffc0000000000 R11: ffffed1006bd5190 R12: ffffffff8f15c520
R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
 rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 rcu_read_lock include/linux/rcupdate.h:849 [inline]
 __page_table_check_zero+0x89/0x430 mm/page_table_check.c:138
 page_table_check_alloc include/linux/page_table_check.h:38 [inline]
 post_alloc_hook+0x208/0x250 mm/page_alloc.c:1855
 prep_new_page mm/page_alloc.c:1862 [inline]
 get_page_from_freelist+0x220f/0x2280 mm/page_alloc.c:3933
 __alloc_frozen_pages_noprof+0x1fc/0x400 mm/page_alloc.c:5441
 alloc_pages_mpol+0x21e/0x390 mm/mempolicy.c:2512
 folio_alloc_mpol_noprof+0x39/0x160 mm/mempolicy.c:2531
 vma_alloc_folio_noprof+0xe1/0x1e0 mm/mempolicy.c:2566
 folio_prealloc mm/memory.c:-1 [inline]
 wp_page_copy mm/memory.c:4069 [inline]
 do_wp_page+0x1166/0x4b60 mm/memory.c:4534
 handle_pte_fault mm/memory.c:6650 [inline]
 __handle_mm_fault mm/memory.c:6775 [inline]
 handle_mm_fault+0x15d7/0x3750 mm/memory.c:6942
 do_user_addr_fault+0xb35/0x1480 arch/x86/mm/fault.c:1343
 handle_page_fault arch/x86/mm/fault.c:1483 [inline]
 exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x7fbab1a66723
Code: 53 48 83 ec 38 80 3d fb b8 3b 00 00 89 7c 24 18 48 89 74 24 28 0f 85 cd 09 00 00 80 3d cb ef ee 00 00 49 89 f1 41 89 d2 89 cb <c6> 05 d6 b8 3b 00 01 41 89 d7 0f 85 45 04 00 00 80 3d 96 ef ee 00
RSP: 002b:00007ffd556cd670 EFLAGS: 00010246
RAX: 00007fbab1e25fa0 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000003 RSI: 00007fbab1e26038 RDI: 0000000000000000
RBP: 00007fbab1e25fb0 R08: 0000000000000000 R09: 00007fbab1e26038
R10: 0000000000000003 R11: 0000000000000000 R12: 00007fbab1e25fa0
R13: 0000200000000000 R14: 00007ffd556cd6e8 R15: 00007fbab1e25fa0
 </TASK>
----------------
Code disassembly (best guess), 2 bytes skipped:
   0:	ff                   	ljmp   (bad)
   1:	e8 40 a9 5b 0a       	call   0xa5ba946
   6:	f7 44 24 10 00 02 00 	testl  $0x200,0x10(%rsp)
   d:	00
   e:	0f 84 38 ff ff ff    	je     0xffffff4c
  14:	65 48 8b 05 d2 83 3b 	mov    %gs:0x123b83d2(%rip),%rax        # 0x123b83ee
  1b:	12
  1c:	48 3b 44 24 50       	cmp    0x50(%rsp),%rax
  21:	75 33                	jne    0x56
  23:	fb                   	sti
  24:	48 83 c4 58          	add    $0x58,%rsp
* 28:	5b                   	pop    %rbx <-- trapping instruction
  29:	41 5c                	pop    %r12
  2b:	41 5d                	pop    %r13
  2d:	41 5e                	pop    %r14
  2f:	41 5f                	pop    %r15
  31:	5d                   	pop    %rbp
  32:	c3                   	ret
  33:	cc                   	int3
  34:	cc                   	int3
  35:	cc                   	int3
  36:	cc                   	int3
  37:	cc                   	int3
  38:	48                   	rex.W
  39:	8d                   	.byte 0x8d
  3a:	3d                   	.byte 0x3d
  3b:	37                   	(bad)
  3c:	8c 1b                	mov    %ds,(%rbx)