Extracting prog: 2m38.631630285s Minimizing prog: 1h22m32.817457242s Simplifying prog options: 12m26.029338768s Extracting C: 2m16.408283434s Simplifying C: 0s extracting reproducer from 58 programs testing a last program of every proc single: executing 13 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getpid-sched_setscheduler-timer_create-timer_settime-socketpair$unix-pipe-splice-setns-unshare-socket$inet_tcp-syz_mount_image$hfsplus-timer_gettime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) setns(r3, 0x0) unshare(0x62040200) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x3, &(0x7f0000000040)=ANY=[], 0x4, 0x67b, &(0x7f0000000bc0)="$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") timer_gettime(r1, &(0x7f00000000c0)) program crashed: INFO: rcu detected stall in corrupted single: successfully extracted reproducer found reproducer with 14 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getpid-sched_setscheduler-timer_create-timer_settime-socketpair$unix-pipe-splice-setns-unshare-socket$inet_tcp-syz_mount_image$hfsplus detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) setns(r2, 0x0) unshare(0x62040200) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x3, &(0x7f0000000040)=ANY=[], 0x4, 0x67b, &(0x7f0000000bc0)="$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") program crashed: INFO: rcu detected stall in corrupted testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getpid-sched_setscheduler-timer_create-timer_settime-socketpair$unix-pipe-splice-setns-unshare-socket$inet_tcp detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) setns(r2, 0x0) unshare(0x62040200) socket$inet_tcp(0x2, 0x1, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getpid-sched_setscheduler-timer_create-timer_settime-socketpair$unix-pipe-splice-setns-unshare detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) setns(r2, 0x0) unshare(0x62040200) program crashed: INFO: rcu detected stall in corrupted testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getpid-sched_setscheduler-timer_create-timer_settime-socketpair$unix-pipe-splice-setns detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) setns(r2, 0x0) program crashed: INFO: rcu detected stall in syscall_exit_to_user_mode testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getpid-sched_setscheduler-timer_create-timer_settime-socketpair$unix-pipe-splice detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) program crashed: INFO: rcu detected stall in corrupted testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getpid-sched_setscheduler-timer_create-timer_settime-socketpair$unix-pipe detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) pipe(&(0x7f0000000200)) program crashed: INFO: rcu detected stall in corrupted testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getpid-sched_setscheduler-timer_create-timer_settime-socketpair$unix detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) program crashed: INFO: rcu detected stall in corrupted testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getpid-sched_setscheduler-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) program crashed: INFO: rcu detected stall in syscall_exit_to_user_mode testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getpid-sched_setscheduler-timer_create detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getpid-sched_setscheduler-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getpid-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) program crashed: INFO: rcu detected stall in syscall_exit_to_user_mode testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) program crashed: INFO: rcu detected stall in syscall_exit_to_user_mode testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sched_setscheduler-timer_create-timer_settime detailed listing: executing program 0: sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-timer_settime program crashed: INFO: rcu detected stall in syscall_enter_from_user_mode a never seen crash title: INFO: rcu detected stall in syscall_enter_from_user_mode, ignore simplifying guilty program options testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) program crashed: INFO: rcu detected stall in corrupted extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-timer_settime program crashed: INFO: rcu detected stall in sys_sendto a never seen crash title: INFO: rcu detected stall in sys_sendto, ignore testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) program did not crash reproducing took 1h40m52.060329592s repro crashed as (corrupted=true): rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: (detected by 0, t=10502 jiffies, g=7089, q=380) rcu: All QSes seen, last rcu_preempt kthread activity 10494 (4294956499-4294946005), jiffies_till_next_fqs=1, root ->qsmask 0x0 rcu: rcu_preempt kthread starved for 10494 jiffies! g7089 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:28032 pid: 15 ppid: 2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5030 [inline] __schedule+0x11b8/0x43b0 kernel/sched/core.c:6376 schedule+0x11b/0x1e0 kernel/sched/core.c:6459 schedule_timeout+0x15c/0x280 kernel/time/timer.c:1914 rcu_gp_fqs_loop+0x29e/0x11b0 kernel/rcu/tree.c:1972 rcu_gp_kthread+0x98/0x350 kernel/rcu/tree.c:2145 kthread+0x436/0x520 kernel/kthread.c:334 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 4360 Comm: syz.1.17 Not tainted 5.15.185-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 RIP: 0010:vtime_user_exit+0x2d2/0x400 kernel/sched/cputime.c:-1 Code: df e8 92 61 69 00 48 c7 03 00 00 00 00 48 8b 14 24 43 0f b6 44 3d 00 84 c0 0f 85 b1 00 00 00 c7 02 02 00 00 00 48 8b 7c 24 20 <48> 8b 74 24 18 e8 c4 8d 08 00 48 8b 44 24 10 42 0f b6 04 38 84 c0 RSP: 0018:ffffc90002fcfe90 EFLAGS: 00000046 RAX: 0000000000000000 RBX: ffff88802a20c2e0 RCX: 6ded191508152100 RDX: ffff88802a20c2d8 RSI: ffffffff8a59a720 RDI: ffff88802a20c2a8 RBP: 00000000001f7ce5 R08: ffffffff8eeb0048 R09: ffffffff8eeb0058 R10: ffffffff8eeb0050 R11: ffffffff8eeb0043 R12: 1ffff1100544185c R13: 1ffff1100544185b R14: ffff88802a20bb80 R15: dffffc0000000000 FS: 0000555591044500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000020000006b000 CR3: 000000005d061000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __context_tracking_exit+0x4c/0x80 kernel/context_tracking.c:160 user_exit_irqoff include/linux/context_tracking.h:47 [inline] __enter_from_user_mode kernel/entry/common.c:22 [inline] syscall_enter_from_user_mode+0x56/0x70 kernel/entry/common.c:110 do_syscall_64+0x24/0xa0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7f285b9948e7 Code: 0b e9 68 fe ff ff 48 83 c4 18 48 8d 3d b2 6f d6 00 5b 5d 41 5c 41 5d 41 5e 41 5f e9 13 f8 fb ff 0f 1f 00 b8 27 00 00 00 0f 05 0f 1f 84 00 00 00 00 00 b8 6e 00 00 00 0f 05 c3 0f 1f 84 00 00 RSP: 002b:00007ffcfa641c08 EFLAGS: 00000202 ORIG_RAX: 0000000000000027 RAX: ffffffffffffffda RBX: 00007ffcfa641d70 RCX: 00007f285b9948e7 RDX: 00007ffcfa641c40 RSI: 00007ffcfa641d70 RDI: 0000000000000021 RBP: 0000000000000000 R08: 0000000000000001 R09: 00000004fa6424ef R10: 00007f285b80f000 R11: 0000000000000202 R12: 00007f285bbc4fac R13: 00007f285bbc4fa0 R14: ffffffffffffffff R15: 0000000000000004 report is corrupted, running repro again testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-timer_create-timer_settime detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) program crashed: INFO: rcu detected stall in syscall_exit_to_user_mode final repro crashed as (corrupted=false): rcu: INFO: rcu_preempt self-detected stall on CPU rcu: 1-...!: (1 GPs behind) idle=4cf/1/0x4000000000000000 softirq=7020/7031 fqs=1 (t=10500 jiffies g=7273 q=3693) rcu: rcu_preempt kthread starved for 10497 jiffies! g7273 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27584 pid: 15 ppid: 2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5030 [inline] __schedule+0x11b8/0x43b0 kernel/sched/core.c:6376 schedule+0x11b/0x1e0 kernel/sched/core.c:6459 schedule_timeout+0x15c/0x280 kernel/time/timer.c:1914 rcu_gp_fqs_loop+0x29e/0x11b0 kernel/rcu/tree.c:1972 rcu_gp_kthread+0x98/0x350 kernel/rcu/tree.c:2145 kthread+0x436/0x520 kernel/kthread.c:334 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 4353 Comm: syz.4.20 Not tainted 5.15.185-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 RIP: 0010:user_mode arch/x86/include/asm/ptrace.h:136 [inline] RIP: 0010:instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline] RIP: 0010:sysvec_apic_timer_interrupt+0x20/0xc0 arch/x86/kernel/apic/apic.c:1108 Code: cc cc 00 00 cc cc 00 00 cc cc 55 53 48 89 fb e8 46 13 00 00 89 c5 48 c7 c7 40 ec 07 8a e8 b8 17 00 00 65 c6 05 92 32 62 76 01 83 88 00 00 00 03 75 17 48 c7 c7 20 ec 07 8a e8 9b 17 00 00 65 RSP: 0018:ffffc900034ffb00 EFLAGS: 00000086 RAX: 0000000000000000 RBX: ffffc900034ffb18 RCX: 6e48c9cbdfe29100 RDX: 0000000000000000 RSI: ffffffff8a07ec40 RDI: ffffffff8a59a740 RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad157e R10: fffffbfff1ad157e R11: 1ffffffff1ad157d R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 0000555582b7e500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000020000006b000 CR3: 0000000058799000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676 RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:169 [inline] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 kernel/locking/spinlock.c:202 Code: f6 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 8e 9a b1 f7 48 89 df e8 56 6f b2 f7 e8 a1 13 d3 f7 fb bf 01 00 00 00 86 93 a6 f7 65 8b 05 27 a3 57 76 85 c0 74 02 5b c3 e8 d4 ad 55 RSP: 0018:ffffc900034ffbc0 EFLAGS: 00000282 RAX: 6e48c9cbdfe29100 RBX: ffff88805b540000 RCX: 6e48c9cbdfe29100 RDX: dffffc0000000000 RSI: ffffffff8a0b11c0 RDI: 0000000000000001 RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100b6a8001 R10: ffffed100b6a8001 R11: 1ffff1100b6a8000 R12: ffff88805b540000 R13: 0000000000000021 R14: dffffc0000000000 R15: 000000001c000004 spin_unlock_irq include/linux/spinlock.h:413 [inline] get_signal+0x11d6/0x12c0 kernel/signal.c:2903 arch_do_signal_or_restart+0xc1/0x1300 arch/x86/kernel/signal.c:867 handle_signal_work kernel/entry/common.c:154 [inline] exit_to_user_mode_loop+0x9e/0x130 kernel/entry/common.c:178 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:214 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline] syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:307 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7fc1a82502f0 Code: c7 44 24 20 c0 ff ff ff 48 c7 44 24 18 3f 00 00 00 48 c7 44 24 10 40 00 00 00 48 c7 44 24 08 00 00 00 00 e9 ad fd ff ff 66 90 <48> c7 c0 a8 ff ff ff 64 48 03 04 25 00 00 00 00 c3 66 2e 0f 1f 84 RSP: 002b:00007ffef32df948 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 00007fc1a84edfa0 RCX: 00007fc1a8348b39 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007fc1a8348b39 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fc1a84edfa0 R14: 00007fc1a84edfa0 R15: 0000000000000004 NMI backtrace for cpu 1 CPU: 1 PID: 4352 Comm: syz.0.23 Not tainted 5.15.185-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Call Trace: dump_stack_lvl+0x168/0x230 lib/dump_stack.c:106 nmi_cpu_backtrace+0x397/0x3d0 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x163/0x280 lib/nmi_backtrace.c:62 trigger_single_cpu_backtrace include/linux/nmi.h:166 [inline] rcu_dump_cpu_stacks+0x22f/0x380 kernel/rcu/tree_stall.h:349 print_cpu_stall+0x31d/0x5f0 kernel/rcu/tree_stall.h:633 check_cpu_stall kernel/rcu/tree_stall.h:727 [inline] rcu_pending kernel/rcu/tree.c:3932 [inline] rcu_sched_clock_irq+0x6d8/0x1110 kernel/rcu/tree.c:2619 update_process_times+0x193/0x200 kernel/time/timer.c:1818 tick_sched_handle kernel/time/tick-sched.c:254 [inline] tick_sched_timer+0x37d/0x560 kernel/time/tick-sched.c:1473 __run_hrtimer kernel/time/hrtimer.c:1690 [inline] __hrtimer_run_queues+0x4fe/0xc40 kernel/time/hrtimer.c:1754 hrtimer_interrupt+0x3bb/0x8d0 kernel/time/hrtimer.c:1816 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1097 [inline] __sysvec_apic_timer_interrupt+0x137/0x4a0 arch/x86/kernel/apic/apic.c:1114 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline] sysvec_apic_timer_interrupt+0x9b/0xc0 arch/x86/kernel/apic/apic.c:1108 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676 RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:169 [inline] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 kernel/locking/spinlock.c:202 Code: f6 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 8e 9a b1 f7 48 89 df e8 56 6f b2 f7 e8 a1 13 d3 f7 fb bf 01 00 00 00 86 93 a6 f7 65 8b 05 27 a3 57 76 85 c0 74 02 5b c3 e8 d4 ad 55 RSP: 0018:ffffc9000354fbc0 EFLAGS: 00000282 RAX: d10333ffe9900900 RBX: ffff88805b540940 RCX: d10333ffe9900900 RDX: dffffc0000000000 RSI: ffffffff8a0b11c0 RDI: 0000000000000001 RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100b6a8129 R10: ffffed100b6a8129 R11: 1ffff1100b6a8128 R12: ffff88805b540940 R13: 0000000000000021 R14: dffffc0000000000 R15: 000000001c000004 spin_unlock_irq include/linux/spinlock.h:413 [inline] get_signal+0x11d6/0x12c0 kernel/signal.c:2903 arch_do_signal_or_restart+0xc1/0x1300 arch/x86/kernel/signal.c:867 handle_signal_work kernel/entry/common.c:154 [inline] exit_to_user_mode_loop+0x9e/0x130 kernel/entry/common.c:178 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:214 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline] syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:307 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7f22aced0929 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffd60c1e788 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 00007f22ad0f7fa0 RCX: 00007f22aced0929 RDX: 000020000006b000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007f22acf52b39 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f22ad0f7fa0 R14: 00007f22ad0f7fa0 R15: 0000000000000004 sched: RT throttling activated