Extracting prog: 4m22.715362861s
Minimizing prog: 46m56.022589946s
Simplifying prog options: 0s
Extracting C: 2m17.665085334s
Simplifying C: 25m16.305396473s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-setsockopt$sock_attach_bpf-sendmsg$tipc
detailed listing:
executing program 0:
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000180), 0x4) (async)
sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) (rerun: 64)

program crashed: INFO: rcu detected stall in corrupted
single: successfully extracted reproducer
found reproducer with 3 syscalls
minimizing guilty program
testing program (duration=5m8.107003722s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-setsockopt$sock_attach_bpf
detailed listing:
executing program 0:
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000180), 0x4) (async)

program did not crash
testing program (duration=5m8.107003722s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-sendmsg$tipc
detailed listing:
executing program 0:
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) (rerun: 64)

program did not crash
testing program (duration=5m8.107003722s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$sock_attach_bpf-sendmsg$tipc
detailed listing:
executing program 0:
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000180), 0x4) (async)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) (rerun: 64)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=5m8.107003722s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-setsockopt$sock_attach_bpf-sendmsg$tipc
detailed listing:
executing program 0:
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000180), 0x4)
sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1)

program did not crash
testing program (duration=5m8.107003722s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-setsockopt$sock_attach_bpf-sendmsg$tipc
detailed listing:
executing program 0:
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000180), 0x4) (async)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) (rerun: 64)

program did not crash
testing program (duration=5m8.107003722s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-setsockopt$sock_attach_bpf-sendmsg$tipc
detailed listing:
executing program 0:
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, 0x0, 0x0) (async)
sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) (rerun: 64)

program did not crash
testing program (duration=5m8.107003722s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-setsockopt$sock_attach_bpf-sendmsg$tipc
detailed listing:
executing program 0:
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000180), 0x4)
sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) (rerun: 64)

program did not crash
testing program (duration=5m8.107003722s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-setsockopt$sock_attach_bpf-sendmsg$tipc
detailed listing:
executing program 0:
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000180), 0x4) (async)
sendmsg$tipc(r1, 0x0, 0x1) (rerun: 64)

program did not crash
testing program (duration=5m8.107003722s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-setsockopt$sock_attach_bpf-sendmsg$tipc
detailed listing:
executing program 0:
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000180), 0x4) (async)
sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1)

program did not crash
extracting C reproducer
testing compiled C program (duration=5m8.107003722s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-setsockopt$sock_attach_bpf-sendmsg$tipc
program crashed: INFO: rcu detected stall in corrupted
simplifying C reproducer
testing compiled C program (duration=5m8.107003722s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-setsockopt$sock_attach_bpf-sendmsg$tipc
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=5m8.107003722s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-setsockopt$sock_attach_bpf-sendmsg$tipc
program crashed: INFO: rcu detected stall in corrupted
testing compiled C program (duration=5m8.107003722s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-setsockopt$sock_attach_bpf-sendmsg$tipc
program crashed: INFO: rcu detected stall in corrupted
testing compiled C program (duration=5m8.107003722s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-setsockopt$sock_attach_bpf-sendmsg$tipc
program crashed: INFO: rcu detected stall in corrupted
testing compiled C program (duration=5m8.107003722s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-setsockopt$sock_attach_bpf-sendmsg$tipc
program crashed: INFO: rcu detected stall in corrupted
testing compiled C program (duration=5m8.107003722s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-setsockopt$sock_attach_bpf-sendmsg$tipc
testing compiled C program (duration=5m8.107003722s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-setsockopt$sock_attach_bpf-sendmsg$tipc
program crashed: INFO: rcu detected stall in corrupted
testing compiled C program (duration=5m8.107003722s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-setsockopt$sock_attach_bpf-sendmsg$tipc
program crashed: INFO: rcu detected stall in corrupted
testing program (duration=5m8.107003722s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-setsockopt$sock_attach_bpf-sendmsg$tipc
detailed listing:
executing program 0:
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000180), 0x4) (async)
sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) (rerun: 64)

program crashed: INFO: rcu detected stall in corrupted
validation run: crashed=true
testing program (duration=5m8.107003722s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-setsockopt$sock_attach_bpf-sendmsg$tipc
detailed listing:
executing program 0:
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000180), 0x4) (async)
sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) (rerun: 64)

program crashed: INFO: rcu detected stall in corrupted
validation run: crashed=true
testing program (duration=5m8.107003722s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-setsockopt$sock_attach_bpf-sendmsg$tipc
detailed listing:
executing program 0:
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000180), 0x4) (async)
sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) (rerun: 64)

program crashed: INFO: rcu detected stall in corrupted
validation run: crashed=true
reproducing took 1h26m53.181113184s
repro crashed as (corrupted=true):
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	0-...!: (10501 ticks this GP) idle=196c/1/0x4000000000000000 softirq=17263/17266 fqs=41
rcu: 	(t=10502 jiffies g=17105 q=12 ncpus=2)
rcu: rcu_preempt kthread timer wakeup didn't happen for 10420 jiffies! g17105 f0x0 RCU_GP_WAIT_FQS(5) ->state=I
rcu: 	Possible timer handling issue on cpu=1 timer-softirq=4133
rcu: rcu_preempt kthread starved for 10423 jiffies! g17105 f0x0 RCU_GP_WAIT_FQS(5) ->state=I ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:I stack:27496 pid:17    tgid:17    ppid:2      task_flags:0x208040 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5533 [inline]
 __schedule+0x17db/0x58f0 kernel/sched/core.c:7284
 __schedule_loop kernel/sched/core.c:7361 [inline]
 schedule+0x164/0x2b0 kernel/sched/core.c:7376
 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2122
 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2330
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 6275 Comm: syz.0.167 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64
Code: 7b 8a 02 e9 c3 08 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 75 21 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
RSP: 0018:ffffc90003e67968 EFLAGS: 000002d3
RAX: ffffffff81774e2c RBX: 0000000000000003 RCX: ffff88802b623e80
RDX: 0000000000000000 RSI: ffffffff8e45971b RDI: ffffffff8c6dd880
RBP: 0000000000000003 R08: ffffffff9179b37f R09: 1ffffffff22f366f
R10: dffffc0000000000 R11: fffffbfff22f3670 R12: 0000000000000200
R13: 0000000000000000 R14: ffff88802bea5190 R15: dffffc0000000000
FS:  0000555585e7e500(0000) GS:ffff888123bd0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f199ebeb8c0 CR3: 0000000072992000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 arch_safe_halt arch/x86/include/asm/paravirt.h:62 [inline]
 kvm_wait+0x111/0x160 arch/x86/kernel/kvm.c:1098
 pv_wait arch/x86/include/asm/paravirt-spinlock.h:88 [inline]
 pv_wait_head_or_lock kernel/locking/qspinlock_paravirt.h:466 [inline]
 __pv_queued_spin_lock_slowpath+0x74a/0xbc0 kernel/locking/qspinlock.c:347
 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt-spinlock.h:37 [inline]
 queued_spin_lock_slowpath arch/x86/include/asm/paravirt-spinlock.h:71 [inline]
 queued_spin_lock include/asm-generic/qspinlock.h:115 [inline]
 do_raw_spin_lock+0x26c/0x2f0 kernel/locking/spinlock_debug.c:116
 spin_lock_bh include/linux/spinlock.h:353 [inline]
 lock_sock_nested+0x6a/0x100 net/core/sock.c:3898
 lock_sock include/net/sock.h:1715 [inline]
 tipc_release+0xc4/0x24d0 net/tipc/socket.c:639
 __sock_release+0xa0/0x1f0 net/socket.c:735
 sock_close+0x1c/0x30 net/socket.c:1529
 __fput+0x418/0xa50 fs/file_table.c:512
 task_work_run+0x1d9/0x270 kernel/task_work.c:233
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 __exit_to_user_mode_loop kernel/entry/common.c:70 [inline]
 exit_to_user_mode_loop+0x204/0x770 kernel/entry/common.c:101
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:343 [inline]
 do_syscall_64+0x328/0x520 arch/x86/entry/syscall_64.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f199eb9e1d9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc347c07d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00007f199ee27da0 RCX: 00007f199eb9e1d9
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 00007f199ee27da0 R08: 0000000000000006 R09: 0000000000000000
R10: 00007f199ee27cb0 R11: 0000000000000246 R12: 000000000001eee4
R13: 00007f199ee2609c R14: 000000000001ebd7 R15: 00007f199ee26090
 </TASK>
CPU: 0 UID: 0 PID: 6276 Comm: syz.0.167 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
RIP: 0010:__rcu_read_lock+0x0/0x60 kernel/rcu/tree_plugin.h:413
Code: 0f 8c 53 fd ff ff 4c 89 ff e8 ac a0 8b 00 e9 46 fd ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 53 65 48 8b 1d ab a0 e7 12 48 81 c3 c4 04 00 00 48 89
RSP: 0018:ffffc9000310e4f8 EFLAGS: 00000287
RAX: ffff888033124000 RBX: ffff88807c5b27c0 RCX: 0000000000000201
RDX: 0000000000000002 RSI: ffffffff8e45971b RDI: ffffffff8c6dd880
RBP: ffffc9000310e5f0 R08: ffffffff9179b37f R09: 1ffffffff22f366f
R10: dffffc0000000000 R11: fffffbfff22f3670 R12: ffffc9000310eb60
R13: dffffc0000000000 R14: 00000000d5274640 R15: ffff888033124000
FS:  00007f199fa0e6c0(0000) GS:ffff888123ad0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000000040 CR3: 0000000072992000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 rcu_read_lock include/linux/rcupdate.h:847 [inline]
 tipc_sk_lookup+0xae/0x920 net/tipc/socket.c:3004
 tipc_sk_rcv+0x3f8/0x2b50 net/tipc/socket.c:2497
 tipc_node_xmit+0x205/0xf10 net/tipc/node.c:1708
 tipc_node_xmit_skb net/tipc/node.c:1773 [inline]
 tipc_node_distr_xmit+0x2cd/0x400 net/tipc/node.c:1788
 tipc_sk_rcv+0x2539/0x2b50 net/tipc/socket.c:2506
 tipc_node_xmit+0x205/0xf10 net/tipc/node.c:1708
 tipc_sk_push_backlog net/tipc/socket.c:1314 [inline]
 tipc_sk_filter_connect net/tipc/socket.c:2260 [inline]
 tipc_sk_filter_rcv+0x17f3/0x3210 net/tipc/socket.c:2369
 tipc_sk_enqueue net/tipc/socket.c:2450 [inline]
 tipc_sk_rcv+0x877/0x2b50 net/tipc/socket.c:2502
 tipc_node_xmit+0x205/0xf10 net/tipc/node.c:1708
 tipc_node_xmit_skb net/tipc/node.c:1773 [inline]
 tipc_node_distr_xmit+0x2cd/0x400 net/tipc/node.c:1788
 tipc_sk_backlog_rcv+0x1ad/0x270 net/tipc/socket.c:2417
 sk_backlog_rcv include/net/sock.h:1192 [inline]
 __release_sock+0x28b/0x390 net/core/sock.c:3312
 release_sock+0x190/0x260 net/core/sock.c:3911
 sockopt_release_sock net/core/sock.c:1163 [inline]
 sk_setsockopt+0x288e/0x2f20 net/core/sock.c:1681
 do_sock_setsockopt+0x11b/0x1b0 net/socket.c:2395
 __sys_setsockopt net/socket.c:2424 [inline]
 __do_sys_setsockopt net/socket.c:2430 [inline]
 __se_sys_setsockopt net/socket.c:2427 [inline]
 __x64_sys_setsockopt+0x13d/0x1b0 net/socket.c:2427
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f199eb9e1d9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f199fa0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00007f199ee25fa0 RCX: 00007f199eb9e1d9
RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003
RBP: 00007f199ec35888 R08: 0000000000000004 R09: 0000000000000000
R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f199ee26038 R14: 00007f199ee25fa0 R15: 00007ffc347c0678
 </TASK>

report is corrupted, running repro again
testing compiled C program (duration=5m8.107003722s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-setsockopt$sock_attach_bpf-sendmsg$tipc
program crashed: INFO: rcu detected stall in corrupted
report is corrupted, running repro again
testing compiled C program (duration=5m8.107003722s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-setsockopt$sock_attach_bpf-sendmsg$tipc
program crashed: INFO: rcu detected stall in corrupted
report is corrupted, running repro again
testing compiled C program (duration=5m8.107003722s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$tipc-setsockopt$sock_attach_bpf-sendmsg$tipc
program crashed: INFO: rcu detected stall in corrupted
final repro crashed as (corrupted=true):
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	0-...!: (1 GPs behind) idle=4684/1/0x4000000000000000 softirq=13826/13834 fqs=0
rcu: 	(t=10502 jiffies g=12969 q=10 ncpus=2)
rcu: rcu_preempt kthread timer wakeup didn't happen for 10502 jiffies! g12969 f0x0 RCU_GP_WAIT_FQS(5) ->state=I
rcu: 	Possible timer handling issue on cpu=1 timer-softirq=2643
rcu: rcu_preempt kthread starved for 10505 jiffies! g12969 f0x0 RCU_GP_WAIT_FQS(5) ->state=I ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:I stack:28104 pid:17    tgid:17    ppid:2      task_flags:0x208040 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5533 [inline]
 __schedule+0x17db/0x58f0 kernel/sched/core.c:7284
 __schedule_loop kernel/sched/core.c:7361 [inline]
 schedule+0x164/0x2b0 kernel/sched/core.c:7376
 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2122
 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2330
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 7705 Comm: syz-executor606 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64
Code: 7b 8a 02 e9 c3 08 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 75 21 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
RSP: 0018:ffffc900041ff768 EFLAGS: 000002d3
RAX: ffffffff81774e2c RBX: 0000000000000003 RCX: ffff888020ad5dc0
RDX: 0000000000000000 RSI: ffffffff8e45971b RDI: ffffffff8c6dd880
RBP: 0000000000000003 R08: ffffffff9179b37f R09: 1ffffffff22f366f
R10: dffffc0000000000 R11: fffffbfff22f3670 R12: 0000000000000200
R13: 0000000000000000 R14: ffff88807a822610 R15: dffffc0000000000
FS:  00007faaca1b76c0(0000) GS:ffff888123bd0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007faaca1b6ff8 CR3: 000000007e740000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 arch_safe_halt arch/x86/include/asm/paravirt.h:62 [inline]
 kvm_wait+0x111/0x160 arch/x86/kernel/kvm.c:1098
 pv_wait arch/x86/include/asm/paravirt-spinlock.h:88 [inline]
 pv_wait_head_or_lock kernel/locking/qspinlock_paravirt.h:466 [inline]
 __pv_queued_spin_lock_slowpath+0x74a/0xbc0 kernel/locking/qspinlock.c:347
 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt-spinlock.h:37 [inline]
 queued_spin_lock_slowpath arch/x86/include/asm/paravirt-spinlock.h:71 [inline]
 queued_spin_lock include/asm-generic/qspinlock.h:115 [inline]
 do_raw_spin_lock+0x26c/0x2f0 kernel/locking/spinlock_debug.c:116
 spin_lock_bh include/linux/spinlock.h:353 [inline]
 lock_sock_nested+0x6a/0x100 net/core/sock.c:3898
 lock_sock include/net/sock.h:1715 [inline]
 tipc_sendstream+0x47/0x70 net/tipc/socket.c:1550
 sock_sendmsg_nosec+0x14e/0x190 net/socket.c:800
 __sock_sendmsg net/socket.c:818 [inline]
 ____sys_sendmsg+0x54e/0x850 net/socket.c:2715
 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2769
 __sys_sendmsg net/socket.c:2801 [inline]
 __do_sys_sendmsg net/socket.c:2806 [inline]
 __se_sys_sendmsg net/socket.c:2804 [inline]
 __x64_sys_sendmsg+0x1b1/0x290 net/socket.c:2804
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7faaca200029
Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007faaca1b71d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007faaca200029
RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004
RBP: 00007faaca2b0b58 R08: 37203a6b63617473 R09: 37203a6b63617473
R10: 37203a6b63617473 R11: 0000000000000246 R12: 00002000000001c0
R13: 00007faaca2b0b50 R14: 00007faaca2b0b5c R15: 0000200000000044
 </TASK>
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.191 msecs
CPU: 0 UID: 0 PID: 7704 Comm: syz-executor606 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
RIP: 0010:__rhashtable_lookup include/linux/rhashtable.h:-1 [inline]
RIP: 0010:rhashtable_lookup include/linux/rhashtable.h:672 [inline]
RIP: 0010:tipc_sk_lookup+0x2af/0x920 net/tipc/socket.c:3005
Code: 37 f5 41 f6 45 85 e4 0f 85 b7 03 00 00 e8 29 f0 41 f6 89 d8 48 8b 0c 24 48 8d 1c c1 48 81 c3 80 00 00 00 48 89 d8 48 83 c8 01 <48> 89 44 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 48 48 89 5c 24 40
RSP: 0018:ffffc9000429e500 EFLAGS: 00000286
RAX: ffff8880331aa209 RBX: ffff8880331aa208 RCX: ffff8880331aa000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000429e5f0 R08: ffff88807abe8000 R09: 0000000000000004
R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000
R13: dffffc0000000000 R14: 1ffff11006645a29 R15: ffff8880331aa000
FS:  00007faaca1d86c0(0000) GS:ffff888123ad0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007faaca1b7d58 CR3: 000000007e740000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 tipc_sk_rcv+0x3f8/0x2b50 net/tipc/socket.c:2497
 tipc_node_xmit+0x205/0xf10 net/tipc/node.c:1708
 tipc_node_xmit_skb net/tipc/node.c:1773 [inline]
 tipc_node_distr_xmit+0x2cd/0x400 net/tipc/node.c:1788
 tipc_sk_rcv+0x2539/0x2b50 net/tipc/socket.c:2506
 tipc_node_xmit+0x205/0xf10 net/tipc/node.c:1708
 tipc_sk_push_backlog net/tipc/socket.c:1314 [inline]
 tipc_sk_filter_connect net/tipc/socket.c:2260 [inline]
 tipc_sk_filter_rcv+0x17f3/0x3210 net/tipc/socket.c:2369
 tipc_sk_enqueue net/tipc/socket.c:2450 [inline]
 tipc_sk_rcv+0x877/0x2b50 net/tipc/socket.c:2502
 tipc_node_xmit+0x205/0xf10 net/tipc/node.c:1708
 tipc_node_xmit_skb net/tipc/node.c:1773 [inline]
 tipc_node_distr_xmit+0x2cd/0x400 net/tipc/node.c:1788
 tipc_sk_backlog_rcv+0x1ad/0x270 net/tipc/socket.c:2417
 sk_backlog_rcv include/net/sock.h:1192 [inline]
 __release_sock+0x28b/0x390 net/core/sock.c:3312
 release_sock+0x190/0x260 net/core/sock.c:3911
 sockopt_release_sock net/core/sock.c:1163 [inline]
 sk_setsockopt+0x288e/0x2f20 net/core/sock.c:1681
 do_sock_setsockopt+0x11b/0x1b0 net/socket.c:2395
 __sys_setsockopt net/socket.c:2424 [inline]
 __do_sys_setsockopt net/socket.c:2430 [inline]
 __se_sys_setsockopt net/socket.c:2427 [inline]
 __x64_sys_setsockopt+0x13d/0x1b0 net/socket.c:2427
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7faaca200029
Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007faaca1d81d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00007faaca1d8cdc RCX: 00007faaca200029
RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000003
RBP: 00007faaca2b0b48 R08: 0000000000000004 R09: 37203a6b63617473
R10: 0000200000000180 R11: 0000000000000246 R12: 00002000000001c0
R13: 00007faaca2b0b40 R14: 00007faaca2b0b4c R15: 0000200000000044
 </TASK>