Extracting prog: 11m25.306179734s
Minimizing prog: 59m11.537778982s
Simplifying prog options: 0s
Extracting C: 2m32.078169012s
Simplifying C: 54m6.768530095s


extracting reproducer from 52 programs
testing a last program of every proc
single: executing 14 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-mremap-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000440)='./tracing\x00', &(0x7f0000000480)='tracefs\x00', 0xc440, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./tracing/uprobe_events\x00', 0x1, 0x0)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
write(r0, &(0x7f0000000000)='p:p', 0x3)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SET_TAGGED_ADDR_CTRL-mkdirat-mount-openat-write$vga_arbiter
detailed listing:
executing program 0:
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./trace\x00', &(0x7f00000004c0)='tracefs\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000033c0)='./trace/set_event\x00', 0x2, 0x0)
write$vga_arbiter(r0, &(0x7f0000003700)=ANY=[@ANYBLOB='lock'], 0xa)

program crashed: INFO: rcu detected stall in corrupted
single: successfully extracted reproducer
found reproducer with 5 syscalls
minimizing guilty program
testing program (duration=5m30.310436758s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SET_TAGGED_ADDR_CTRL-mkdirat-mount-openat
detailed listing:
executing program 0:
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./trace\x00', &(0x7f00000004c0)='tracefs\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000033c0)='./trace/set_event\x00', 0x2, 0x0)

program did not crash
testing program (duration=5m30.310436758s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SET_TAGGED_ADDR_CTRL-mkdirat-mount-write$vga_arbiter
detailed listing:
executing program 0:
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./trace\x00', &(0x7f00000004c0)='tracefs\x00', 0x2, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000003700)=ANY=[@ANYBLOB='lock'], 0xa)

program did not crash
testing program (duration=5m30.310436758s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SET_TAGGED_ADDR_CTRL-mkdirat-openat-write$vga_arbiter
detailed listing:
executing program 0:
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000033c0)='./trace/set_event\x00', 0x2, 0x0)
write$vga_arbiter(r0, &(0x7f0000003700)=ANY=[@ANYBLOB='lock'], 0xa)

program did not crash
testing program (duration=5m30.310436758s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SET_TAGGED_ADDR_CTRL-mount-openat-write$vga_arbiter
detailed listing:
executing program 0:
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
mount(0x0, &(0x7f0000000240)='./trace\x00', &(0x7f00000004c0)='tracefs\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000033c0)='./trace/set_event\x00', 0x2, 0x0)
write$vga_arbiter(r0, &(0x7f0000003700)=ANY=[@ANYBLOB='lock'], 0xa)

program did not crash
testing program (duration=5m30.310436758s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./trace\x00', &(0x7f00000004c0)='tracefs\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000033c0)='./trace/set_event\x00', 0x2, 0x0)
write$vga_arbiter(r0, &(0x7f0000003700)=ANY=[@ANYBLOB='lock'], 0xa)

program crashed: INFO: rcu detected stall in corrupted
testing program (duration=5m30.310436758s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000240)='./trace\x00', &(0x7f00000004c0)='tracefs\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000033c0)='./trace/set_event\x00', 0x2, 0x0)
write$vga_arbiter(r0, &(0x7f0000003700)=ANY=[@ANYBLOB='lock'], 0xa)

program did not crash
testing program (duration=5m30.310436758s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000004c0)='tracefs\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000033c0)='./trace/set_event\x00', 0x2, 0x0)
write$vga_arbiter(r0, &(0x7f0000003700)=ANY=[@ANYBLOB='lock'], 0xa)

program did not crash
testing program (duration=5m30.310436758s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./trace\x00', 0x0, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000033c0)='./trace/set_event\x00', 0x2, 0x0)
write$vga_arbiter(r0, &(0x7f0000003700)=ANY=[@ANYBLOB='lock'], 0xa)

program did not crash
testing program (duration=5m30.310436758s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./trace\x00', &(0x7f00000004c0)='tracefs\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$vga_arbiter(r0, &(0x7f0000003700)=ANY=[@ANYBLOB='lock'], 0xa)

program did not crash
testing program (duration=5m30.310436758s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./trace\x00', &(0x7f00000004c0)='tracefs\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000033c0)='./trace/set_event\x00', 0x2, 0x0)
write$vga_arbiter(r0, 0x0, 0xa)

program did not crash
testing program (duration=5m30.310436758s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./trace\x00', &(0x7f00000004c0)='tracefs\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000033c0)='./trace/set_event\x00', 0x2, 0x0)
write$vga_arbiter(r0, &(0x7f0000003700)=ANY=[@ANYBLOB], 0xa)

program did not crash
extracting C reproducer
testing compiled C program (duration=5m30.310436758s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
program crashed: INFO: rcu detected stall in corrupted
simplifying C reproducer
testing compiled C program (duration=5m30.310436758s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
program crashed: INFO: rcu detected stall in corrupted
testing compiled C program (duration=5m30.310436758s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=5m30.310436758s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=5m30.310436758s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
program crashed: INFO: task hung in addrconf_dad_work
a never seen crash title: INFO: task hung in addrconf_dad_work, ignore
testing compiled C program (duration=5m30.310436758s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
program crashed: INFO: task hung in hci_conn_failed
a never seen crash title: INFO: task hung in hci_conn_failed, ignore
testing compiled C program (duration=5m30.310436758s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
program crashed: INFO: rcu detected stall in corrupted
testing compiled C program (duration=5m30.310436758s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
program crashed: INFO: rcu detected stall in corrupted
testing compiled C program (duration=5m30.310436758s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
program crashed: INFO: rcu detected stall in corrupted
testing compiled C program (duration=5m30.310436758s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
program crashed: INFO: rcu detected stall in corrupted
testing compiled C program (duration=5m30.310436758s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
program crashed: INFO: rcu detected stall in corrupted
testing compiled C program (duration=5m30.310436758s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=5m30.310436758s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
program did not crash
testing compiled C program (duration=5m30.310436758s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
program crashed: INFO: rcu detected stall in corrupted
testing compiled C program (duration=5m30.310436758s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
program crashed: INFO: rcu detected stall in corrupted
testing compiled C program (duration=5m30.310436758s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
program crashed: INFO: rcu detected stall in corrupted
testing compiled C program (duration=5m30.310436758s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
program crashed: INFO: rcu detected stall in corrupted
testing program (duration=5m30.310436758s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./trace\x00', &(0x7f00000004c0)='tracefs\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000033c0)='./trace/set_event\x00', 0x2, 0x0)
write$vga_arbiter(r0, &(0x7f0000003700)=ANY=[@ANYBLOB='lock'], 0xa)

program crashed: INFO: rcu detected stall in corrupted
validation run: crashed=true
testing program (duration=5m30.310436758s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./trace\x00', &(0x7f00000004c0)='tracefs\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000033c0)='./trace/set_event\x00', 0x2, 0x0)
write$vga_arbiter(r0, &(0x7f0000003700)=ANY=[@ANYBLOB='lock'], 0xa)

program crashed: INFO: rcu detected stall in corrupted
validation run: crashed=true
testing program (duration=5m30.310436758s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./trace\x00', &(0x7f00000004c0)='tracefs\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000033c0)='./trace/set_event\x00', 0x2, 0x0)
write$vga_arbiter(r0, &(0x7f0000003700)=ANY=[@ANYBLOB='lock'], 0xa)

program crashed: INFO: rcu detected stall in corrupted
validation run: crashed=true
reproducing took 2h16m17.051891775s
repro crashed as (corrupted=true):
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	1-....: (1 GPs behind) idle=761c/1/0x4000000000000000 softirq=0/0 fqs=2522 rcuc=10695 jiffies(starved)
rcu: 	         hardirqs   softirqs   csw/system
rcu: 	 number:    25144       4687        20880
rcu: 	cputime:     2701      18932        31080   ==> 52470(ms)
rcu: 	(t=10500 jiffies g=16545 q=1575 ncpus=2)
CPU: 1 UID: 0 PID: 159 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
Workqueue: events_unbound nsim_dev_trap_report_work
RIP: 0010:finish_task_switch+0x413/0xc60 kernel/sched/core.c:5434
Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 d7 d2 cb 09 e8 52 7d 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 00 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
RSP: 0000:ffffc9000411f520 EFLAGS: 00000202
RAX: 000000000001ad15 RBX: ffff8880b853d420 RCX: 8000000000000001
RDX: 0000000000000006 RSI: ffffffff8dac5e53 RDI: ffffffff8bec8f80
RBP: ffffc9000411f570 R08: ffffffff90d254bf R09: 1ffffffff21a4a97
R10: dffffc0000000000 R11: fffffbfff21a4a98 R12: ffff8880213bbe80
R13: ffff8880b853d3f8 R14: dffffc0000000000 R15: 1ffff110170a7a84
FS:  0000000000000000(0000) GS:ffff8881248a5000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fad5b427010 CR3: 00000000265c0000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5586 [inline]
 __schedule+0x1725/0x56e0 kernel/sched/core.c:7382
 preempt_schedule_common+0x7f/0xd0 kernel/sched/core.c:7561
 preempt_schedule_thunk+0x16/0x40 arch/x86/entry/thunk.S:12
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:211 [inline]
 _raw_spin_unlock_irqrestore+0x76/0x80 kernel/locking/spinlock.c:221
 unlock_rt_mutex_safe kernel/locking/rtmutex.c:350 [inline]
 rt_mutex_slowunlock+0x4ee/0xa30 kernel/locking/rtmutex.c:1467
 rt_spin_unlock+0x10f/0x200 kernel/locking/spinlock_rt.c:84
 spin_unlock include/linux/spinlock_rt.h:115 [inline]
 alloc_from_pcs mm/slub.c:4872 [inline]
 slab_alloc_node mm/slub.c:4984 [inline]
 __do_kmalloc_node mm/slub.c:5413 [inline]
 __kmalloc_node_track_caller_noprof+0x398/0x7b0 mm/slub.c:5545
 kmalloc_reserve net/core/skbuff.c:637 [inline]
 __alloc_skb+0x2c1/0x7a0 net/core/skbuff.c:715
 alloc_skb include/linux/skbuff.h:1384 [inline]
 nsim_dev_trap_skb_build drivers/net/netdevsim/dev.c:744 [inline]
 nsim_dev_trap_report drivers/net/netdevsim/dev.c:801 [inline]
 nsim_dev_trap_report_work+0x2b1/0xca0 drivers/net/netdevsim/dev.c:847
 process_one_work kernel/workqueue.c:3396 [inline]
 process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560
 kthread+0x38b/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

report is corrupted, running repro again
testing compiled C program (duration=5m30.310436758s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
program crashed: INFO: rcu detected stall in corrupted
report is corrupted, running repro again
testing compiled C program (duration=5m30.310436758s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
program crashed: INFO: rcu detected stall in corrupted
report is corrupted, running repro again
testing compiled C program (duration=5m30.310436758s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write$vga_arbiter
program crashed: INFO: rcu detected stall in ieee80211_handle_queued_frames
final repro crashed as (corrupted=false):
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P15/4:b..l..
rcu: 	(detected by 1, t=10502 jiffies, g=11865, q=2785 ncpus=2)
task:ksoftirqd/0     state:R  running task     stack:22488 pid:15    tgid:15    ppid:2      task_flags:0x4208040 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5583 [inline]
 __schedule+0x171d/0x56e0 kernel/sched/core.c:7382
 preempt_schedule_irq+0x4b/0x90 kernel/sched/core.c:7662
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:543 [inline]
 irqentry_exit+0x14f/0x9b0 kernel/entry/common.c:154
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:lock_acquire+0x232/0x350 kernel/locking/lockdep.c:5947
Code: ff ff ff e8 00 12 bc 09 f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e2 0b 26 12 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 3f e9 bf 09 cc 48 8d 3d 47 b9 33
RSP: 0018:ffffc90000146820 EFLAGS: 00000292
RAX: ca9a6b3334b5cc00 RBX: 0000000000000000 RCX: 0000000000000046
RDX: 000000006999713b RSI: ffffffff8dd3962a RDI: ffffffff8bec8f80
RBP: ffff88801de81f40 R08: ffffffff8178297f R09: 0000000000000000
R10: dffffc0000000000 R11: ffffed1027fc6423 R12: ffffffff8f3bfdc0
R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
 rcu_lock_acquire include/linux/rcupdate.h:309 [inline]
 rcu_read_lock include/linux/rcupdate.h:849 [inline]
 class_rcu_constructor include/linux/rcupdate.h:1216 [inline]
 unwind_next_frame+0xac/0x2550 arch/x86/kernel/unwind_orc.c:495
 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:409 [inline]
 __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:426
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __do_kmalloc_node mm/slub.c:5414 [inline]
 __kmalloc_noprof+0x418/0x790 mm/slub.c:5439
 _kmalloc_noprof include/linux/slab.h:995 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 ieee802_11_parse_elems_full+0x14b/0x2de0 net/mac80211/parse.c:1071
 ieee802_11_parse_elems net/mac80211/ieee80211_i.h:2548 [inline]
 ieee80211_inform_bss+0x163/0x10d0 net/mac80211/scan.c:79
 rdev_inform_bss net/wireless/rdev-ops.h:418 [inline]
 cfg80211_inform_single_bss_data+0xd98/0x1bf0 net/wireless/scan.c:2446
 cfg80211_inform_bss_data+0x263/0x3cc0 net/wireless/scan.c:3302
 cfg80211_inform_bss_frame_data+0x3c7/0x840 net/wireless/scan.c:3394
 ieee80211_bss_info_update+0x791/0xa50 net/mac80211/scan.c:230
 ieee80211_scan_rx+0x552/0xa40 net/mac80211/scan.c:364
 __ieee80211_rx_handle_packet net/mac80211/rx.c:5433 [inline]
 ieee80211_rx_list+0x2d23/0x3b40 net/mac80211/rx.c:5726
 ieee80211_rx_napi+0x1ad/0x3d0 net/mac80211/rx.c:5749
 ieee80211_rx include/net/mac80211.h:5449 [inline]
 ieee80211_handle_queued_frames+0xe4/0x1d0 net/mac80211/main.c:452
 tasklet_action_common+0x31c/0x600 kernel/softirq.c:995
 handle_softirqs+0x1d4/0x6c0 kernel/softirq.c:669
 run_ksoftirqd+0x53/0x190 kernel/softirq.c:1133
 smpboot_thread_fn+0x5f8/0xb30 kernel/smpboot.c:162
 kthread+0x38b/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>