Extracting prog: 7m46.865240713s Minimizing prog: 24m48.329007213s Simplifying prog options: 0s Extracting C: 1m39.764395415s Simplifying C: 9m21.360365287s 12 programs, timeouts [45s 5m0s 16m0s] extracting reproducer from 12 programs single: executing 2 programs separately with timeout 45s testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT detailed listing: executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0x8004b706, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$BPF_GET_MAP_INFO-bpf$PROG_LOAD_XDP detailed listing: executing program 0: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000002140)=""/4128, 0x4}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f3fd65bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e208000000729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e7095d6744756e17ece06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b53c3fca5206cb000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 12 programs with base timeout 45s testing program (duration=48s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 5, 6, 2, 5, 5, 6, 9, 4, 20, 2, 2] detailed listing: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) executing program 1: openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x2f}, @routing]}}}}}}}, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d260100000000000080abc5977b119095a6ad8338f1511cdd18c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbd004c23e1b76e90b3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) executing program 1: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a9f15000000000109022d00010000000009040000050300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x4a141) syz_usb_control_io(r0, 0x0, 0x0) write$hidraw(r1, &(0x7f0000000180)=',#', 0x4000) executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0xfffffffb}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'batadv_slave_1\x00', @random='\x00\x00\x00 \x00'}) executing program 1: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000002140)=""/4128, 0x4}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a9f15000000000109022d00010000000009040000050300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x18, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x4a141) syz_usb_control_io(r0, 0x0, 0x0) write$hidraw(r1, &(0x7f0000000180)=',#', 0x4000) executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r1}) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000200095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8}]}}}]}, 0x3c}}, 0x0) executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote, @private0, @ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6060000, r4}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={@dev, @remote, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r2}) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000640)={@loopback, @local, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r7}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000080)={@mcast2, @ipv4, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r10}) r11 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r13, 0x890b, &(0x7f0000000640)={@loopback, @local, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r12}) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f0000000140)={'batadv_slave_0\x00'}) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xe09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8}, @IFLA_GRE_FLOWINFO={0x8}]}}}]}, 0x44}}, 0x0) executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0x8004b706, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 2 programs separately with timeout 5m0s testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT detailed listing: executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0x8004b706, 0x0) program crashed: WARNING in rcu_note_context_switch single: successfully extracted reproducer found reproducer with 2 syscalls minimizing guilty program testing program (duration=7m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace detailed listing: executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') program did not crash testing program (duration=7m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$NS_GET_PARENT detailed listing: executing program 0: ioctl$NS_GET_PARENT(0xffffffffffffffff, 0x8004b706, 0x0) program did not crash testing program (duration=7m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT detailed listing: executing program 0: r0 = syz_open_procfs$namespace(0x0, 0x0) ioctl$NS_GET_PARENT(r0, 0x8004b706, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=7m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT program crashed: WARNING in rcu_note_context_switch simplifying C reproducer testing compiled C program (duration=7m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT program crashed: WARNING in rcu_note_context_switch testing compiled C program (duration=7m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT program crashed: WARNING in rcu_note_context_switch testing compiled C program (duration=7m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT program crashed: WARNING in rcu_note_context_switch testing compiled C program (duration=7m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT program crashed: WARNING in rcu_note_context_switch testing compiled C program (duration=7m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT program crashed: WARNING in rcu_note_context_switch testing compiled C program (duration=7m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT program crashed: WARNING in rcu_note_context_switch reproducing took 43m36.319072628s repro crashed as (corrupted=false): ------------[ cut here ]------------ WARNING: CPU: 0 PID: 3020 at kernel/rcu/tree_plugin.h:330 rcu_note_context_switch+0x4a8/0x7ac kernel/rcu/tree_plugin.h:330 Voluntary context switch within RCU read-side critical section! Modules linked in: Kernel panic - not syncing: kernel: panic_on_warn set ... CPU: 0 PID: 3020 Comm: syz-executor137 Not tainted 6.10.0-syzkaller #0 Hardware name: ARM-Versatile Express Call trace: [<818e5120>] (dump_backtrace) from [<818e521c>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:00000000 r6:82622804 r5:00000000 r4:81fe5eac [<818e5204>] (show_stack) from [<81902954>] (__dump_stack lib/dump_stack.c:88 [inline]) [<818e5204>] (show_stack) from [<81902954>] (dump_stack_lvl+0x54/0x7c lib/dump_stack.c:114) [<81902900>] (dump_stack_lvl) from [<81902994>] (dump_stack+0x18/0x1c lib/dump_stack.c:123) r5:00000000 r4:82861d0c [<8190297c>] (dump_stack) from [<818e5cc4>] (panic+0x120/0x358 kernel/panic.c:347) [<818e5ba4>] (panic) from [<80241f54>] (check_panic_on_warn kernel/panic.c:240 [inline]) [<818e5ba4>] (panic) from [<80241f54>] (print_tainted+0x0/0xa0 kernel/panic.c:235) r3:8260c5c4 r2:00000001 r1:81fcefd4 r0:81fd665c r7:802df37c [<80241ee0>] (check_panic_on_warn) from [<80242148>] (__warn+0x7c/0x180 kernel/panic.c:693) [<802420cc>] (__warn) from [<80242434>] (warn_slowpath_fmt+0x1e8/0x1f4 kernel/panic.c:726) r8:00000009 r7:81fdf5e4 r6:df999c64 r5:83e9ec00 r4:00000000 [<80242250>] (warn_slowpath_fmt) from [<802df37c>] (rcu_note_context_switch+0x4a8/0x7ac kernel/rcu/tree_plugin.h:330) r10:df999dbc r9:81fe0580 r8:82604ec0 r7:8285208c r6:00000000 r5:83e9ec00 r4:dddd0c80 [<802deed4>] (rcu_note_context_switch) from [<81906a1c>] (__schedule+0xb0/0xb6c kernel/sched/core.c:6417) r10:df999dbc r9:8260582c r8:82604ec0 r7:824b5340 r6:83e9ec00 r5:dddd0340 r4:00000000 [<8190696c>] (__schedule) from [<81907504>] (__schedule_loop kernel/sched/core.c:6606 [inline]) [<8190696c>] (__schedule) from [<81907504>] (schedule+0x2c/0xfc kernel/sched/core.c:6621) r10:df999dbc r9:8260582c r8:82604ec0 r7:00000100 r6:00000000 r5:00000000 r4:83e9ec00 [<819074d8>] (schedule) from [<8190760c>] (io_schedule+0x38/0x48 kernel/sched/core.c:7401) r5:00000000 r4:83e9ec00 [<819075d4>] (io_schedule) from [<804316d0>] (folio_wait_bit_common+0x190/0x3a8 mm/filemap.c:1307) r5:83e9ec00 r4:00000102 [<80431540>] (folio_wait_bit_common) from [<8043554c>] (__folio_lock_killable mm/filemap.c:1652 [inline]) [<80431540>] (folio_wait_bit_common) from [<8043554c>] (lock_folio_maybe_drop_mmap mm/filemap.c:3090 [inline]) [<80431540>] (folio_wait_bit_common) from [<8043554c>] (filemap_fault+0x464/0xcd4 mm/filemap.c:3335) r10:00000000 r9:82eb0480 r8:00000022 r7:83196440 r6:df999eb8 r5:def78c00 r4:83196338 [<804350e8>] (filemap_fault) from [<8048292c>] (__do_fault+0x44/0xfc mm/memory.c:4556) r10:df999fb0 r9:84265800 r8:83e07ae0 r7:00000040 r6:00032c00 r5:83e07ae0 r4:df999eb8 [<804828e8>] (__do_fault) from [<80488440>] (do_read_fault mm/memory.c:4921 [inline]) [<804828e8>] (__do_fault) from [<80488440>] (do_fault mm/memory.c:5051 [inline]) [<804828e8>] (__do_fault) from [<80488440>] (do_pte_missing mm/memory.c:3897 [inline]) [<804828e8>] (__do_fault) from [<80488440>] (handle_pte_fault mm/memory.c:5381 [inline]) [<804828e8>] (__do_fault) from [<80488440>] (__handle_mm_fault mm/memory.c:5524 [inline]) [<804828e8>] (__do_fault) from [<80488440>] (handle_mm_fault+0xbf0/0x12fc mm/memory.c:5689) r7:00000040 r6:00032c00 r5:83e9ec00 r4:00001254 [<80487850>] (handle_mm_fault) from [<80214270>] (do_page_fault+0x1c8/0x3d8 arch/arm/mm/fault.c:328) r10:00000004 r9:84265800 r8:00000254 r7:83e9ec00 r6:80000207 r5:00032c00 r4:df999fb0 [<802140a8>] (do_page_fault) from [<80214710>] (do_PrefetchAbort+0x38/0x90 arch/arm/mm/fault.c:626) r10:000f4240 r9:00002710 r8:802140a8 r7:df999fb0 r6:00032c00 r5:00000207 r4:8261ca84 [<802146d8>] (do_PrefetchAbort) from [<80201070>] (ret_from_exception+0x0/0x10 arch/arm/kernel/entry-armv.S:473) Exception stack(0xdf999fb0 to 0xdf999ff8) 9fa0: fffffffd 8004b706 00000000 00000000 9fc0: 7e8f4c18 00000000 00000000 00000000 7e8f4c0c 00002710 000f4240 00000000 9fe0: 7e8f4bf8 7e8f4bf8 00010648 00032c00 20000010 ffffffff r8:824aa044 r7:83e9ec00 r6:ffffffff r5:20000010 r4:00032c00 Rebooting in 86400 seconds.. final repro crashed as (corrupted=false): ------------[ cut here ]------------ WARNING: CPU: 0 PID: 3020 at kernel/rcu/tree_plugin.h:330 rcu_note_context_switch+0x4a8/0x7ac kernel/rcu/tree_plugin.h:330 Voluntary context switch within RCU read-side critical section! Modules linked in: Kernel panic - not syncing: kernel: panic_on_warn set ... CPU: 0 PID: 3020 Comm: syz-executor137 Not tainted 6.10.0-syzkaller #0 Hardware name: ARM-Versatile Express Call trace: [<818e5120>] (dump_backtrace) from [<818e521c>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257) r7:00000000 r6:82622804 r5:00000000 r4:81fe5eac [<818e5204>] (show_stack) from [<81902954>] (__dump_stack lib/dump_stack.c:88 [inline]) [<818e5204>] (show_stack) from [<81902954>] (dump_stack_lvl+0x54/0x7c lib/dump_stack.c:114) [<81902900>] (dump_stack_lvl) from [<81902994>] (dump_stack+0x18/0x1c lib/dump_stack.c:123) r5:00000000 r4:82861d0c [<8190297c>] (dump_stack) from [<818e5cc4>] (panic+0x120/0x358 kernel/panic.c:347) [<818e5ba4>] (panic) from [<80241f54>] (check_panic_on_warn kernel/panic.c:240 [inline]) [<818e5ba4>] (panic) from [<80241f54>] (print_tainted+0x0/0xa0 kernel/panic.c:235) r3:8260c5c4 r2:00000001 r1:81fcefd4 r0:81fd665c r7:802df37c [<80241ee0>] (check_panic_on_warn) from [<80242148>] (__warn+0x7c/0x180 kernel/panic.c:693) [<802420cc>] (__warn) from [<80242434>] (warn_slowpath_fmt+0x1e8/0x1f4 kernel/panic.c:726) r8:00000009 r7:81fdf5e4 r6:df999c64 r5:83e9ec00 r4:00000000 [<80242250>] (warn_slowpath_fmt) from [<802df37c>] (rcu_note_context_switch+0x4a8/0x7ac kernel/rcu/tree_plugin.h:330) r10:df999dbc r9:81fe0580 r8:82604ec0 r7:8285208c r6:00000000 r5:83e9ec00 r4:dddd0c80 [<802deed4>] (rcu_note_context_switch) from [<81906a1c>] (__schedule+0xb0/0xb6c kernel/sched/core.c:6417) r10:df999dbc r9:8260582c r8:82604ec0 r7:824b5340 r6:83e9ec00 r5:dddd0340 r4:00000000 [<8190696c>] (__schedule) from [<81907504>] (__schedule_loop kernel/sched/core.c:6606 [inline]) [<8190696c>] (__schedule) from [<81907504>] (schedule+0x2c/0xfc kernel/sched/core.c:6621) r10:df999dbc r9:8260582c r8:82604ec0 r7:00000100 r6:00000000 r5:00000000 r4:83e9ec00 [<819074d8>] (schedule) from [<8190760c>] (io_schedule+0x38/0x48 kernel/sched/core.c:7401) r5:00000000 r4:83e9ec00 [<819075d4>] (io_schedule) from [<804316d0>] (folio_wait_bit_common+0x190/0x3a8 mm/filemap.c:1307) r5:83e9ec00 r4:00000102 [<80431540>] (folio_wait_bit_common) from [<8043554c>] (__folio_lock_killable mm/filemap.c:1652 [inline]) [<80431540>] (folio_wait_bit_common) from [<8043554c>] (lock_folio_maybe_drop_mmap mm/filemap.c:3090 [inline]) [<80431540>] (folio_wait_bit_common) from [<8043554c>] (filemap_fault+0x464/0xcd4 mm/filemap.c:3335) r10:00000000 r9:82eb0480 r8:00000022 r7:83196440 r6:df999eb8 r5:def78c00 r4:83196338 [<804350e8>] (filemap_fault) from [<8048292c>] (__do_fault+0x44/0xfc mm/memory.c:4556) r10:df999fb0 r9:84265800 r8:83e07ae0 r7:00000040 r6:00032c00 r5:83e07ae0 r4:df999eb8 [<804828e8>] (__do_fault) from [<80488440>] (do_read_fault mm/memory.c:4921 [inline]) [<804828e8>] (__do_fault) from [<80488440>] (do_fault mm/memory.c:5051 [inline]) [<804828e8>] (__do_fault) from [<80488440>] (do_pte_missing mm/memory.c:3897 [inline]) [<804828e8>] (__do_fault) from [<80488440>] (handle_pte_fault mm/memory.c:5381 [inline]) [<804828e8>] (__do_fault) from [<80488440>] (__handle_mm_fault mm/memory.c:5524 [inline]) [<804828e8>] (__do_fault) from [<80488440>] (handle_mm_fault+0xbf0/0x12fc mm/memory.c:5689) r7:00000040 r6:00032c00 r5:83e9ec00 r4:00001254 [<80487850>] (handle_mm_fault) from [<80214270>] (do_page_fault+0x1c8/0x3d8 arch/arm/mm/fault.c:328) r10:00000004 r9:84265800 r8:00000254 r7:83e9ec00 r6:80000207 r5:00032c00 r4:df999fb0 [<802140a8>] (do_page_fault) from [<80214710>] (do_PrefetchAbort+0x38/0x90 arch/arm/mm/fault.c:626) r10:000f4240 r9:00002710 r8:802140a8 r7:df999fb0 r6:00032c00 r5:00000207 r4:8261ca84 [<802146d8>] (do_PrefetchAbort) from [<80201070>] (ret_from_exception+0x0/0x10 arch/arm/kernel/entry-armv.S:473) Exception stack(0xdf999fb0 to 0xdf999ff8) 9fa0: fffffffd 8004b706 00000000 00000000 9fc0: 7e8f4c18 00000000 00000000 00000000 7e8f4c0c 00002710 000f4240 00000000 9fe0: 7e8f4bf8 7e8f4bf8 00010648 00032c00 20000010 ffffffff r8:824aa044 r7:83e9ec00 r6:ffffffff r5:20000010 r4:00032c00 Rebooting in 86400 seconds..