If report says CORRUPTED: Y, should I expect report.Corrupted to be true?

Correct. Such reports will be thrown away and not reported as bugs.
But these reports are not corrupted, and should not be marked as corrupted.

718, 720 might be parsed via a new rule exc_nmi per NMI call trace.
719 matches current ?:apic_timer_interrupt rule in IRQ context.

Yes, but as far as I remember lines that contain " ? " are removed before matching (stack unwinder says it's some garbage, not a real frame).

I am actually not sure what's the current state here b/c I see some recent "rcu stall" reports that are parsed correctly, e.g.:
https://syzkaller.appspot.com/bug?extid=894cac40ce97c83618bb

But I am not sure if we are also throwing away more rcu stall reports that were parser as corrupted. This bucket contains some recent reports that were parsed as corrutped:
https://syzkaller.appspot.com/bug?extid=56275b6e83c2fb060948
I see some "rcu stalls" there, but they just look truncated rather than mis-parsed.

pkg/report: new Linux rcu stall reports are mis-parsed #4967

Description

dvyukovopenedon Jul 2, 2024

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions

dvyukov
openedon Jul 2, 2024