Extracting prog: 2m36.540460939s
Minimizing prog: 20m31.449180323s
Simplifying prog options: 0s
Extracting C: 51.19289532s
Simplifying C: 18m43.99065068s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
detailed listing:
executing program 0:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000400)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="000602000000000005020008c20400000000c910fe8000000000980000000000000000bb010100c9100000000000000000000000000000000100000000000000"], 0x40)

program crashed: kernel BUG in unaccount_page_cache_page
single: successfully extracted reproducer
found reproducer with 7 syscalls
minimizing guilty program
testing program (duration=1m7.450293625s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap
detailed listing:
executing program 0:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000400)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0)

program did not crash
testing program (duration=1m7.450293625s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-setsockopt$inet6_IPV6_DSTOPTS
detailed listing:
executing program 0:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000400)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000})
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="000602000000000005020008c20400000000c910fe8000000000980000000000000000bb010100c9100000000000000000000000000000000100000000000000"], 0x40)

program did not crash
testing program (duration=1m7.450293625s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-mmap-setsockopt$inet6_IPV6_DSTOPTS
detailed listing:
executing program 0:
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r0 = memfd_create(&(0x7f0000000400)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r0, 0xffff)
fcntl$addseals(r0, 0x409, 0x7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="000602000000000005020008c20400000000c910fe8000000000980000000000000000bb010100c9100000000000000000000000000000000100000000000000"], 0x40)

program did not crash
testing program (duration=1m7.450293625s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
detailed listing:
executing program 0:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000400)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r1, 0xffff)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="000602000000000005020008c20400000000c910fe8000000000980000000000000000bb010100c9100000000000000000000000000000000100000000000000"], 0x40)

program did not crash
testing program (duration=1m7.450293625s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
detailed listing:
executing program 0:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000400)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="000602000000000005020008c20400000000c910fe8000000000980000000000000000bb010100c9100000000000000000000000000000000100000000000000"], 0x40)

program did not crash
testing program (duration=1m7.450293625s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
detailed listing:
executing program 0:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ftruncate(0xffffffffffffffff, 0xffff)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7)
r1 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r1, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="000602000000000005020008c20400000000c910fe8000000000980000000000000000bb010100c9100000000000000000000000000000000100000000000000"], 0x40)

program did not crash
testing program (duration=1m7.450293625s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000400)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r0, 0xffff)
fcntl$addseals(r0, 0x409, 0x7)
r1 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r0, 0x0, 0x0, 0x8000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r1, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="000602000000000005020008c20400000000c910fe8000000000980000000000000000bb010100c9100000000000000000000000000000000100000000000000"], 0x40)

program did not crash
testing program (duration=1m7.450293625s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
detailed listing:
executing program 0:
r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
r1 = memfd_create(&(0x7f0000000400)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="000602000000000005020008c20400000000c910fe8000000000980000000000000000bb010100c9100000000000000000000000000000000100000000000000"], 0x40)

program did not crash
testing program (duration=1m7.450293625s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
detailed listing:
executing program 0:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(0x0, 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="000602000000000005020008c20400000000c910fe8000000000980000000000000000bb010100c9100000000000000000000000000000000100000000000000"], 0x40)

program did not crash
testing program (duration=1m7.450293625s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
detailed listing:
executing program 0:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000400)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="000602000000000005020008c20400000000c910fe8000000000980000000000000000bb010100c9100000000000000000000000000000000100000000000000"], 0x40)

program did not crash
testing program (duration=1m7.450293625s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
detailed listing:
executing program 0:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000400)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x40)

program did not crash
testing program (duration=1m7.450293625s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
detailed listing:
executing program 0:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000400)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x40)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m7.450293625s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
program crashed: kernel BUG in unaccount_page_cache_page
simplifying C reproducer
testing compiled C program (duration=1m7.450293625s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
program crashed: kernel BUG in unaccount_page_cache_page
testing compiled C program (duration=1m7.450293625s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
program crashed: kernel BUG in unaccount_page_cache_page
testing compiled C program (duration=1m7.450293625s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
program did not crash
testing compiled C program (duration=1m7.450293625s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
program crashed: kernel BUG in unaccount_page_cache_page
testing compiled C program (duration=1m7.450293625s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
program crashed: kernel BUG in unaccount_page_cache_page
testing compiled C program (duration=1m7.450293625s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
program crashed: kernel BUG in unaccount_page_cache_page
testing compiled C program (duration=1m7.450293625s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
program crashed: kernel BUG in unaccount_page_cache_page
testing compiled C program (duration=1m7.450293625s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
program crashed: kernel BUG in unaccount_page_cache_page
testing compiled C program (duration=1m7.450293625s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
program crashed: kernel BUG in unaccount_page_cache_page
testing compiled C program (duration=1m7.450293625s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
program crashed: kernel BUG in unaccount_page_cache_page
testing compiled C program (duration=1m7.450293625s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
program crashed: kernel BUG in unaccount_page_cache_page
testing compiled C program (duration=1m7.450293625s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
program crashed: kernel BUG in unaccount_page_cache_page
testing compiled C program (duration=1m7.450293625s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
program crashed: kernel BUG in unaccount_page_cache_page
testing compiled C program (duration=1m7.450293625s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
program crashed: kernel BUG in unaccount_page_cache_page
testing compiled C program (duration=1m7.450293625s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
program crashed: kernel BUG in unaccount_page_cache_page
testing compiled C program (duration=1m7.450293625s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$udambuf-memfd_create-ftruncate-fcntl$addseals-ioctl$UDMABUF_CREATE-mmap-setsockopt$inet6_IPV6_DSTOPTS
program crashed: kernel BUG in unaccount_page_cache_page
reproducing took 42m43.173222841s
repro crashed as (corrupted=false):
raw: 05ffc00000080815 fffffc0005d5c508 fffffc0003757188 ffff0000d4d26d08
raw: 0000000000000000 0000000000000000 0000000400000000 ffff0000c08a4000
page dumped because: VM_BUG_ON_PAGE(page_mapped(page))
------------[ cut here ]------------
kernel BUG at mm/filemap.c:166!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 4031 Comm: syz-executor236 Not tainted 5.15.180-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : unaccount_page_cache_page+0x600/0x744 mm/filemap.c:166
lr : unaccount_page_cache_page+0x600/0x744 mm/filemap.c:166
sp : ffff80001f2c70a0
x29: ffff80001f2c70a0 x28: dfff800000000000 x27: 1ffff00003e58e78
x26: 1fffff8000babfb1 x25: dfff800000000000 x24: fffffc0005d5c508
x23: 0000000000000000 x22: fffffc0005d5c508 x21: fffffc0005d5fd88
x20: ffff0000d4d26d08 x19: fffffc0005d5fd80 x18: 0000000000000002
x17: 0000000000000000 x16: ffff800011b616c4 x15: 00000000ffffffff
x14: ffff0000cb109b40 x13: 0000000000000001 x12: 0000000000000001
x11: 0000000000000001 x10: 0000000000000000 x9 : 5f0151cc13657700
x8 : 5f0151cc13657700 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff80001f2c6518 x4 : ffff800014c5fe40 x3 : ffff800008559804
x2 : 0000000000000001 x1 : 0000000100000001 x0 : 0000000000000036
Call trace:
 unaccount_page_cache_page+0x600/0x744 mm/filemap.c:166
 __delete_from_page_cache+0xc8/0x6d4 mm/filemap.c:231
 delete_from_page_cache+0x108/0x17c mm/filemap.c:266
 truncate_inode_page+0x98/0xc8 mm/truncate.c:219
 shmem_undo_range+0x448/0x1460 mm/shmem.c:960
 shmem_truncate_range mm/shmem.c:1063 [inline]
 shmem_evict_inode+0x1c4/0x844 mm/shmem.c:1145
 evict+0x418/0x894 fs/inode.c:647
 iput_final fs/inode.c:1769 [inline]
 iput+0x744/0x824 fs/inode.c:1795
 dentry_unlink_inode+0x37c/0x4bc fs/dcache.c:380
 __dentry_kill+0x324/0x5e4 fs/dcache.c:586
 dentry_kill+0xc8/0x250 fs/dcache.c:-1
 dput+0x21c/0x458 fs/dcache.c:893
 __fput+0x494/0x800 fs/file_table.c:319
 ____fput+0x20/0x30 fs/file_table.c:339
 task_work_run+0x130/0x1e4 kernel/task_work.c:188
 tracehook_notify_resume include/linux/tracehook.h:189 [inline]
 do_notify_resume+0x262c/0x32b8 arch/arm64/kernel/signal.c:946
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline]
 el0_svc+0xfc/0x1f0 arch/arm64/kernel/entry-common.c:609
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
Code: f004b261 911e8021 aa1303e0 94036f37 (d4210000) 
---[ end trace 052730982d8cc2cf ]---

final repro crashed as (corrupted=false):
raw: 05ffc00000080815 fffffc0005d5c508 fffffc0003757188 ffff0000d4d26d08
raw: 0000000000000000 0000000000000000 0000000400000000 ffff0000c08a4000
page dumped because: VM_BUG_ON_PAGE(page_mapped(page))
------------[ cut here ]------------
kernel BUG at mm/filemap.c:166!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 4031 Comm: syz-executor236 Not tainted 5.15.180-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : unaccount_page_cache_page+0x600/0x744 mm/filemap.c:166
lr : unaccount_page_cache_page+0x600/0x744 mm/filemap.c:166
sp : ffff80001f2c70a0
x29: ffff80001f2c70a0 x28: dfff800000000000 x27: 1ffff00003e58e78
x26: 1fffff8000babfb1 x25: dfff800000000000 x24: fffffc0005d5c508
x23: 0000000000000000 x22: fffffc0005d5c508 x21: fffffc0005d5fd88
x20: ffff0000d4d26d08 x19: fffffc0005d5fd80 x18: 0000000000000002
x17: 0000000000000000 x16: ffff800011b616c4 x15: 00000000ffffffff
x14: ffff0000cb109b40 x13: 0000000000000001 x12: 0000000000000001
x11: 0000000000000001 x10: 0000000000000000 x9 : 5f0151cc13657700
x8 : 5f0151cc13657700 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff80001f2c6518 x4 : ffff800014c5fe40 x3 : ffff800008559804
x2 : 0000000000000001 x1 : 0000000100000001 x0 : 0000000000000036
Call trace:
 unaccount_page_cache_page+0x600/0x744 mm/filemap.c:166
 __delete_from_page_cache+0xc8/0x6d4 mm/filemap.c:231
 delete_from_page_cache+0x108/0x17c mm/filemap.c:266
 truncate_inode_page+0x98/0xc8 mm/truncate.c:219
 shmem_undo_range+0x448/0x1460 mm/shmem.c:960
 shmem_truncate_range mm/shmem.c:1063 [inline]
 shmem_evict_inode+0x1c4/0x844 mm/shmem.c:1145
 evict+0x418/0x894 fs/inode.c:647
 iput_final fs/inode.c:1769 [inline]
 iput+0x744/0x824 fs/inode.c:1795
 dentry_unlink_inode+0x37c/0x4bc fs/dcache.c:380
 __dentry_kill+0x324/0x5e4 fs/dcache.c:586
 dentry_kill+0xc8/0x250 fs/dcache.c:-1
 dput+0x21c/0x458 fs/dcache.c:893
 __fput+0x494/0x800 fs/file_table.c:319
 ____fput+0x20/0x30 fs/file_table.c:339
 task_work_run+0x130/0x1e4 kernel/task_work.c:188
 tracehook_notify_resume include/linux/tracehook.h:189 [inline]
 do_notify_resume+0x262c/0x32b8 arch/arm64/kernel/signal.c:946
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline]
 el0_svc+0xfc/0x1f0 arch/arm64/kernel/entry-common.c:609
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
Code: f004b261 911e8021 aa1303e0 94036f37 (d4210000) 
---[ end trace 052730982d8cc2cf ]---