Extracting prog: 1m24.802036464s
Minimizing prog: 7m45.280246665s
Simplifying prog options: 0s
Extracting C: 1m35.109115507s
Simplifying C: 16m53.795686651s
extracting reproducer from 67 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$incfs
detailed listing:
executing program 0:
mount$incfs(&(0x7f0000000400)='./cgroup\x00', &(0x7f0000000440)='./cgroup\x00', &(0x7f0000000480), 0x4a, &(0x7f00000006c0)={[{@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0xffffffffffffffff}}, {@rlog_pages={'rlog_pages', 0x3d, 0x57c8}}]})
program crashed: WARNING in incfs_realloc_mount_info
single: successfully extracted reproducer
found reproducer with 1 syscalls
minimizing guilty program
testing program (duration=52.999433463s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$incfs
detailed listing:
executing program 0:
mount$incfs(0x0, &(0x7f0000000440)='./cgroup\x00', &(0x7f0000000480), 0x4a, &(0x7f00000006c0)={[{@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0xffffffffffffffff}}, {@rlog_pages={'rlog_pages', 0x3d, 0x57c8}}]})
program did not crash
testing program (duration=52.999433463s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$incfs
detailed listing:
executing program 0:
mount$incfs(&(0x7f0000000400)='./cgroup\x00', 0x0, &(0x7f0000000480), 0x4a, &(0x7f00000006c0)={[{@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0xffffffffffffffff}}, {@rlog_pages={'rlog_pages', 0x3d, 0x57c8}}]})
program did not crash
testing program (duration=52.999433463s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$incfs
detailed listing:
executing program 0:
mount$incfs(&(0x7f0000000400)='./cgroup\x00', &(0x7f0000000440)='./cgroup\x00', 0x0, 0x4a, &(0x7f00000006c0)={[{@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0xffffffffffffffff}}, {@rlog_pages={'rlog_pages', 0x3d, 0x57c8}}]})
program did not crash
testing program (duration=52.999433463s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$incfs
detailed listing:
executing program 0:
mount$incfs(&(0x7f0000000400)='./cgroup\x00', &(0x7f0000000440)='./cgroup\x00', &(0x7f0000000480), 0x4a, 0x0)
program did not crash
extracting C reproducer
testing compiled C program (duration=52.999433463s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$incfs
program crashed: WARNING in incfs_realloc_mount_info
simplifying C reproducer
testing compiled C program (duration=52.999433463s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$incfs
program crashed: WARNING in incfs_realloc_mount_info
testing compiled C program (duration=52.999433463s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$incfs
program did not crash
testing compiled C program (duration=52.999433463s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$incfs
program crashed: WARNING in incfs_realloc_mount_info
testing compiled C program (duration=52.999433463s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$incfs
program did not crash
testing compiled C program (duration=52.999433463s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$incfs
program crashed: WARNING in incfs_realloc_mount_info
testing compiled C program (duration=52.999433463s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$incfs
program crashed: WARNING in incfs_realloc_mount_info
testing compiled C program (duration=52.999433463s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$incfs
program crashed: WARNING in incfs_realloc_mount_info
testing compiled C program (duration=52.999433463s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$incfs
program did not crash
testing compiled C program (duration=52.999433463s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$incfs
program crashed: WARNING in incfs_realloc_mount_info
testing compiled C program (duration=52.999433463s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$incfs
program crashed: WARNING in incfs_realloc_mount_info
testing compiled C program (duration=52.999433463s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$incfs
program crashed: WARNING in incfs_realloc_mount_info
testing compiled C program (duration=52.999433463s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$incfs
program crashed: WARNING in incfs_realloc_mount_info
testing compiled C program (duration=52.999433463s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$incfs
program crashed: WARNING in incfs_realloc_mount_info
reproducing took 27m38.987107498s
repro crashed as (corrupted=false):
and is ignored by this kernel. Remove the mand
option from the mount to silence this warning.
=======================================================
------------[ cut here ]------------
WARNING: CPU: 0 PID: 291 at mm/page_alloc.c:5157 __alloc_pages_noprof+0xe4/0x6c0 mm/page_alloc.c:5157
Modules linked in:
CPU: 0 UID: 0 PID: 291 Comm: syz-executor105 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 mm/page_alloc.c:5157
Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d a4 78 ee 05 00 0f 85 c4 00 00 00 c6 05 97 78 ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c
RSP: 0018:ffffc900012bf8a0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 1ffff92000257f18 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900012bf948
RBP: ffffc900012bf9d0 R08: ffffc900012bf947 R09: 0000000000000000
R10: ffffc900012bf930 R11: fffff52000257f29 R12: ffffc900012bf8e0
R13: 000000000000000e R14: dffffc0000000000 R15: 0000000000000000
FS: 0000555588065380(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000001000 CR3: 000000011ec18000 CR4: 00000000003526b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
__alloc_pages_node_noprof include/linux/gfp.h:269 [inline]
alloc_pages_node_noprof include/linux/gfp.h:296 [inline]
___kmalloc_large_node+0x9c/0x1d0 mm/slub.c:4293
__kmalloc_large_node_noprof+0x1e/0xe0 mm/slub.c:4322
__do_kmalloc_node mm/slub.c:4338 [inline]
__kmalloc_noprof+0x26d/0x450 mm/slub.c:4362
kmalloc_noprof include/linux/slab.h:885 [inline]
kzalloc_noprof include/linux/slab.h:1017 [inline]
incfs_realloc_mount_info+0xa7/0x4d0 fs/incfs/data_mgmt.c:113
incfs_alloc_mount_info+0x479/0x600 fs/incfs/data_mgmt.c:84
incfs_mount_fs+0x3ca/0x960 fs/incfs/vfs.c:1854
legacy_get_tree+0x103/0x1b0 fs/fs_context.c:662
vfs_get_tree+0x9e/0x290 fs/super.c:1817
do_new_mount+0x251/0xb40 fs/namespace.c:3514
path_mount+0x688/0x1050 fs/namespace.c:3841
do_mount fs/namespace.c:3854 [inline]
__do_sys_mount fs/namespace.c:4064 [inline]
__se_sys_mount+0x2bd/0x480 fs/namespace.c:4041
__x64_sys_mount+0xc3/0xf0 fs/namespace.c:4041
x64_sys_call+0x2021/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:166
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fdf78737ea9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff54e0adc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fdf78737ea9
RDX: 0000200000000480 RSI: 0000200000000440 RDI: 0000200000000400
RBP: 0000200000000440 R08: 00002000000006c0 R09: 0000000000000000
R10: 000000000000004a R11: 0000000000000246 R12: 0000200000000480
R13: 00002000000006c0 R14: 00007fdf7878111d R15: 0000000000000000
---[ end trace 0000000000000000 ]---
incfs: Error allocating mount info. -12
incfs: mount failed -12
final repro crashed as (corrupted=false):
and is ignored by this kernel. Remove the mand
option from the mount to silence this warning.
=======================================================
------------[ cut here ]------------
WARNING: CPU: 0 PID: 291 at mm/page_alloc.c:5157 __alloc_pages_noprof+0xe4/0x6c0 mm/page_alloc.c:5157
Modules linked in:
CPU: 0 UID: 0 PID: 291 Comm: syz-executor105 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 mm/page_alloc.c:5157
Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d a4 78 ee 05 00 0f 85 c4 00 00 00 c6 05 97 78 ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c
RSP: 0018:ffffc900012bf8a0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 1ffff92000257f18 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900012bf948
RBP: ffffc900012bf9d0 R08: ffffc900012bf947 R09: 0000000000000000
R10: ffffc900012bf930 R11: fffff52000257f29 R12: ffffc900012bf8e0
R13: 000000000000000e R14: dffffc0000000000 R15: 0000000000000000
FS: 0000555588065380(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000001000 CR3: 000000011ec18000 CR4: 00000000003526b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
__alloc_pages_node_noprof include/linux/gfp.h:269 [inline]
alloc_pages_node_noprof include/linux/gfp.h:296 [inline]
___kmalloc_large_node+0x9c/0x1d0 mm/slub.c:4293
__kmalloc_large_node_noprof+0x1e/0xe0 mm/slub.c:4322
__do_kmalloc_node mm/slub.c:4338 [inline]
__kmalloc_noprof+0x26d/0x450 mm/slub.c:4362
kmalloc_noprof include/linux/slab.h:885 [inline]
kzalloc_noprof include/linux/slab.h:1017 [inline]
incfs_realloc_mount_info+0xa7/0x4d0 fs/incfs/data_mgmt.c:113
incfs_alloc_mount_info+0x479/0x600 fs/incfs/data_mgmt.c:84
incfs_mount_fs+0x3ca/0x960 fs/incfs/vfs.c:1854
legacy_get_tree+0x103/0x1b0 fs/fs_context.c:662
vfs_get_tree+0x9e/0x290 fs/super.c:1817
do_new_mount+0x251/0xb40 fs/namespace.c:3514
path_mount+0x688/0x1050 fs/namespace.c:3841
do_mount fs/namespace.c:3854 [inline]
__do_sys_mount fs/namespace.c:4064 [inline]
__se_sys_mount+0x2bd/0x480 fs/namespace.c:4041
__x64_sys_mount+0xc3/0xf0 fs/namespace.c:4041
x64_sys_call+0x2021/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:166
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fdf78737ea9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff54e0adc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fdf78737ea9
RDX: 0000200000000480 RSI: 0000200000000440 RDI: 0000200000000400
RBP: 0000200000000440 R08: 00002000000006c0 R09: 0000000000000000
R10: 000000000000004a R11: 0000000000000246 R12: 0000200000000480
R13: 00002000000006c0 R14: 00007fdf7878111d R15: 0000000000000000
---[ end trace 0000000000000000 ]---
incfs: Error allocating mount info. -12
incfs: mount failed -12