Extracting prog: 2m37.41030535s Minimizing prog: 22m28.939068329s Simplifying prog options: 1m39.873015955s Extracting C: 50.133207648s Simplifying C: 6m18.715220512s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmmsg$unix-recvmmsg-openat$nullb-dup-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS-setsockopt$sock_attach_bpf-ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA detailed listing: executing program 0: sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000031f40)={0xa000005, 0x0, 0x0, 0x4, 0x6}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x4000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmmsg$unix-recvmmsg-openat$nullb-dup-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS-setsockopt$sock_attach_bpf-ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA detailed listing: executing program 0: sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000031f40)={0xa000005, 0x0, 0x0, 0x4, 0x6}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x4000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) program crashed: kernel BUG in __filemap_add_folio single: successfully extracted reproducer found reproducer with 10 syscalls minimizing guilty program testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmmsg$unix-recvmmsg-openat$nullb-dup-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS-setsockopt$sock_attach_bpf detailed listing: executing program 0: sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000031f40)={0xa000005, 0x0, 0x0, 0x4, 0x6}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x4000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) program crashed: kernel BUG in __filemap_add_folio testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmmsg$unix-recvmmsg-openat$nullb-dup-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS detailed listing: executing program 0: sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000031f40)={0xa000005, 0x0, 0x0, 0x4, 0x6}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x4000) program crashed: kernel BUG in __filemap_add_folio testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmmsg$unix-recvmmsg-openat$nullb-dup-mmap-ioctl$COMEDI_INSN-openat$nullb detailed listing: executing program 0: sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000031f40)={0xa000005, 0x0, 0x0, 0x4, 0x6}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmmsg$unix-recvmmsg-openat$nullb-dup-mmap-ioctl$COMEDI_INSN-ioctl$FS_IOC_SETFLAGS detailed listing: executing program 0: sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000031f40)={0xa000005, 0x0, 0x0, 0x4, 0x6}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40081271, &(0x7f0000000980)=0x4000) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmmsg$unix-recvmmsg-openat$nullb-dup-mmap-openat$nullb-ioctl$FS_IOC_SETFLAGS detailed listing: executing program 0: sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x4000) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmmsg$unix-recvmmsg-openat$nullb-dup-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS detailed listing: executing program 0: sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000031f40)={0xa000005, 0x0, 0x0, 0x4, 0x6}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000980)=0x4000) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmmsg$unix-recvmmsg-openat$nullb-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS detailed listing: executing program 0: sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000031f40)={0xa000005, 0x0, 0x0, 0x4, 0x6}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmmsg$unix-recvmmsg-dup-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS detailed listing: executing program 0: sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r0, 0x2000) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000031f40)={0xa000005, 0x0, 0x0, 0x4, 0x6}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000980)=0x4000) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmmsg$unix-openat$nullb-dup-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS detailed listing: executing program 0: sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000031f40)={0xa000005, 0x0, 0x0, 0x4, 0x6}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x4000) program crashed: kernel BUG in __filemap_add_folio testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS detailed listing: executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000031f40)={0xa000005, 0x0, 0x0, 0x4, 0x6}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x4000) program crashed: kernel BUG in __filemap_add_folio testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS detailed listing: executing program 0: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000031f40)={0xa000005, 0x0, 0x0, 0x4, 0x6}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x4000) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS detailed listing: executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x4000) program crashed: kernel BUG in __filemap_add_folio testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS detailed listing: executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x4000) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS detailed listing: executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS program did not crash simplifying guilty program options testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS detailed listing: executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x4000) program crashed: kernel BUG in __filemap_add_folio extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS program crashed: kernel BUG in __filemap_add_folio simplifying C reproducer testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS program did not crash testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS program crashed: kernel BUG in __filemap_add_folio testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS program crashed: kernel BUG in __filemap_add_folio testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS program crashed: kernel BUG in __filemap_add_folio testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS program crashed: kernel BUG in __filemap_add_folio testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS program crashed: kernel BUG in __filemap_add_folio testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS detailed listing: executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x4000) program crashed: kernel BUG in __filemap_add_folio validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS detailed listing: executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x4000) program crashed: kernel BUG in __filemap_add_folio validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-mmap-ioctl$COMEDI_INSN-openat$nullb-ioctl$FS_IOC_SETFLAGS detailed listing: executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x4000) program crashed: kernel BUG in __filemap_add_folio validation run: crashed=true reproducing took 38m42.615891723s repro crashed as (corrupted=false): do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f ------------[ cut here ]------------ kernel BUG at mm/filemap.c:860! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 5739 Comm: syz.3.52 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:__filemap_add_folio+0x11ee/0x1360 mm/filemap.c:859 Code: ff 4c 89 f7 48 c7 c6 00 fa d7 8b e8 4c 78 21 ff 90 0f 0b e8 a4 aa bf ff 48 8b 7c 24 08 48 c7 c6 00 ee d7 8b e8 33 78 21 ff 90 <0f> 0b e8 8b aa bf ff 4c 89 f7 48 c7 c6 00 fa d7 8b e8 1c 78 21 ff RSP: 0018:ffffc9000d8e75c0 EFLAGS: 00010246 RAX: 14129c582b1eae00 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8c2a9d60 RDI: 00000000ffffffff RBP: ffffc9000d8e7740 R08: ffffffff9032d3f7 R09: 1ffffffff2065a7e R10: dffffc0000000000 R11: fffffbfff2065a7f R12: dffffc0000000000 R13: ffff8880325508c0 R14: 0000000000000002 R15: ffff8880325509d8 FS: 000055558d9ef500(0000) GS:ffff88808c821000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007feec79e9c38 CR3: 000000003fab7000 CR4: 0000000000352ef0 Call Trace: filemap_add_folio+0x25e/0x530 mm/filemap.c:967 ra_alloc_folio mm/readahead.c:472 [inline] page_cache_ra_order+0x715/0xf40 mm/readahead.c:539 do_sync_mmap_readahead+0x81d/0xa50 mm/filemap.c:3432 filemap_fault+0x867/0x1440 mm/filemap.c:3587 __do_fault+0x138/0x2a0 mm/memory.c:5425 do_shared_fault mm/memory.c:5924 [inline] do_fault mm/memory.c:5998 [inline] do_pte_missing+0x684/0x34b0 mm/memory.c:4566 handle_pte_fault mm/memory.c:6379 [inline] __handle_mm_fault mm/memory.c:6517 [inline] handle_mm_fault+0x1b36/0x3080 mm/memory.c:6686 do_user_addr_fault+0xa4d/0x1340 arch/x86/mm/fault.c:1343 handle_page_fault arch/x86/mm/fault.c:1483 [inline] exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595 RIP: 0033:0x7fdce356d488 Code: 66 89 74 17 02 88 0f c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 0f 1f 44 00 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 62 e1 fe 28 6f 54 16 ff 62 e1 fe 28 6f RSP: 002b:00007ffe57b8e068 EFLAGS: 00010202 RAX: 0000200000000080 RBX: 0000000000000004 RCX: 0030626c6c756e2f RDX: 000000000000000c RSI: 6c756e2f7665642f RDI: 0000200000000080 RBP: fffffffffffffffe R08: 0000001b2f420000 R09: 0000000000000001 R10: 7ffffffffffffff3 R11: 0000000000000009 R12: 0000000000000000 R13: 00007fdce3815fac R14: 000000000001c1b7 R15: 00007fdce3815fa0 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__filemap_add_folio+0x11ee/0x1360 mm/filemap.c:859 Code: ff 4c 89 f7 48 c7 c6 00 fa d7 8b e8 4c 78 21 ff 90 0f 0b e8 a4 aa bf ff 48 8b 7c 24 08 48 c7 c6 00 ee d7 8b e8 33 78 21 ff 90 <0f> 0b e8 8b aa bf ff 4c 89 f7 48 c7 c6 00 fa d7 8b e8 1c 78 21 ff RSP: 0018:ffffc9000d8e75c0 EFLAGS: 00010246 RAX: 14129c582b1eae00 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8c2a9d60 RDI: 00000000ffffffff RBP: ffffc9000d8e7740 R08: ffffffff9032d3f7 R09: 1ffffffff2065a7e R10: dffffc0000000000 R11: fffffbfff2065a7f R12: dffffc0000000000 R13: ffff8880325508c0 R14: 0000000000000002 R15: ffff8880325509d8 FS: 000055558d9ef500(0000) GS:ffff88808c821000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f09bbfe9c38 CR3: 000000003fab7000 CR4: 0000000000352ef0 final repro crashed as (corrupted=false): do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f ------------[ cut here ]------------ kernel BUG at mm/filemap.c:860! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 5739 Comm: syz.3.52 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:__filemap_add_folio+0x11ee/0x1360 mm/filemap.c:859 Code: ff 4c 89 f7 48 c7 c6 00 fa d7 8b e8 4c 78 21 ff 90 0f 0b e8 a4 aa bf ff 48 8b 7c 24 08 48 c7 c6 00 ee d7 8b e8 33 78 21 ff 90 <0f> 0b e8 8b aa bf ff 4c 89 f7 48 c7 c6 00 fa d7 8b e8 1c 78 21 ff RSP: 0018:ffffc9000d8e75c0 EFLAGS: 00010246 RAX: 14129c582b1eae00 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8c2a9d60 RDI: 00000000ffffffff RBP: ffffc9000d8e7740 R08: ffffffff9032d3f7 R09: 1ffffffff2065a7e R10: dffffc0000000000 R11: fffffbfff2065a7f R12: dffffc0000000000 R13: ffff8880325508c0 R14: 0000000000000002 R15: ffff8880325509d8 FS: 000055558d9ef500(0000) GS:ffff88808c821000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007feec79e9c38 CR3: 000000003fab7000 CR4: 0000000000352ef0 Call Trace: filemap_add_folio+0x25e/0x530 mm/filemap.c:967 ra_alloc_folio mm/readahead.c:472 [inline] page_cache_ra_order+0x715/0xf40 mm/readahead.c:539 do_sync_mmap_readahead+0x81d/0xa50 mm/filemap.c:3432 filemap_fault+0x867/0x1440 mm/filemap.c:3587 __do_fault+0x138/0x2a0 mm/memory.c:5425 do_shared_fault mm/memory.c:5924 [inline] do_fault mm/memory.c:5998 [inline] do_pte_missing+0x684/0x34b0 mm/memory.c:4566 handle_pte_fault mm/memory.c:6379 [inline] __handle_mm_fault mm/memory.c:6517 [inline] handle_mm_fault+0x1b36/0x3080 mm/memory.c:6686 do_user_addr_fault+0xa4d/0x1340 arch/x86/mm/fault.c:1343 handle_page_fault arch/x86/mm/fault.c:1483 [inline] exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595 RIP: 0033:0x7fdce356d488 Code: 66 89 74 17 02 88 0f c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 0f 1f 44 00 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 62 e1 fe 28 6f 54 16 ff 62 e1 fe 28 6f RSP: 002b:00007ffe57b8e068 EFLAGS: 00010202 RAX: 0000200000000080 RBX: 0000000000000004 RCX: 0030626c6c756e2f RDX: 000000000000000c RSI: 6c756e2f7665642f RDI: 0000200000000080 RBP: fffffffffffffffe R08: 0000001b2f420000 R09: 0000000000000001 R10: 7ffffffffffffff3 R11: 0000000000000009 R12: 0000000000000000 R13: 00007fdce3815fac R14: 000000000001c1b7 R15: 00007fdce3815fa0 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__filemap_add_folio+0x11ee/0x1360 mm/filemap.c:859 Code: ff 4c 89 f7 48 c7 c6 00 fa d7 8b e8 4c 78 21 ff 90 0f 0b e8 a4 aa bf ff 48 8b 7c 24 08 48 c7 c6 00 ee d7 8b e8 33 78 21 ff 90 <0f> 0b e8 8b aa bf ff 4c 89 f7 48 c7 c6 00 fa d7 8b e8 1c 78 21 ff RSP: 0018:ffffc9000d8e75c0 EFLAGS: 00010246 RAX: 14129c582b1eae00 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8c2a9d60 RDI: 00000000ffffffff RBP: ffffc9000d8e7740 R08: ffffffff9032d3f7 R09: 1ffffffff2065a7e R10: dffffc0000000000 R11: fffffbfff2065a7f R12: dffffc0000000000 R13: ffff8880325508c0 R14: 0000000000000002 R15: ffff8880325509d8 FS: 000055558d9ef500(0000) GS:ffff88808c821000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f09bbfe9c38 CR3: 000000003fab7000 CR4: 0000000000352ef0