Extracting prog: 18m41.268374194s
Minimizing prog: 58m44.493353289s
Simplifying prog options: 10m21.297421883s
Extracting C: 3m2.869811369s
Simplifying C: 0s


extracting reproducer from 24 programs
testing a last program of every proc
single: executing 4 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-pipe2-write-read-sendmsg$xdp
detailed listing:
executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000100000)=""/65536, 0x10000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000200)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f0000000080)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
pipe2(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write(r4, &(0x7f0000000500)="0100"/336, 0x150)
read(r3, &(0x7f0000000000), 0x150)
sendmsg$xdp(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-bind$inet-listen-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-accept4$inet-write
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a0a, @loopback}, 0x10)
listen(r0, 0x5)
r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6666:/\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = accept4$inet(r0, 0x0, 0x0, 0x800)
write(r2, &(0x7f0000000400)='cephv2\n\x00'/21, 0x15)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat-write-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)
write(r4, &(0x7f0000000300)='0\x00', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0)
write(r5, &(0x7f0000000380)='N\x00', 0x2)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$inet_sctp-bind-listen-socket$inet_sctp-connect-accept-socket-sendto-sendto-recvfrom$inet
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/sys/net/sctp/checksum_disable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='1', 0x1)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000500)=@in={0x2, 0x1388, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
connect(r2, &(0x7f0000000600)=@in={0x2, 0x1388, @loopback}, 0x10)
accept(r1, 0x0, 0x0)
r3 = socket(0x2, 0x3, 0x84)
sendto(r3, &(0x7f0000000700)="13881388000000010000000008000004", 0x10, 0x0, &(0x7f0000000600)=@in={0x2, 0x1388, @loopback}, 0x10)
sendto(r3, &(0x7f0000000700)="13881388000000000000000008000004", 0x10, 0x0, &(0x7f0000000600)=@in={0x2, 0x1388, @loopback}, 0x10)
recvfrom$inet(r2, &(0x7f0000000800)=""/256, 0x100, 0x1, 0x0, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 30s
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 8, 11, 12, 3, 4, 26, 7, 4, 3, 6, 2, 8, 8, 2, 15, 5, 2, 10, 14, 6, 14, 8, 13]
detailed listing:
executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24)
listen(r0, 0x5)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, &(0x7f0000000100)="00000001000000010000000100000001000000010101000000010001", 0x1c, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
recvfrom$rxrpc(r0, &(0x7f0000000300), 0x100, 0x40, 0x0, 0x0)
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a0b, @loopback}, 0x10)
listen(r0, 0x5)
r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='mon_addr\x00', &(0x7f0000000300)='127.0.0.1:6789\x00', 0x0)
r2 = accept$inet(r0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
write(r2, &(0x7f0000000400)='ceph v027\x00'/152, 0x91)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./pipefs/gssd\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./pipefs/gssd/clntXX\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./pipefs/gssd/gssd\x00', 0x0, 0x0)
r0 = fsopen(&(0x7f0000000180)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='192.0.2.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='addr\x00', &(0x7f0000000280)='192.0.2.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='clientaddr\x00', &(0x7f0000000300)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='sec\x00', &(0x7f0000000380)='krb5\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x110)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCADDRT(r1, 0x89e3, &(0x7f0000000300))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/x25/x25_forward\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='1\n', 0x2)
close(r2)
write(r0, &(0x7f0000000400)="0110010b22100000100000", 0xb)
write(r0, &(0x7f0000000500)="011001130000", 0x6)
executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5a, @loopback}}, 0x24)
listen(r0, 0x5)
executing program 2:
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x10)
listen(r0, 0x5)
accept4$llc(r0, 0x0, 0x0, 0x800)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0)
r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0)
r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
nanosleep(&(0x7f0000000e00)={0x0, 0x7a120}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
nanosleep(&(0x7f0000000e00)={0x0, 0xf4240}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f, @loopback}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/export\x00', &(0x7f0000000100), &(0x7f0000000300)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,proto=udp,mountproto=udp\x00') (async)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000600)=@in={0x2, 0x0, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000800)=""/28, 0x1c}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000600), 0x10, &(0x7f0000000a00)=[{&(0x7f0000000800), 0x1c}], 0x1}, 0x0)
nanosleep(&(0x7f0000000b00)={0x0, 0xbebc200}, 0x0)
executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040), 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, &(0x7f0000000400)='hello', 0x5, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c)
executing program 1:
r0 = socket$nl_route(0xa, 0x3, 0x0)
write(r0, &(0x7f0000000000)="580000001800050400000000000000000a8000000000000000000000000000001400010020010db800010000000000000000000106001500030000002000160010000100010203040506070805000800010000000500070000000000", 0x58)
write(r0, &(0x7f0000000100)="240000001a00010000000000000000000a00"/36, 0x24)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipe\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', &(0x7f0000000300)='rpc_pipefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./rpc_pipe/auth.unix.gid/channel\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='0 \n\x00', 0x3)
executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@rand_addr=0x64010100, 0x1234, 0x32}, @in=@rand_addr=0x64010100, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
setns(r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f)
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
write$tun(r1, &(0x7f0000000100)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0x1, "0b11123456"}}, 0x13)
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10)
listen(r0, 0x5)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='source', &(0x7f0000000340)='127.0.0.1:6789:/\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = accept$inet(r0, 0x0, 0x0)
write(r2, &(0x7f0000000400)='ceph v027\x00'/49, 0x31)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
executing program 3:
r0 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="80000100000000000000000100"/100, 0x100)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1\x00'}, {'port=2049\x00'}, {'mountport=2049\x00'}, {'proto=tcp\x00'}, {'soft\x00'}, {'timeo=1\x00'}, {'retrans=1\x00'}]}) (async)
r1 = accept$inet(r0, 0x0, 0x0)
read(r1, &(0x7f0000000100), 0x4)
read(r1, &(0x7f0000000304), 0x4)
read(r1, &(0x7f0000000100), 0x70)
write(r1, &(0x7f0000000300), 0x100)
close(r1)
close(r0)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
executing program 2:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$sock(r0, &(0x7f0000000100)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)='\x00'/4096, 0x1000}], 0x1}, 0x4000000)
executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x605, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x48}}, 0x0)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/65536, 0x10000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x10, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r2=>0x0})
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000)
sendmsg$xdp(r1, &(0x7f0000000200), 0x40)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/sys/net/sctp/checksum_disable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='1', 0x1)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000500)=@in={0x2, 0x1388, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
connect(r2, &(0x7f0000000600)=@in={0x2, 0x1388, @loopback}, 0x10)
accept(r1, 0x0, 0x0)
r3 = socket(0x2, 0x3, 0x84)
sendto(r3, &(0x7f0000000700)="13881388000000010000000008000004", 0x10, 0x0, &(0x7f0000000600)=@in={0x2, 0x1388, @loopback}, 0x10)
sendto(r3, &(0x7f0000000700)="13881388000000000000000008000004", 0x10, 0x0, &(0x7f0000000600)=@in={0x2, 0x1388, @loopback}, 0x10)
recvfrom$inet(r2, &(0x7f0000000800)=""/256, 0x100, 0x1, 0x0, 0x0)
executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)={0x20, 0x14, 0x601, 0x0, 0x0, "", [@generic="23000000010000000500020000000000"]}, 0x20}], 0x1}, 0x0)
r1 = socket$phonet(0x23, 0x2, 0x1)
bind$phonet(r1, &(0x7f0000000300), 0x10)
sendto$phonet(r1, &(0x7f0000000400)="01010000000000000000", 0xa, 0x0, &(0x7f0000000500)={0x23, 0x1}, 0x10)
nanosleep(&(0x7f0000000600)={0x0, 0x2faf080}, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)
write(r4, &(0x7f0000000300)='0\x00', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0)
write(r5, &(0x7f0000000380)='N\x00', 0x2)
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a0a, @loopback}, 0x10)
listen(r0, 0x5)
r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6666:/\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = accept4$inet(r0, 0x0, 0x0, 0x800)
write(r2, &(0x7f0000000400)='cephv2\n\x00'/21, 0x15)
executing program 1:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000100000)=""/65536, 0x10000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000200)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f0000000080)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
pipe2(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write(r4, &(0x7f0000000500)="0100"/336, 0x150)
read(r3, &(0x7f0000000000), 0x150)
sendmsg$xdp(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 4 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_TX_RING-setsockopt$XDP_UMEM_COMPLETION_RING-setsockopt$XDP_UMEM_FILL_RING-socketpair$unix-ioctl$sock_SIOCGIFINDEX-bind$xdp-mmap$xdp-pipe2-write-read-sendmsg$xdp
detailed listing:
executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000100000)=""/65536, 0x10000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000200)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f0000000080)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
pipe2(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write(r4, &(0x7f0000000500)="0100"/336, 0x150)
read(r3, &(0x7f0000000000), 0x150)
sendmsg$xdp(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-bind$inet-listen-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-accept4$inet-write
detailed listing:
executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a0a, @loopback}, 0x10)
listen(r0, 0x5)
r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6666:/\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = accept4$inet(r0, 0x0, 0x0, 0x800)
write(r2, &(0x7f0000000400)='cephv2\n\x00'/21, 0x15)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat-write-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)
write(r4, &(0x7f0000000300)='0\x00', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0)
write(r5, &(0x7f0000000380)='N\x00', 0x2)

program crashed: WARNING in mas_nomem
single: successfully extracted reproducer
found reproducer with 14 syscalls
minimizing guilty program
testing program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)
write(r4, &(0x7f0000000300)='0\x00', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0)

program crashed: WARNING in mas_nomem
testing program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)
write(r4, &(0x7f0000000300)='0\x00', 0x2)

program crashed: WARNING in mas_nomem
testing program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0\x00', 0x2)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)

program crashed: WARNING in mas_nomem
testing program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0\x00', 0x2)

program crashed: WARNING in mas_nomem
testing program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)

program crashed: WARNING in mas_nomem
testing program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)

program crashed: WARNING in mas_nomem
testing program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)

program did not crash
testing program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
write(0xffffffffffffffff, &(0x7f0000000200)='-1\x00', 0x3)

program did not crash
testing program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program crashed: WARNING in mas_nomem
testing program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program crashed: WARNING in mas_nomem
testing program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='-1\x00', 0x3)

program did not crash
testing program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000100)='100\x00', 0x4)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='-1\x00', 0x3)

program did not crash
testing program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program did not crash
testing program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program did not crash
testing program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program did not crash
testing program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, 0x0, &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program did not crash
testing program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program did not crash
testing program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program did not crash
testing program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100), 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program did not crash
testing program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program did not crash
testing program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)

program did not crash
testing program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200), 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=2m6.102430114s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
program did not crash
simplifying guilty program options
testing program (duration=2m6.102430114s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program crashed: WARNING in mas_nomem
extracting C reproducer
testing compiled C program (duration=2m6.102430114s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
program crashed: WARNING in __cfg80211_ibss_joined
a never seen crash title: WARNING in __cfg80211_ibss_joined, ignore
testing program (duration=2m6.102430114s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program crashed: WARNING in mas_nomem
extracting C reproducer
testing compiled C program (duration=2m6.102430114s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
program did not crash
testing program (duration=2m6.102430114s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program crashed: WARNING in mas_nomem
validation run: crashed=true
testing program (duration=2m6.102430114s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program crashed: WARNING in mas_nomem
validation run: crashed=true
testing program (duration=2m6.102430114s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program crashed: WARNING in mas_nomem
validation run: crashed=true
reproducing took 1h37m56.408000768s
repro crashed as (corrupted=false):
------------[ cut here ]------------
!mas->sheaf && !mas->alloc
WARNING: lib/maple_tree.c:5751 at mas_nomem+0x1cc/0x210 lib/maple_tree.c:5751, CPU#0: udevd/5625
Modules linked in:
CPU: 0 UID: 0 PID: 5625 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
RIP: 0010:mas_nomem+0x1cc/0x210 lib/maple_tree.c:5751
Code: 4c 89 ff e8 d6 85 ea f6 49 c7 07 00 00 00 00 b0 01 e9 95 fe ff ff e8 f3 2d 7e f6 90 0f 0b 90 e9 2b ff ff ff e8 e5 2d 7e f6 90 <0f> 0b 90 e9 77 fe ff ff 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c ce fe
RSP: 0018:ffffc9000551f8f0 EFLAGS: 00010293
RAX: ffffffff8b4775cb RBX: 1ffff92000aa3fbf RCX: ffff888026d9be80
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000cc0 R08: 00000000ffffffff R09: 1ffffffff1ca1a86
R10: dffffc0000000000 R11: fffffbfff1ca1a87 R12: dffffc0000000000
R13: ffffc9000551fe18 R14: ffffc9000551fde0 R15: ffffc9000551fdf8
FS:  00007fa034b72880(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005649b40f0f28 CR3: 0000000045778000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 mas_store_gfp+0x37a/0x820 lib/maple_tree.c:4987
 vma_iter_clear_gfp include/linux/mm.h:1674 [inline]
 do_vmi_align_munmap+0x30c/0x4d0 mm/vma.c:1644
 do_vmi_munmap+0x252/0x2d0 mm/vma.c:1697
 __vm_munmap+0x241/0x3e0 mm/vma.c:3347
 __do_sys_munmap mm/mmap.c:1079 [inline]
 __se_sys_munmap mm/mmap.c:1076 [inline]
 __x64_sys_munmap+0x60/0x70 mm/mmap.c:1076
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x17b/0x530 arch/x86/entry/syscall_64.c:85
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa034cd7097
Code: 73 01 c3 48 8b 0d 61 2d 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 2d 0d 00 f7 d8 64 89 01 48
RSP: 002b:00007ffe1d2eaf58 EFLAGS: 00000206 ORIG_RAX: 000000000000000b
RAX: ffffffffffffffda RBX: 00005649b40c1bf0 RCX: 00007fa034cd7097
RDX: 0000000000000000 RSI: 00000000009480e8 RDI: 00007fa034229000
RBP: 00005649b40c1910 R08: 00005649b40d4140 R09: 0000000000000006
R10: 0000000000000000 R11: 0000000000000206 R12: 00005649a9ab5588
R13: 00007ffe1d2eafe0 R14: 0000000000000000 R15: 0000000000000000
 </TASK>

final repro crashed as (corrupted=false):
------------[ cut here ]------------
!mas->sheaf && !mas->alloc
WARNING: lib/maple_tree.c:5751 at mas_nomem+0x1cc/0x210 lib/maple_tree.c:5751, CPU#0: udevd/5625
Modules linked in:
CPU: 0 UID: 0 PID: 5625 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
RIP: 0010:mas_nomem+0x1cc/0x210 lib/maple_tree.c:5751
Code: 4c 89 ff e8 d6 85 ea f6 49 c7 07 00 00 00 00 b0 01 e9 95 fe ff ff e8 f3 2d 7e f6 90 0f 0b 90 e9 2b ff ff ff e8 e5 2d 7e f6 90 <0f> 0b 90 e9 77 fe ff ff 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c ce fe
RSP: 0018:ffffc9000551f8f0 EFLAGS: 00010293
RAX: ffffffff8b4775cb RBX: 1ffff92000aa3fbf RCX: ffff888026d9be80
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000cc0 R08: 00000000ffffffff R09: 1ffffffff1ca1a86
R10: dffffc0000000000 R11: fffffbfff1ca1a87 R12: dffffc0000000000
R13: ffffc9000551fe18 R14: ffffc9000551fde0 R15: ffffc9000551fdf8
FS:  00007fa034b72880(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005649b40f0f28 CR3: 0000000045778000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 mas_store_gfp+0x37a/0x820 lib/maple_tree.c:4987
 vma_iter_clear_gfp include/linux/mm.h:1674 [inline]
 do_vmi_align_munmap+0x30c/0x4d0 mm/vma.c:1644
 do_vmi_munmap+0x252/0x2d0 mm/vma.c:1697
 __vm_munmap+0x241/0x3e0 mm/vma.c:3347
 __do_sys_munmap mm/mmap.c:1079 [inline]
 __se_sys_munmap mm/mmap.c:1076 [inline]
 __x64_sys_munmap+0x60/0x70 mm/mmap.c:1076
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x17b/0x530 arch/x86/entry/syscall_64.c:85
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa034cd7097
Code: 73 01 c3 48 8b 0d 61 2d 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 2d 0d 00 f7 d8 64 89 01 48
RSP: 002b:00007ffe1d2eaf58 EFLAGS: 00000206 ORIG_RAX: 000000000000000b
RAX: ffffffffffffffda RBX: 00005649b40c1bf0 RCX: 00007fa034cd7097
RDX: 0000000000000000 RSI: 00000000009480e8 RDI: 00007fa034229000
RBP: 00005649b40c1910 R08: 00005649b40d4140 R09: 0000000000000006
R10: 0000000000000000 R11: 0000000000000206 R12: 00005649a9ab5588
R13: 00007ffe1d2eafe0 R14: 0000000000000000 R15: 0000000000000000
 </TASK>