Extracting prog: 18m50.633474865s
Minimizing prog: 1h8m2.663488053s
Simplifying prog options: 9m55.566052877s
Extracting C: 3m14.93519777s
Simplifying C: 0s


extracting reproducer from 27 programs
testing a last program of every proc
single: executing 6 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-openat-socket$inet_sctp-socket$inet_sctp-bind$inet-listen-connect$inet-accept-setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD-setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10)
listen(r0, 0x5)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10)
r2 = accept(r0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e22, @local}], 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e21, @local}], 0x10)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat-write-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)
write(r4, &(0x7f0000000300)='0\x00', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0)
write(r5, &(0x7f0000000380)='N\x00', 0x2)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-bind$inet-socket$rxrpc-bind$rxrpc-connect$rxrpc-sendmsg-recvfrom-pipe2-write-read-write-read-sendto$inet-recvmsg
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0)
recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write(r3, &(0x7f0000000300), 0x20)
read(r2, 0x0, 0x0)
write(r3, &(0x7f0000000500)="0100", 0x2)
read(r2, &(0x7f0000000314), 0x2)
sendto$inet(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10)
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-bind$inet-listen-setsockopt$inet_buf-mkdirat-mount$nfs-accept$inet-read-read-write
detailed listing:
executing program 0:
r0 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="80000100000000000000000100000000", 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1'}, {'port=2049'}, {'mountport=2049'}, {'proto=tcp'}, {'mountproto=tcp'}, {'nolock'}, {'soft'}, {'timeo=1'}, {'retrans=1'}]})
r1 = accept$inet(r0, 0x0, 0x0)
read(r1, &(0x7f0000000100), 0x4)
read(r1, &(0x7f0000000304), 0x4)
write(r1, &(0x7f0000000300), 0x100)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-bind$inet-listen-setsockopt$inet_buf-syz_clone-mkdirat-mount$nfs-accept$inet-read-read-read-write-close-nanosleep
detailed listing:
executing program 0:
r0 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="80000100000000000000000100"/100, 0x100)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) (async)
r1 = accept$inet(r0, 0x0, 0x0)
read(r1, &(0x7f0000000100), 0x4)
read(r1, &(0x7f0000000304), 0x4)
read(r1, &(0x7f0000000100), 0x70)
write(r1, &(0x7f0000000300), 0x100)
close(r1)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-bind$inet-listen-setsockopt$inet_buf-syz_clone-mkdirat-mount$nfs-accept$inet-read-read-read-write-close-nanosleep
detailed listing:
executing program 0:
r0 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="80000100000000000000000100"/100, 0x100)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) (async)
r1 = accept$inet(r0, 0x0, 0x0)
read(r1, &(0x7f0000000100), 0x4)
read(r1, &(0x7f0000000304), 0x4)
read(r1, &(0x7f0000000100), 0x70)
write(r1, &(0x7f0000000300), 0x100)
close(r1)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 27 programs with base timeout 30s
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 8, 14, 15, 10, 14, 14, 3, 10, 4, 14, 4, 9, 13, 11, 7, 2, 4, 2, 2, 10, 14, 5, 13, 7, 14, 11]
detailed listing:
executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r2})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000300)={0xa, 0x20e6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140200100000000000000000000000000012001000000000000000000000000000220e620e60030000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677"], 0x64)
recvfrom$inet6(r3, &(0x7f0000000800)=""/100, 0x64, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040), 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000700), r1)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000080), 0x0)
r2 = socket(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r2, 0x8916, &(0x7f0000001000)={'veth0\x00', @ifru_addrs=@in={0x2, 0x0, @loopback}})
nanosleep(&(0x7f0000001100)={0x0, 0x5f5e100}, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1', 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10)
accept(r2, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @loopback}}}, 0x84)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/fs/nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/fs/nfsd/ports\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='1\n\x00', 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r3, &(0x7f0000000100)="000000010000000000000002000186a30000000300000000000000010000002000"/64, 0x40, 0x0, &(0x7f0000000200)={0x2, 0x7f1, @loopback}, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
read(r4, &(0x7f0000000300)=""/100, 0x64)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x400, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x0, 0x0, 'syz0\x00'}]}], {0x14, 0x401, 0x1, 0x0, 0x0, {0x2}}}, 0x48}}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000300)={0x2, 0x6bb, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000340)={0x2, 0x6bb, @loopback}, 0x10)
r3 = accept(r1, 0x0, 0x0)
write(r2, &(0x7f0000000400)="009c00011a2b3c4d0001000001000000", 0x10)
write(r3, &(0x7f0000000500)="009c00021a2b3c4d000100000100000000010100", 0x14)
executing program 3:
r0 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="80000100000000000000000100"/100, 0x100)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) (async)
r1 = accept$inet(r0, 0x0, 0x0)
read(r1, &(0x7f0000000100), 0x4)
read(r1, &(0x7f0000000304), 0x4)
read(r1, &(0x7f0000000100), 0x70)
write(r1, &(0x7f0000000300), 0x100)
close(r1)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
executing program 32:
r0 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="80000100000000000000000100"/100, 0x100)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) (async)
r1 = accept$inet(r0, 0x0, 0x0)
read(r1, &(0x7f0000000100), 0x4)
read(r1, &(0x7f0000000304), 0x4)
read(r1, &(0x7f0000000100), 0x70)
write(r1, &(0x7f0000000300), 0x100)
close(r1)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0)
executing program 2:
r0 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="80000100000000000000000100000000000000", 0x13)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1'}, {'port=2049'}, {'mountport=2049'}, {'proto=tcp'}, {'mountproto=tcp'}, {'nolock'}, {'soft'}, {'timeo=1'}, {'retrans=1'}]})
r1 = accept$inet(r0, 0x0, 0x0)
read(r1, &(0x7f0000000100), 0x4)
read(r1, &(0x7f0000000304), 0x4)
write(r1, &(0x7f0000000300), 0x100)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ed)
mount(0x0, &(0x7f0000000300)='./nfsd\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000600)='inet 2049\n\x00', 0xa)
executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0)
recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write(r3, 0x0, 0x0)
read(r2, &(0x7f0000000700), 0x20)
write(r3, &(0x7f0000000500)="0100", 0x2)
read(r2, &(0x7f0000000314), 0x2)
sendto$inet(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10)
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0)
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x105, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1e}]}]}, 0x3c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1234"], 0x2}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x34}}, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
shutdown(r3, 0x2)
executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000100000)=""/65536, 0x10000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000200)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f0000000080)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)
pipe2(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write(r4, &(0x7f0000000500)="0100"/336, 0x150)
read(r3, &(0x7f0000000000), 0x150)
sendmsg$xdp(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
executing program 1:
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10)
listen(r0, 0x5)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10)
r2 = accept(r0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e22, @local}], 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e21, @local}], 0x10)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r0, &(0x7f0000000480)='localhost 1 \\x00000000 2147483647 ./export_dir\n', 0x2f)
executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040), 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ed)
mount(0x0, &(0x7f0000000300)='./nfsd\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000600)='inet 2049\n\x00', 0xa)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r0, &(0x7f0000000640)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23)
executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040), 0x0)
executing program 2:
r0 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="80000100000000000000000100000000", 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1'}, {'port=2049'}, {'mountport=2049'}, {'proto=tcp'}, {'mountproto=tcp'}, {'nolock'}, {'soft'}, {'timeo=1'}, {'retrans=1'}]})
r1 = accept$inet(r0, 0x0, 0x0)
read(r1, &(0x7f0000000100), 0x4)
read(r1, &(0x7f0000000304), 0x4)
write(r1, &(0x7f0000000300), 0x100)
executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0)
recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write(r3, &(0x7f0000000300), 0x20)
read(r2, 0x0, 0x0)
write(r3, &(0x7f0000000500)="0100", 0x2)
read(r2, &(0x7f0000000314), 0x2)
sendto$inet(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10)
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0)
executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x150, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x60, 0x14, {{'hmac(sha1)\x00'}, 0xa0, 0xa0, '01234567890123456789'}}]}, 0x150}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={&(0x7f0000000000), 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000000200)={&(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="200000000000000029000000360000000001000000000000c0040000000001002000000000000000290000003b0000000001000000000000c004000000000100"], 0x40}, 0x0)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed)
mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="1c000000100001000100000000000000030100000b00020073756e7270630000", 0x1c}], 0x1}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r1, &(0x7f0000000900)='nfsd 127.0.0.1 3600\n', 0x14)
read(r0, &(0x7f0000000a00)=""/4096, 0x1000)
sendmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000d00)="1400000018000103020000000000000002010000", 0x14}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001000)="1400000019000103020000000000000002010000", 0x14}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001300)="140000001a000103020000000000000002010000", 0x14}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001600)="140000001b000103020000000000000002010000", 0x14}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001900)="140000001c000103020000000000000002010000", 0x14}], 0x1}, 0x0)
read(r0, &(0x7f0000001a00)=""/4096, 0x1000)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r0, &(0x7f0000000480)='localhost 1 \\x00000000 2147483647 ./export_dir\n', 0x2f)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)
write(r4, &(0x7f0000000300)='0\x00', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0)
write(r5, &(0x7f0000000380)='N\x00', 0x2)
executing program 4:
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10)
listen(r0, 0x5)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10)
r2 = accept(r0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e22, @local}], 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e21, @local}], 0x10)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 6 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-openat-socket$inet_sctp-socket$inet_sctp-bind$inet-listen-connect$inet-accept-setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD-setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10)
listen(r0, 0x5)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10)
r2 = accept(r0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e22, @local}], 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e21, @local}], 0x10)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat-write-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)
write(r4, &(0x7f0000000300)='0\x00', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0)
write(r5, &(0x7f0000000380)='N\x00', 0x2)

program crashed: WARNING in mas_nomem
single: successfully extracted reproducer
found reproducer with 14 syscalls
minimizing guilty program
testing program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)
write(r4, &(0x7f0000000300)='0\x00', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0)

program crashed: WARNING in mas_nomem
testing program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)
write(r4, &(0x7f0000000300)='0\x00', 0x2)

program crashed: WARNING in mas_nomem
testing program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0\x00', 0x2)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)

program crashed: WARNING in mas_nomem
testing program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0\x00', 0x2)

program crashed: WARNING in mas_nomem
testing program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)

program crashed: WARNING in mas_nomem
testing program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)

program crashed: WARNING in mas_nomem
testing program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)

program did not crash
testing program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
write(0xffffffffffffffff, &(0x7f0000000200)='-1\x00', 0x3)

program did not crash
testing program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program crashed: WARNING in mas_nomem
testing program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program crashed: WARNING in mas_nomem
testing program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='-1\x00', 0x3)

program did not crash
testing program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000100)='100\x00', 0x4)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='-1\x00', 0x3)

program did not crash
testing program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program did not crash
testing program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program did not crash
testing program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program did not crash
testing program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, 0x0, &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program did not crash
testing program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program did not crash
testing program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program did not crash
testing program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program did not crash
testing program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100), 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program did not crash
testing program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program did not crash
testing program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)

program did not crash
testing program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200), 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=2m10.513288222s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
program crashed: WARNING in __cfg80211_ibss_joined
a never seen crash title: WARNING in __cfg80211_ibss_joined, ignore
simplifying guilty program options
testing program (duration=2m10.513288222s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program crashed: WARNING in mas_nomem
extracting C reproducer
testing compiled C program (duration=2m10.513288222s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
program crashed: WARNING in __cfg80211_ibss_joined
a never seen crash title: WARNING in __cfg80211_ibss_joined, ignore
testing program (duration=2m10.513288222s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program crashed: WARNING in mas_nomem
extracting C reproducer
testing compiled C program (duration=2m10.513288222s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
program did not crash
testing program (duration=2m10.513288222s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program crashed: WARNING in mas_nomem
validation run: crashed=true
testing program (duration=2m10.513288222s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program crashed: WARNING in mas_nomem
validation run: crashed=true
testing program (duration=2m10.513288222s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)

program crashed: WARNING in mas_nomem
validation run: crashed=true
reproducing took 1h44m24.515063105s
repro crashed as (corrupted=false):
------------[ cut here ]------------
!mas->sheaf && !mas->alloc
WARNING: lib/maple_tree.c:5751 at mas_nomem+0x1cc/0x210 lib/maple_tree.c:5751, CPU#1: udevd/5616
Modules linked in:
CPU: 1 UID: 0 PID: 5616 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
RIP: 0010:mas_nomem+0x1cc/0x210 lib/maple_tree.c:5751
Code: 4c 89 ff e8 d6 85 ea f6 49 c7 07 00 00 00 00 b0 01 e9 95 fe ff ff e8 f3 2d 7e f6 90 0f 0b 90 e9 2b ff ff ff e8 e5 2d 7e f6 90 <0f> 0b 90 e9 77 fe ff ff 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c ce fe
RSP: 0018:ffffc90004d978f0 EFLAGS: 00010293
RAX: ffffffff8b4775cb RBX: 1ffff920009b2fbf RCX: ffff888029e6ddc0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000cc0 R08: 00000000ffffffff R09: 1ffffffff1ca1a86
R10: dffffc0000000000 R11: fffffbfff1ca1a87 R12: dffffc0000000000
R13: ffffc90004d97e18 R14: ffffc90004d97de0 R15: ffffc90004d97df8
FS:  00007fd7f25c0880(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005604b24419f0 CR3: 0000000047b90000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 mas_store_gfp+0x37a/0x820 lib/maple_tree.c:4987
 vma_iter_clear_gfp include/linux/mm.h:1674 [inline]
 do_vmi_align_munmap+0x30c/0x4d0 mm/vma.c:1644
 do_vmi_munmap+0x252/0x2d0 mm/vma.c:1697
 __vm_munmap+0x241/0x3e0 mm/vma.c:3347
 __do_sys_munmap mm/mmap.c:1079 [inline]
 __se_sys_munmap mm/mmap.c:1076 [inline]
 __x64_sys_munmap+0x60/0x70 mm/mmap.c:1076
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x17b/0x530 arch/x86/entry/syscall_64.c:85
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd7f2725097
Code: 73 01 c3 48 8b 0d 61 2d 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 2d 0d 00 f7 d8 64 89 01 48
RSP: 002b:00007ffd84f04e08 EFLAGS: 00000206 ORIG_RAX: 000000000000000b
RAX: ffffffffffffffda RBX: 00005604b2411bf0 RCX: 00007fd7f2725097
RDX: 0000000000000000 RSI: 00000000009480e8 RDI: 00007fd7f1c77000
RBP: 00005604b2411910 R08: 00005604b2424140 R09: 0000000000000006
R10: 0000000000000000 R11: 0000000000000206 R12: 000056049a8fc588
R13: 00007ffd84f04e90 R14: 0000000000000000 R15: 0000000000000000
 </TASK>

final repro crashed as (corrupted=false):
------------[ cut here ]------------
!mas->sheaf && !mas->alloc
WARNING: lib/maple_tree.c:5751 at mas_nomem+0x1cc/0x210 lib/maple_tree.c:5751, CPU#1: udevd/5616
Modules linked in:
CPU: 1 UID: 0 PID: 5616 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
RIP: 0010:mas_nomem+0x1cc/0x210 lib/maple_tree.c:5751
Code: 4c 89 ff e8 d6 85 ea f6 49 c7 07 00 00 00 00 b0 01 e9 95 fe ff ff e8 f3 2d 7e f6 90 0f 0b 90 e9 2b ff ff ff e8 e5 2d 7e f6 90 <0f> 0b 90 e9 77 fe ff ff 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c ce fe
RSP: 0018:ffffc90004d978f0 EFLAGS: 00010293
RAX: ffffffff8b4775cb RBX: 1ffff920009b2fbf RCX: ffff888029e6ddc0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000cc0 R08: 00000000ffffffff R09: 1ffffffff1ca1a86
R10: dffffc0000000000 R11: fffffbfff1ca1a87 R12: dffffc0000000000
R13: ffffc90004d97e18 R14: ffffc90004d97de0 R15: ffffc90004d97df8
FS:  00007fd7f25c0880(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005604b24419f0 CR3: 0000000047b90000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 mas_store_gfp+0x37a/0x820 lib/maple_tree.c:4987
 vma_iter_clear_gfp include/linux/mm.h:1674 [inline]
 do_vmi_align_munmap+0x30c/0x4d0 mm/vma.c:1644
 do_vmi_munmap+0x252/0x2d0 mm/vma.c:1697
 __vm_munmap+0x241/0x3e0 mm/vma.c:3347
 __do_sys_munmap mm/mmap.c:1079 [inline]
 __se_sys_munmap mm/mmap.c:1076 [inline]
 __x64_sys_munmap+0x60/0x70 mm/mmap.c:1076
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x17b/0x530 arch/x86/entry/syscall_64.c:85
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd7f2725097
Code: 73 01 c3 48 8b 0d 61 2d 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 2d 0d 00 f7 d8 64 89 01 48
RSP: 002b:00007ffd84f04e08 EFLAGS: 00000206 ORIG_RAX: 000000000000000b
RAX: ffffffffffffffda RBX: 00005604b2411bf0 RCX: 00007fd7f2725097
RDX: 0000000000000000 RSI: 00000000009480e8 RDI: 00007fd7f1c77000
RBP: 00005604b2411910 R08: 00005604b2424140 R09: 0000000000000006
R10: 0000000000000000 R11: 0000000000000206 R12: 000056049a8fc588
R13: 00007ffd84f04e90 R14: 0000000000000000 R15: 0000000000000000
 </TASK>