Extracting prog: 8m57.91225654s
Minimizing prog: 55m39.099883692s
Simplifying prog options: 8m29.076342222s
Extracting C: 2m14.947892711s
Simplifying C: 0s


extracting reproducer from 12 programs
testing a last program of every proc
single: executing 4 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat-write-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)
write(r4, &(0x7f0000000300)='0\x00', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0)
write(r5, &(0x7f0000000380)='N\x00', 0x2)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-bind$inet-listen-setsockopt$inet_buf-mkdirat-mount$nfs-accept$inet-read-read-write
detailed listing:
executing program 0:
r0 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="80000100000000000000000100000000", 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1'}, {'port=2049'}, {'mountport=2049'}, {'proto=tcp'}, {'mountproto=tcp'}, {'nolock'}, {'soft'}, {'timeo=1'}, {'retrans=1'}]})
r1 = accept$inet(r0, 0x0, 0x0)
read(r1, &(0x7f0000000100), 0x4)
read(r1, &(0x7f0000000304), 0x4)
write(r1, &(0x7f0000000300), 0x100)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-openat-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r0, &(0x7f0000000480)='localhost 1 \\x00000000 2147483647 ./export_dir\n', 0x2f)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-mkdirat-mount-mkdirat-mount-openat-write-openat-write-socket$inet_udp-sendto$inet-openat-read-sendmsg$nl_generic-sendmsg$nl_generic
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/fs/nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/fs/nfsd/ports\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='1\n\x00', 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r3, &(0x7f0000000100)="000000010000000000000002000186a30000000300000000000000010000002000"/64, 0x40, 0x0, &(0x7f0000000200)={0x2, 0x7f1, @loopback}, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
read(r4, &(0x7f0000000300)=""/100, 0x64)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 12 programs with base timeout 30s
testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 3, 18, 13, 7, 15, 2, 7, 11, 10, 15, 14]
detailed listing:
executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x1f90, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x1f90, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
close(r2)
close(r1)
executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
write(r0, &(0x7f0000000080)="ffffffffffff00000000000188ca4f40003c", 0x12)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000240)='2049\x00', 0x5)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f00000002c0)='1\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x2, 0x0)
write(r2, &(0x7f0000000340)='\\x01\\x00\\x00\\x00 2000000000 0 0 0 krb5 \\x01\\x00\\x00\\x00\\xff\\xff\\xff\\x7f\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x11\\x00\\x00\\x00\\x00\\x01\\x02\\x03\\x04\\x05\\x06\\x07\\x08\\x09\\x0a\\x0b\\x0c\\x0d\\x0e\\x0f\\n', 0x7d)
close(r2)
r3 = socket(0x2, 0x1, 0x6)
connect(r3, &(0x7f0000000500)=@in={0x2, 0x7f08, @loopback}, 0x10)
write(r3, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74)
read(r3, &(0x7f0000000800)=""/256, 0x100)
close(r3)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\x00', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x1]}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x1]}, 0x8)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='0\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='2049\n', 0x5)
write(r0, &(0x7f0000000100)='1\n', 0x2)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/fs/nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/fs/nfsd/ports\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='1\n\x00', 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r3, &(0x7f0000000100)="000000010000000000000002000186a30000000300000000000000010000002000"/64, 0x40, 0x0, &(0x7f0000000200)={0x2, 0x7f1, @loopback}, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
read(r4, &(0x7f0000000300)=""/100, 0x64)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r0, &(0x7f0000000640)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r0, &(0x7f0000000480)='localhost 1 \\x00000000 2147483647 ./export_dir\n', 0x2f)
executing program 1:
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10)
listen(r0, 0x5)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10)
r2 = accept(r0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e22, @local}], 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e21, @local}], 0x10)
executing program 0:
r0 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="80000100000000000000000100000000", 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1'}, {'port=2049'}, {'mountport=2049'}, {'proto=tcp'}, {'mountproto=tcp'}, {'nolock'}, {'soft'}, {'timeo=1'}, {'retrans=1'}]})
r1 = accept$inet(r0, 0x0, 0x0)
read(r1, &(0x7f0000000100), 0x4)
read(r1, &(0x7f0000000304), 0x4)
write(r1, &(0x7f0000000300), 0x100)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000500)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='clientaddr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='vers\x00', &(0x7f0000000900)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='sec\x00', &(0x7f0000000b00)='krb5\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000c00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000500)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='clientaddr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='vers\x00', &(0x7f0000000900)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='sec\x00', &(0x7f0000000b00)='krb5\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)
write(r4, &(0x7f0000000300)='0\x00', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0)
write(r5, &(0x7f0000000380)='N\x00', 0x2)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 4 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat-write-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)
write(r4, &(0x7f0000000300)='0\x00', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0)
write(r5, &(0x7f0000000380)='N\x00', 0x2)

program crashed: WARNING in mas_nomem
single: successfully extracted reproducer
found reproducer with 14 syscalls
minimizing guilty program
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)
write(r4, &(0x7f0000000300)='0\x00', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0)

program crashed: WARNING in mas_nomem
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)
write(r4, &(0x7f0000000300)='0\x00', 0x2)

program crashed: WARNING in mas_nomem
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0\x00', 0x2)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)

program crashed: WARNING in mas_nomem
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)
write(r3, &(0x7f0000000280)='0\x00', 0x2)

program did not crash
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/failslab/space\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)

program crashed: WARNING in mas_nomem
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)

program crashed: WARNING in mas_nomem
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)

program did not crash
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x2)
write(0xffffffffffffffff, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)

program did not crash
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/interval\x00', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)

program crashed: WARNING in mas_nomem
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)

program crashed: WARNING in mas_nomem
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)

program did not crash
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000100)='100\x00', 0x4)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)

program did not crash
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)

program did not crash
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-write-openat-write-openat
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)

program did not crash
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)

program did not crash
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, 0x0, &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)

program did not crash
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)

program did not crash
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)

program did not crash
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)

program did not crash
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100), 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)

program did not crash
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)

program did not crash
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)

program did not crash
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200), 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/verbose\x00', 0x1, 0x0)

program did not crash
testing program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)

program crashed: WARNING in mas_nomem
extracting C reproducer
testing compiled C program (duration=2m2.80911141s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat
program crashed: WARNING in __cfg80211_ibss_joined
a never seen crash title: WARNING in __cfg80211_ibss_joined, ignore
simplifying guilty program options
testing program (duration=2m2.80911141s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)

program crashed: WARNING in mas_nomem
extracting C reproducer
testing compiled C program (duration=2m2.80911141s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat
program crashed: WARNING in __cfg80211_ibss_joined
a never seen crash title: WARNING in __cfg80211_ibss_joined, ignore
testing program (duration=2m2.80911141s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)

program crashed: WARNING in mas_nomem
extracting C reproducer
testing compiled C program (duration=2m2.80911141s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat
program did not crash
testing program (duration=2m2.80911141s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)

program crashed: WARNING in mas_nomem
validation run: crashed=true
testing program (duration=2m2.80911141s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)

program crashed: WARNING in mas_nomem
validation run: crashed=true
testing program (duration=2m2.80911141s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='100\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='-1\x00', 0x3)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)

program crashed: WARNING in mas_nomem
validation run: crashed=true
reproducing took 1h20m18.449107011s
repro crashed as (corrupted=false):
RBP: 0000560de849a910 R08: 0000560de84ad140 R09: 0000000000000006
R10: 0000000000000000 R11: 0000000000000206 R12: 0000560de4527588
R13: 00007ffc108ac280 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
------------[ cut here ]------------
!mas->sheaf && !mas->alloc
WARNING: lib/maple_tree.c:5751 at mas_nomem+0x1cc/0x210 lib/maple_tree.c:5751, CPU#1: udevd/5620
Modules linked in:
CPU: 1 UID: 0 PID: 5620 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
RIP: 0010:mas_nomem+0x1cc/0x210 lib/maple_tree.c:5751
Code: 4c 89 ff e8 d6 85 ea f6 49 c7 07 00 00 00 00 b0 01 e9 95 fe ff ff e8 f3 2d 7e f6 90 0f 0b 90 e9 2b ff ff ff e8 e5 2d 7e f6 90 <0f> 0b 90 e9 77 fe ff ff 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c ce fe
RSP: 0018:ffffc90004b978f0 EFLAGS: 00010293
RAX: ffffffff8b4775cb RBX: 1ffff92000972fbf RCX: ffff8880371a3e80
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000cc0 R08: 00000000ffffffff R09: 1ffffffff1ca1a86
R10: dffffc0000000000 R11: fffffbfff1ca1a87 R12: dffffc0000000000
R13: ffffc90004b97e18 R14: ffffc90004b97de0 R15: ffffc90004b97df8
FS:  00007f8e150a3880(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000560de84cffe0 CR3: 00000000428e4000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 mas_store_gfp+0x37a/0x820 lib/maple_tree.c:4987
 vma_iter_clear_gfp include/linux/mm.h:1674 [inline]
 do_vmi_align_munmap+0x30c/0x4d0 mm/vma.c:1644
 do_vmi_munmap+0x252/0x2d0 mm/vma.c:1697
 __vm_munmap+0x241/0x3e0 mm/vma.c:3347
 __do_sys_munmap mm/mmap.c:1079 [inline]
 __se_sys_munmap mm/mmap.c:1076 [inline]
 __x64_sys_munmap+0x60/0x70 mm/mmap.c:1076
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x17b/0x530 arch/x86/entry/syscall_64.c:85
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8e15208097
Code: 73 01 c3 48 8b 0d 61 2d 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 2d 0d 00 f7 d8 64 89 01 48
RSP: 002b:00007ffc108ac1f8 EFLAGS: 00000206 ORIG_RAX: 000000000000000b
RAX: ffffffffffffffda RBX: 0000560de849abf0 RCX: 00007f8e15208097
RDX: 0000000000000000 RSI: 00000000009480e8 RDI: 00007f8e1475a000
RBP: 0000560de849a910 R08: 0000560de84ad140 R09: 0000000000000006
R10: 0000000000000000 R11: 0000000000000206 R12: 0000560de4527588
R13: 00007ffc108ac280 R14: 0000000000000000 R15: 0000000000000000
 </TASK>

final repro crashed as (corrupted=false):
RBP: 0000560de849a910 R08: 0000560de84ad140 R09: 0000000000000006
R10: 0000000000000000 R11: 0000000000000206 R12: 0000560de4527588
R13: 00007ffc108ac280 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
------------[ cut here ]------------
!mas->sheaf && !mas->alloc
WARNING: lib/maple_tree.c:5751 at mas_nomem+0x1cc/0x210 lib/maple_tree.c:5751, CPU#1: udevd/5620
Modules linked in:
CPU: 1 UID: 0 PID: 5620 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
RIP: 0010:mas_nomem+0x1cc/0x210 lib/maple_tree.c:5751
Code: 4c 89 ff e8 d6 85 ea f6 49 c7 07 00 00 00 00 b0 01 e9 95 fe ff ff e8 f3 2d 7e f6 90 0f 0b 90 e9 2b ff ff ff e8 e5 2d 7e f6 90 <0f> 0b 90 e9 77 fe ff ff 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c ce fe
RSP: 0018:ffffc90004b978f0 EFLAGS: 00010293
RAX: ffffffff8b4775cb RBX: 1ffff92000972fbf RCX: ffff8880371a3e80
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000cc0 R08: 00000000ffffffff R09: 1ffffffff1ca1a86
R10: dffffc0000000000 R11: fffffbfff1ca1a87 R12: dffffc0000000000
R13: ffffc90004b97e18 R14: ffffc90004b97de0 R15: ffffc90004b97df8
FS:  00007f8e150a3880(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000560de84cffe0 CR3: 00000000428e4000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 mas_store_gfp+0x37a/0x820 lib/maple_tree.c:4987
 vma_iter_clear_gfp include/linux/mm.h:1674 [inline]
 do_vmi_align_munmap+0x30c/0x4d0 mm/vma.c:1644
 do_vmi_munmap+0x252/0x2d0 mm/vma.c:1697
 __vm_munmap+0x241/0x3e0 mm/vma.c:3347
 __do_sys_munmap mm/mmap.c:1079 [inline]
 __se_sys_munmap mm/mmap.c:1076 [inline]
 __x64_sys_munmap+0x60/0x70 mm/mmap.c:1076
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x17b/0x530 arch/x86/entry/syscall_64.c:85
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8e15208097
Code: 73 01 c3 48 8b 0d 61 2d 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 2d 0d 00 f7 d8 64 89 01 48
RSP: 002b:00007ffc108ac1f8 EFLAGS: 00000206 ORIG_RAX: 000000000000000b
RAX: ffffffffffffffda RBX: 0000560de849abf0 RCX: 00007f8e15208097
RDX: 0000000000000000 RSI: 00000000009480e8 RDI: 00007f8e1475a000
RBP: 0000560de849a910 R08: 0000560de84ad140 R09: 0000000000000006
R10: 0000000000000000 R11: 0000000000000206 R12: 0000560de4527588
R13: 00007ffc108ac280 R14: 0000000000000000 R15: 0000000000000000
 </TASK>