Extracting prog: 1m25.099332467s
Minimizing prog: 15m35.316937998s
Simplifying prog options: 0s
Extracting C: 24.284444176s
Simplifying C: 7m32.580814273s


extracting reproducer from 31 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-socket$igmp-setsockopt$MRT_DEL_MFC-timer_create-socket$inet_smc-openat$cgroup_ro-mmap-splice-ioctl$BTRFS_IOC_RM_DEV-syz_clone-mprotect
detailed listing:
executing program 0:
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x0, "ce8af5e4f53f00000000000000000065973bf869ce321af9ef34318698a1a5d6", 0xffffff7f, 0x100800, 0xfffffffd, 0x3}, 0x3c)
timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f00000a0000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x704c2000)
splice(r2, 0x0, r1, &(0x7f00000000c0)=0x101, 0x8, 0xe)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000200)={{r2}, "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"})
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

program crashed: kernel BUG in page_table_check_set
single: successfully extracted reproducer
found reproducer with 11 syscalls
minimizing guilty program
testing program (duration=40.090417485s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-socket$igmp-setsockopt$MRT_DEL_MFC-timer_create-socket$inet_smc-openat$cgroup_ro-mmap-splice-ioctl$BTRFS_IOC_RM_DEV-syz_clone
detailed listing:
executing program 0:
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x0, "ce8af5e4f53f00000000000000000065973bf869ce321af9ef34318698a1a5d6", 0xffffff7f, 0x100800, 0xfffffffd, 0x3}, 0x3c)
timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f00000a0000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x704c2000)
splice(r2, 0x0, r1, &(0x7f00000000c0)=0x101, 0x8, 0xe)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000200)={{r2}, "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"})
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=40.090417485s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-socket$igmp-setsockopt$MRT_DEL_MFC-timer_create-socket$inet_smc-openat$cgroup_ro-mmap-splice-ioctl$BTRFS_IOC_RM_DEV-mprotect
detailed listing:
executing program 0:
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x0, "ce8af5e4f53f00000000000000000065973bf869ce321af9ef34318698a1a5d6", 0xffffff7f, 0x100800, 0xfffffffd, 0x3}, 0x3c)
timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f00000a0000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x704c2000)
splice(r2, 0x0, r1, &(0x7f00000000c0)=0x101, 0x8, 0xe)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000200)={{r2}, "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"})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

program did not crash
testing program (duration=40.090417485s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-socket$igmp-setsockopt$MRT_DEL_MFC-timer_create-socket$inet_smc-openat$cgroup_ro-mmap-splice-syz_clone-mprotect
detailed listing:
executing program 0:
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x0, "ce8af5e4f53f00000000000000000065973bf869ce321af9ef34318698a1a5d6", 0xffffff7f, 0x100800, 0xfffffffd, 0x3}, 0x3c)
timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f00000a0000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x704c2000)
splice(r2, 0x0, r1, &(0x7f00000000c0)=0x101, 0x8, 0xe)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

program crashed: kernel BUG in page_table_check_set
testing program (duration=40.090417485s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-socket$igmp-setsockopt$MRT_DEL_MFC-timer_create-socket$inet_smc-openat$cgroup_ro-mmap-syz_clone-mprotect
detailed listing:
executing program 0:
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x0, "ce8af5e4f53f00000000000000000065973bf869ce321af9ef34318698a1a5d6", 0xffffff7f, 0x100800, 0xfffffffd, 0x3}, 0x3c)
timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f00000a0000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x704c2000)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

program crashed: kernel BUG in page_table_check_set
testing program (duration=40.090417485s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-socket$igmp-setsockopt$MRT_DEL_MFC-timer_create-socket$inet_smc-openat$cgroup_ro-syz_clone-mprotect
detailed listing:
executing program 0:
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x0, "ce8af5e4f53f00000000000000000065973bf869ce321af9ef34318698a1a5d6", 0xffffff7f, 0x100800, 0xfffffffd, 0x3}, 0x3c)
timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

program did not crash
testing program (duration=40.090417485s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-socket$igmp-setsockopt$MRT_DEL_MFC-timer_create-socket$inet_smc-mmap-syz_clone-mprotect
detailed listing:
executing program 0:
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x0, "ce8af5e4f53f00000000000000000065973bf869ce321af9ef34318698a1a5d6", 0xffffff7f, 0x100800, 0xfffffffd, 0x3}, 0x3c)
timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
mmap(&(0x7f00000a0000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x704c2000)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

program did not crash
testing program (duration=40.090417485s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-socket$igmp-setsockopt$MRT_DEL_MFC-timer_create-openat$cgroup_ro-mmap-syz_clone-mprotect
detailed listing:
executing program 0:
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x0, "ce8af5e4f53f00000000000000000065973bf869ce321af9ef34318698a1a5d6", 0xffffff7f, 0x100800, 0xfffffffd, 0x3}, 0x3c)
timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f00000a0000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x704c2000)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

program crashed: kernel BUG in page_table_check_set
testing program (duration=40.090417485s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-socket$igmp-setsockopt$MRT_DEL_MFC-openat$cgroup_ro-mmap-syz_clone-mprotect
detailed listing:
executing program 0:
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x0, "ce8af5e4f53f00000000000000000065973bf869ce321af9ef34318698a1a5d6", 0xffffff7f, 0x100800, 0xfffffffd, 0x3}, 0x3c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f00000a0000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x704c2000)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

program crashed: kernel BUG in page_table_check_set
testing program (duration=40.090417485s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-socket$igmp-openat$cgroup_ro-mmap-syz_clone-mprotect
detailed listing:
executing program 0:
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socket$igmp(0x2, 0x3, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f00000a0000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x704c2000)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

program crashed: kernel BUG in page_table_check_set
testing program (duration=40.090417485s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-openat$cgroup_ro-mmap-syz_clone-mprotect
detailed listing:
executing program 0:
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f00000a0000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x704c2000)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

program crashed: kernel BUG in page_table_check_set
testing program (duration=40.090417485s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_ro-mmap-syz_clone-mprotect
detailed listing:
executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f00000a0000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x704c2000)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

program did not crash
testing program (duration=40.090417485s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-openat$cgroup_ro-mmap-syz_clone-mprotect
detailed listing:
executing program 0:
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f00000a0000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x704c2000)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

program did not crash
extracting C reproducer
testing compiled C program (duration=40.090417485s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-openat$cgroup_ro-mmap-syz_clone-mprotect
program crashed: kernel BUG in page_table_check_set
simplifying C reproducer
testing compiled C program (duration=40.090417485s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-openat$cgroup_ro-mmap-syz_clone-mprotect
program crashed: kernel BUG in page_table_check_set
testing compiled C program (duration=40.090417485s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-openat$cgroup_ro-mmap-syz_clone-mprotect
program crashed: kernel BUG in page_table_check_set
testing compiled C program (duration=40.090417485s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-openat$cgroup_ro-mmap-syz_clone-mprotect
program crashed: kernel BUG in page_table_check_set
testing compiled C program (duration=40.090417485s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-openat$cgroup_ro-mmap-syz_clone-mprotect
program crashed: kernel BUG in page_table_check_set
testing compiled C program (duration=40.090417485s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-openat$cgroup_ro-mmap-syz_clone-mprotect
program crashed: kernel BUG in page_table_check_set
testing compiled C program (duration=40.090417485s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-openat$cgroup_ro-mmap-syz_clone-mprotect
program crashed: kernel BUG in page_table_check_set
testing compiled C program (duration=40.090417485s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-openat$cgroup_ro-mmap-syz_clone-mprotect
program crashed: kernel BUG in page_table_check_set
testing program (duration=40.090417485s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-openat$cgroup_ro-mmap-syz_clone-mprotect
detailed listing:
executing program 0:
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f00000a0000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x704c2000)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

program crashed: kernel BUG in page_table_check_set
validation run: crashed=true
testing program (duration=40.090417485s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-openat$cgroup_ro-mmap-syz_clone-mprotect
detailed listing:
executing program 0:
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f00000a0000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x704c2000)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

program crashed: kernel BUG in page_table_check_set
validation run: crashed=true
testing program (duration=40.090417485s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-openat$cgroup_ro-mmap-syz_clone-mprotect
detailed listing:
executing program 0:
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f00000a0000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x704c2000)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

program crashed: kernel BUG in page_table_check_set
validation run: crashed=true
reproducing took 28m13.729250497s
repro crashed as (corrupted=false):
------------[ cut here ]------------
kernel BUG at mm/page_table_check.c:118!
Internal error: Oops - BUG: 00000000f2000800 [#1]  SMP
Modules linked in:
CPU: 1 UID: 0 PID: 6740 Comm: syz.0.17 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : page_table_check_set+0x584/0x590 mm/page_table_check.c:118
lr : page_table_check_set+0x584/0x590 mm/page_table_check.c:118
sp : ffff80009c9674c0
x29: ffff80009c9674d0 x28: ffff80008fae0000 x27: 0000000000000002
x26: ffff0000c079ca80 x25: 0000000000000001 x24: 0000000000000001
x23: ffff0000c079ca80 x22: 000000000012b950 x21: 0000000000000001
x20: 0000000000000003 x19: 1ffff00012eb65b0 x18: 0000000000000000
x17: 0000000000000000 x16: ffff800080528a28 x15: 0000000000000001
x14: 1fffe000180f3950 x13: 0000000000000000 x12: 0000000000000000
x11: ffff6000180f3951 x10: 0000000000ff0100 x9 : 0000000000000000
x8 : ffff0000cdb05b80 x7 : ffff800080d16554 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800080d15b5c
x2 : 0000000000000001 x1 : 0000000000000002 x0 : 0000000000000001
Call trace:
 page_table_check_set+0x584/0x590 mm/page_table_check.c:118 (P)
 __page_table_check_ptes_set+0x2a8/0x2e0 mm/page_table_check.c:209
 page_table_check_ptes_set include/linux/page_table_check.h:76 [inline]
 __set_ptes_anysz arch/arm64/include/asm/pgtable.h:709 [inline]
 __set_ptes+0x4a0/0x504 arch/arm64/include/asm/pgtable.h:741
 contpte_set_ptes+0x120/0x188 arch/arm64/mm/contpte.c:464
 set_ptes arch/arm64/include/asm/pgtable.h:1794 [inline]
 modify_prot_commit_ptes+0x4e4/0x694 arch/arm64/mm/mmu.c:1556
 prot_commit_flush_ptes mm/mprotect.c:197 [inline]
 commit_anon_folio_batch mm/mprotect.c:246 [inline]
 set_write_prot_commit_flush_ptes mm/mprotect.c:273 [inline]
 change_pte_range mm/mprotect.c:354 [inline]
 change_pmd_range mm/mprotect.c:570 [inline]
 change_pud_range mm/mprotect.c:633 [inline]
 change_p4d_range mm/mprotect.c:659 [inline]
 change_protection_range mm/mprotect.c:687 [inline]
 change_protection+0x1e84/0x3ff0 mm/mprotect.c:721
 mprotect_fixup+0x504/0x744 mm/mprotect.c:837
 do_mprotect_pkey+0x864/0xb30 mm/mprotect.c:993
 __do_sys_mprotect mm/mprotect.c:1014 [inline]
 __se_sys_mprotect mm/mprotect.c:1011 [inline]
 __arm64_sys_mprotect+0x80/0x98 mm/mprotect.c:1011
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
 el0_svc+0x58/0x180 arch/arm64/kernel/entry-common.c:879
 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:898
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596
Code: d4210000 97e865fd d4210000 97e865fb (d4210000) 
---[ end trace 0000000000000000 ]---

final repro crashed as (corrupted=false):
------------[ cut here ]------------
kernel BUG at mm/page_table_check.c:118!
Internal error: Oops - BUG: 00000000f2000800 [#1]  SMP
Modules linked in:
CPU: 1 UID: 0 PID: 6740 Comm: syz.0.17 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : page_table_check_set+0x584/0x590 mm/page_table_check.c:118
lr : page_table_check_set+0x584/0x590 mm/page_table_check.c:118
sp : ffff80009c9674c0
x29: ffff80009c9674d0 x28: ffff80008fae0000 x27: 0000000000000002
x26: ffff0000c079ca80 x25: 0000000000000001 x24: 0000000000000001
x23: ffff0000c079ca80 x22: 000000000012b950 x21: 0000000000000001
x20: 0000000000000003 x19: 1ffff00012eb65b0 x18: 0000000000000000
x17: 0000000000000000 x16: ffff800080528a28 x15: 0000000000000001
x14: 1fffe000180f3950 x13: 0000000000000000 x12: 0000000000000000
x11: ffff6000180f3951 x10: 0000000000ff0100 x9 : 0000000000000000
x8 : ffff0000cdb05b80 x7 : ffff800080d16554 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800080d15b5c
x2 : 0000000000000001 x1 : 0000000000000002 x0 : 0000000000000001
Call trace:
 page_table_check_set+0x584/0x590 mm/page_table_check.c:118 (P)
 __page_table_check_ptes_set+0x2a8/0x2e0 mm/page_table_check.c:209
 page_table_check_ptes_set include/linux/page_table_check.h:76 [inline]
 __set_ptes_anysz arch/arm64/include/asm/pgtable.h:709 [inline]
 __set_ptes+0x4a0/0x504 arch/arm64/include/asm/pgtable.h:741
 contpte_set_ptes+0x120/0x188 arch/arm64/mm/contpte.c:464
 set_ptes arch/arm64/include/asm/pgtable.h:1794 [inline]
 modify_prot_commit_ptes+0x4e4/0x694 arch/arm64/mm/mmu.c:1556
 prot_commit_flush_ptes mm/mprotect.c:197 [inline]
 commit_anon_folio_batch mm/mprotect.c:246 [inline]
 set_write_prot_commit_flush_ptes mm/mprotect.c:273 [inline]
 change_pte_range mm/mprotect.c:354 [inline]
 change_pmd_range mm/mprotect.c:570 [inline]
 change_pud_range mm/mprotect.c:633 [inline]
 change_p4d_range mm/mprotect.c:659 [inline]
 change_protection_range mm/mprotect.c:687 [inline]
 change_protection+0x1e84/0x3ff0 mm/mprotect.c:721
 mprotect_fixup+0x504/0x744 mm/mprotect.c:837
 do_mprotect_pkey+0x864/0xb30 mm/mprotect.c:993
 __do_sys_mprotect mm/mprotect.c:1014 [inline]
 __se_sys_mprotect mm/mprotect.c:1011 [inline]
 __arm64_sys_mprotect+0x80/0x98 mm/mprotect.c:1011
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
 el0_svc+0x58/0x180 arch/arm64/kernel/entry-common.c:879
 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:898
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596
Code: d4210000 97e865fd d4210000 97e865fb (d4210000) 
---[ end trace 0000000000000000 ]---