, 0x42, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000140)='./file1\x00', 0x0, 0x209000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [660830ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 144916 #0 [660840ms] -> socket$packet(0x11, 0x3, 0x300) #0 [660840ms] <- socket$packet=0x3 errno=14 cover=1728 #0 [660841ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [660842ms] <- openat=0x4 errno=14 cover=6678 #0 [660843ms] -> mount(0x20000080, 0x20000140, 0x0, 0x209000, 0x0) #0 [660843ms] <- mount=0xffffffffffffffff errno=2 cover=1557 #0 [660844ms] -> openat(0xffffffffffffff9c, 0x20004c40, 0x84e00, 0x0) #0 [660845ms] <- openat=0x5 errno=14 cover=4878 #0 [660845ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [660850ms] <- close_range=0x0 errno=14 cover=3562 enabling collider #0 [660850ms] -> socket$packet(0x11, 0x3, 0x300) #0 [660851ms] <- socket$packet=0x3 errno=14 cover=1755 #0 [660852ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [660852ms] <- openat=0x4 errno=14 cover=1111 pthread_create failed (errno 11) 03:34:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x5411, &(0x7f0000000000)={'vlan0\x00', 0x0}) 2033/05/18 03:34:06 result hanged=false: [660919ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145018 #0 [660928ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [660934ms] <- perf_event_open=0x3 errno=14 cover=10898 #0 [660934ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [660935ms] <- socket$inet6_udplite=0x4 errno=14 cover=5038 #0 [660935ms] -> ioctl$sock_SIOCETHTOOL(0x4, 0x5411, 0x20000000) #0 [660935ms] <- ioctl$sock_SIOCETHTOOL=0x0 errno=14 cover=209 enabling collider #0 [660947ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [660948ms] <- perf_event_open=0x3 errno=14 cover=9511 #0 [660948ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [660949ms] <- socket$inet6_udplite=0x4 errno=14 cover=5106 pthread_create failed (errno 11) 03:34:06 executing program 0: openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/mnt\x00') 2033/05/18 03:34:06 result hanged=false: [661021ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145120 #0 [661031ms] -> openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [661031ms] <- openat$vcs=0xffffffffffffffff errno=14 cover=627 #0 [661032ms] -> syz_open_procfs$namespace(0x0, 0x20000700) #0 [661032ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=2372 enabling collider #0 [661033ms] -> openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [661033ms] <- openat$vcs=0xffffffffffffffff errno=14 cover=631 03:34:06 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 'w\x00Jn;m\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r1, r0) 2033/05/18 03:34:06 result hanged=false: [661050ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145122 #0 [661059ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [661060ms] <- perf_event_open=0x3 errno=14 cover=9608 #0 [661061ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [661061ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=74 #0 [661061ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [661062ms] <- openat$tun=0xffffffffffffffff errno=2 cover=3762 #0 [661062ms] -> ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, 0x20000000) #0 [661062ms] <- ioctl$TUNSETQUEUE=0xffffffffffffffff errno=9 cover=74 #0 [661062ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [661063ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=5271 #0 [661063ms] -> dup2(0x4, 0xffffffffffffffff) #0 [661063ms] <- dup2=0xffffffffffffffff errno=9 cover=39 enabling collider #0 [661074ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [661075ms] <- perf_event_open=0x3 errno=14 cover=9496 #0 [661075ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [661075ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=74 pthread_create failed (errno 11) 03:34:06 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r0, &(0x7f0000000180)=@target={'target ', {'PCI:', '7', ':', '15', ':', '1b', '.', '4'}}, 0x7) 2033/05/18 03:34:06 result hanged=false: [661151ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145224 #0 [661161ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x200001c0, 0x40001, 0x0) #0 [661163ms] <- openat$vga_arbiter=0xffffffffffffffff errno=2 cover=1181 #0 [661164ms] -> write$vga_arbiter(0xffffffffffffffff, 0x20000180, 0x7) #0 [661164ms] <- write$vga_arbiter=0xffffffffffffffff errno=9 cover=47 enabling collider #0 [661164ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x200001c0, 0x40001, 0x0) #0 [661164ms] <- openat$vga_arbiter=0xffffffffffffffff errno=2 cover=1180 03:34:06 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 2033/05/18 03:34:06 result hanged=false: [661184ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145226 #0 [661194ms] -> openat$snapshot(0xffffffffffffff9c, 0x20000200, 0x0, 0x0) #0 [661198ms] <- openat$snapshot=0xffffffffffffffff errno=2 cover=1177 enabling collider #0 [661199ms] -> openat$snapshot(0xffffffffffffff9c, 0x20000200, 0x0, 0x0) #0 [661200ms] <- openat$snapshot=0xffffffffffffffff errno=2 cover=1190 03:34:06 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000100)={0x0, {{0x3, 0x0, @broadcast}}, {{0x2, 0x0, @private}}}, 0x108) 2033/05/18 03:34:06 result hanged=false: 2033/05/18 03:34:06 poll: candidates=8 inputs=0 signal=0 [661219ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145228 #0 [661228ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [661231ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1666 #0 [661233ms] -> setsockopt$inet_group_source_req(0x3, 0x0, 0x2f, 0x20000100, 0x108) #0 [661235ms] <- setsockopt$inet_group_source_req=0xffffffffffffffff errno=99 cover=163 enabling collider #0 [661235ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [661236ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1704 2033/05/18 03:34:06 result hanged=false: 03:34:06 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8020}) close(r0) unlink(&(0x7f0000000080)='./file1\x00') [661256ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145230 #0 [661266ms] -> perf_event_open(0x20000200, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [661271ms] <- perf_event_open=0x3 errno=14 cover=9422 #0 [661273ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [661275ms] <- openat=0x4 errno=14 cover=12382 #0 [661275ms] -> ioctl$FS_IOC_FSSETXATTR(0x4, 0x401c5820, 0x20000000) #0 [661275ms] <- ioctl$FS_IOC_FSSETXATTR=0x0 errno=14 cover=1748 #0 [661276ms] -> close(0x4) #0 [661276ms] <- close=0x0 errno=14 cover=2041 #0 [661276ms] -> unlink(0x20000080) #0 [661281ms] <- unlink=0x0 errno=14 cover=14696 enabling collider #0 [661294ms] -> perf_event_open(0x20000200, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [661297ms] <- perf_event_open=0x3 errno=14 cover=9512 #0 [661297ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [661303ms] <- openat=0x4 errno=14 cover=13177 pthread_create failed (errno 11) 2033/05/18 03:34:06 result hanged=false: 2033/05/18 03:34:06 #0: triaging type=7 2033/05/18 03:34:06 triaging input for call #4 unlink (new signal=3) 03:34:06 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8020}) close(r0) unlink(&(0x7f0000000080)='./file1\x00') [661371ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145332 #0 [661381ms] -> perf_event_open(0x20000200, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [661383ms] <- perf_event_open=0x3 errno=14 cover=9670 #0 [661384ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [661386ms] <- openat=0x4 errno=14 cover=12453 #0 [661387ms] -> ioctl$FS_IOC_FSSETXATTR(0x4, 0x401c5820, 0x20000000) #0 [661387ms] <- ioctl$FS_IOC_FSSETXATTR=0x0 errno=14 cover=1748 #0 [661388ms] -> close(0x4) #0 [661389ms] <- close=0x0 errno=14 cover=2040 #0 [661390ms] -> unlink(0x20000080) #0 [661394ms] <- unlink=0x0 errno=14 cover=14510 2033/05/18 03:34:06 result hanged=false: 03:34:06 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8020}) close(r0) unlink(&(0x7f0000000080)='./file1\x00') [661432ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145334 #0 [661442ms] -> perf_event_open(0x20000200, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [661447ms] <- perf_event_open=0x3 errno=14 cover=9315 #0 [661450ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [661453ms] <- openat=0x4 errno=14 cover=12582 #0 [661455ms] -> ioctl$FS_IOC_FSSETXATTR(0x4, 0x401c5820, 0x20000000) #0 [661455ms] <- ioctl$FS_IOC_FSSETXATTR=0x0 errno=14 cover=1748 #0 [661456ms] -> close(0x4) #0 [661456ms] <- close=0x0 errno=14 cover=2026 #0 [661457ms] -> unlink(0x20000080) #0 [661461ms] <- unlink=0x0 errno=14 cover=14445 2033/05/18 03:34:06 result hanged=false: 03:34:06 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8020}) close(r0) unlink(&(0x7f0000000080)='./file1\x00') [661496ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145336 #0 [661506ms] -> perf_event_open(0x20000200, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [661507ms] <- perf_event_open=0x3 errno=14 cover=9999 #0 [661508ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [661508ms] <- openat=0x4 errno=14 cover=12481 #0 [661510ms] -> ioctl$FS_IOC_FSSETXATTR(0x4, 0x401c5820, 0x20000000) #0 [661510ms] <- ioctl$FS_IOC_FSSETXATTR=0x0 errno=14 cover=1748 #0 [661510ms] -> close(0x4) #0 [661510ms] <- close=0x0 errno=14 cover=2026 #0 [661511ms] -> unlink(0x20000080) #0 [661514ms] <- unlink=0x0 errno=14 cover=14859 2033/05/18 03:34:06 result hanged=false: 2033/05/18 03:34:06 added new input for call #4 unlink to corpus: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8020}) close(r0) unlink(&(0x7f0000000080)='./file1\x00') 03:34:07 executing program 0: clone3(&(0x7f00000017c0)={0x0, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {}, &(0x7f00000000c0)=""/93, 0xfffffffffffffdcd, 0x0, &(0x7f0000001780)=[0xffffffffffffffff], 0x1}, 0x58) [661553ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145338 #0 [661562ms] -> clone3(0x200017c0, 0x58) #0 [661563ms] <- clone3=0xffffffffffffffff errno=22 cover=110 enabling collider #0 [661564ms] -> clone3(0x200017c0, 0x58) #0 [661564ms] <- clone3=0xffffffffffffffff errno=22 cover=110 03:34:07 executing program 0: getpgid(0xffffffffffffffff) 2033/05/18 03:34:07 result hanged=false: [661583ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145340 #0 [661593ms] -> getpgid(0xffffffffffffffff) #0 [661594ms] <- getpgid=0xffffffffffffffff errno=3 cover=53 enabling collider #0 [661596ms] -> getpgid(0xffffffffffffffff) #0 [661596ms] <- getpgid=0xffffffffffffffff errno=3 cover=53 03:34:07 executing program 0: unshare(0x400) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:34:07 result hanged=false: [661616ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145342 #0 [661625ms] -> unshare(0x400) #0 [661626ms] <- unshare=0x0 errno=14 cover=1423 #0 [661628ms] -> creat(0x20000040, 0x0) #0 [661629ms] <- creat=0x3 errno=14 cover=6881 #0 [661630ms] -> io_uring_enter(0x3, 0x0, 0x0, 0x0, 0x0, 0x0) #0 [661630ms] <- io_uring_enter=0xffffffffffffffff errno=95 cover=47 enabling collider #0 [661630ms] -> unshare(0x400) #0 [661630ms] <- unshare=0x0 errno=14 cover=65 #0 [661631ms] -> creat(0x20000040, 0x0) #0 [661633ms] <- creat=0x4 errno=14 cover=4947 pthread_create failed (errno 11) 03:34:07 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000001380), 0x0) 2033/05/18 03:34:07 result hanged=false: [661689ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145444 #0 [661699ms] -> openat$sndseq(0xffffffffffffff9c, 0x20001380, 0x0) #0 [661702ms] <- openat$sndseq=0xffffffffffffffff errno=2 cover=1189 enabling collider #0 [661705ms] -> openat$sndseq(0xffffffffffffff9c, 0x20001380, 0x0) #0 [661705ms] <- openat$sndseq=0xffffffffffffffff errno=2 cover=1202 03:34:07 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@rc={0x1f, @none}, &(0x7f0000000000)=0x80) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) migrate_pages(0x0, 0x4, &(0x7f0000000200)=0x7a5299a7, &(0x7f0000000240)=0x1) r1 = fork() ptrace(0x10, r1) ptrace(0x8, r1) ptrace$cont(0x9, r1, 0x6, 0x40) r2 = fork() ptrace(0x4207, r2) ptrace(0x10, r2) ptrace(0x11, r2) ptrace(0x10, r2) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400000000003bc15a9954501cd800002000000000000000"], 0x24, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, 0x0) 2033/05/18 03:34:07 result hanged=false: [661724ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145446 #0 [661734ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [661735ms] <- perf_event_open=0x3 errno=14 cover=9772 #0 [661736ms] -> accept(0xffffffffffffffff, 0x200000c0, 0x20000000) #0 [661737ms] <- accept=0xffffffffffffffff errno=9 cover=75 #0 [661737ms] -> connect$unix(0xffffffffffffffff, 0x20000140, 0x6e) #0 [661737ms] <- connect$unix=0xffffffffffffffff errno=9 cover=75 #0 [661737ms] -> migrate_pages(0x0, 0x4, 0x20000200, 0x20000240) #0 [661742ms] <- migrate_pages=0x0 errno=14 cover=222852 #0 [661743ms] -> fork() #0 [661766ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [661769ms] -> ptrace(0x10, 0x0) #0 [661769ms] <- ptrace=0xffffffffffffffff errno=3 cover=107 #0 [661769ms] -> ptrace(0x8, 0x0) #0 [661769ms] <- ptrace=0xffffffffffffffff errno=3 cover=93 #0 [661769ms] -> ptrace$cont(0x9, 0x0, 0x6, 0x40) #0 [661770ms] <- ptrace$cont=0xffffffffffffffff errno=3 cover=93 #0 [661770ms] -> fork() #0 [661795ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [661796ms] -> ptrace(0x4207, 0x0) #0 [661797ms] <- ptrace=0xffffffffffffffff errno=3 cover=93 #0 [661798ms] -> ptrace(0x10, 0x0) #0 [661798ms] <- ptrace=0xffffffffffffffff errno=3 cover=93 #0 [661798ms] -> ptrace(0x11, 0x0) #0 [661798ms] <- ptrace=0xffffffffffffffff errno=3 cover=93 #0 [661799ms] -> ptrace(0x10, 0x0) #0 [661799ms] <- ptrace=0xffffffffffffffff errno=3 cover=93 #0 [661799ms] -> syz_mount_image$tmpfs(0x0, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [661802ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=22430 #0 [661803ms] -> setxattr$system_posix_acl(0x20000100, 0x20000140, 0x20000240, 0x24, 0x0) #0 [661803ms] <- setxattr$system_posix_acl=0xffffffffffffffff errno=22 cover=2788 #0 [661804ms] -> listxattr(0x20000000, 0x0, 0x0) #0 [661804ms] <- listxattr=0x11 errno=14 cover=1492 #0 [661804ms] -> ptrace(0x10, 0x0) #0 [661805ms] <- ptrace=0xffffffffffffffff errno=3 cover=93 enabling collider #0 [661816ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [661817ms] <- perf_event_open=0x3 errno=14 cover=9498 #0 [661818ms] -> accept(0xffffffffffffffff, 0x200000c0, 0x20000000) #0 [661818ms] <- accept=0xffffffffffffffff errno=9 cover=46 pthread_create failed (errno 11) 03:34:07 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2033/05/18 03:34:07 result hanged=false: [661886ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145550 #0 [661896ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [661896ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1169 enabling collider #0 [661898ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [661898ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1219 03:34:07 executing program 0: sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x24bb, &(0x7f0000000140), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 2033/05/18 03:34:07 result hanged=false: 2033/05/18 03:34:07 poll: candidates=8 inputs=0 signal=0 [661921ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145552 #0 [661931ms] -> sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) #0 [661931ms] <- sendmsg$NL80211_CMD_STOP_AP=0xffffffffffffffff errno=9 cover=52 #0 [661932ms] -> syz_io_uring_setup(0x24bb, 0x20000140, 0x20ffd000, 0x20ffd000, 0x200001c0, 0x20000200) #0 [661935ms] <- syz_io_uring_setup=0x3 errno=14 cover=14432 enabling collider #0 [661936ms] -> sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) #0 [661936ms] <- sendmsg$NL80211_CMD_STOP_AP=0xffffffffffffffff errno=9 cover=52 03:34:07 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0xa}) 2033/05/18 03:34:07 result hanged=false: [661958ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145554 #0 [661968ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [661970ms] <- perf_event_open=0x3 errno=14 cover=9606 #0 [661971ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [661971ms] <- syz_open_dev$tty20=0xffffffffffffffff errno=2 cover=3736 #0 [661972ms] -> ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, 0x20000040) #0 [661972ms] <- ioctl$TIOCL_GETSHIFTSTATE=0xffffffffffffffff errno=9 cover=74 enabling collider #0 [661982ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [661983ms] <- perf_event_open=0x3 errno=14 cover=9760 #0 [661983ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [661983ms] <- syz_open_dev$tty20=0xffffffffffffffff errno=2 cover=4026 pthread_create failed (errno 11) 2033/05/18 03:34:07 result hanged=false: 03:34:07 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r3 = epoll_create(0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x128b46fe17585bc4}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) iptable filter/2: resetting iptable mangle/2: resetting [662050ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145656 #0 [662060ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x200a0000, 0x200b0000, 0x20000180, 0x20000000) #0 [662067ms] <- syz_io_uring_setup=0x3 errno=14 cover=7430 #0 [662068ms] -> epoll_create(0x1) #0 [662069ms] <- epoll_create=0x4 errno=14 cover=507 #0 [662069ms] -> syz_io_uring_submit(0x200a0000, 0x200b0000, 0x200002c0, 0x0) #0 [662069ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [662069ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [662070ms] <- io_uring_enter=0x1 errno=14 cover=420 enabling collider #0 [662071ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x200a0000, 0x200b0000, 0x20000180, 0x20000000) #0 [662072ms] <- syz_io_uring_setup=0x3 errno=14 cover=5459 #0 [662072ms] -> epoll_create(0x1) #0 [662073ms] <- epoll_create=0x4 errno=14 cover=517 pthread_create failed (errno 11) 2033/05/18 03:34:07 result hanged=false: 03:34:07 executing program 0: add_key(&(0x7f0000000580)='asymmetric\x00', &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, 0x0) [662127ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145758 #0 [662137ms] -> add_key(0x20000580, 0x200005c0, 0x0, 0x0, 0x0) #0 [662138ms] <- add_key=0xffffffffffffffff errno=22 cover=305 enabling collider #0 [662139ms] -> add_key(0x20000580, 0x200005c0, 0x0, 0x0, 0x0) #0 [662139ms] <- add_key=0xffffffffffffffff errno=22 cover=305 2033/05/18 03:34:07 result hanged=false: 03:34:07 executing program 0: io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0c0583b, &(0x7f0000000080)) [662161ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145760 #0 [662172ms] -> io_submit(0x0, 0x1, 0x20000180) #0 [662174ms] <- io_submit=0xffffffffffffffff errno=22 cover=219 #0 [662176ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [662178ms] <- openat=0x3 errno=14 cover=6780 #0 [662178ms] -> ioctl$EXT4_IOC_GROUP_ADD(0x3, 0xc0c0583b, 0x20000080) #0 [662178ms] <- ioctl$EXT4_IOC_GROUP_ADD=0xffffffffffffffff errno=22 cover=127 enabling collider #0 [662178ms] -> io_submit(0x0, 0x1, 0x20000180) #0 [662178ms] <- io_submit=0xffffffffffffffff errno=22 cover=220 #0 [662179ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [662179ms] <- openat=0x3 errno=14 cover=1122 pthread_create failed (errno 11) 03:34:07 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xf, 0x20032, 0xffffffffffffffff, 0x0) 2033/05/18 03:34:07 result hanged=false: [662231ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145862 #0 [662242ms] -> mmap(0x20000000, 0x2000, 0xf, 0x20032, 0xffffffffffffffff, 0x0) #0 [662242ms] <- mmap=0x20000000 errno=14 cover=1150 enabling collider #0 [662243ms] -> mmap(0x20000000, 0x2000, 0xf, 0x20032, 0xffffffffffffffff, 0x0) #0 [662243ms] <- mmap=0x20000000 errno=14 cover=1137 03:34:07 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736672d59600088001000240000004f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f0000010d00)) getdents(r0, &(0x7f0000000040)=""/43, 0x2b) 2033/05/18 03:34:07 result hanged=false: [662262ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145864 #0 [662273ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20010d00) #0 [662275ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=5001 #0 [662276ms] -> getdents(0xffffffffffffffff, 0x20000040, 0x2b) #0 [662276ms] <- getdents=0xffffffffffffffff errno=9 cover=46 enabling collider #0 [662276ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20010d00) #0 [662277ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=5009 2033/05/18 03:34:07 result hanged=false: 03:34:07 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x2c, &(0x7f0000000000)={0x20087b6}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x0, 0x0}, 0x10) [662296ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145866 #0 [662306ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [662306ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1688 #0 [662307ms] -> setsockopt$inet_icmp_ICMP_FILTER(0x3, 0x1, 0x2c, 0x20000000, 0x4) #0 [662307ms] <- setsockopt$inet_icmp_ICMP_FILTER=0x0 errno=14 cover=144 #0 [662307ms] -> setsockopt$SO_ATTACH_FILTER(0x3, 0x1, 0x1a, 0x20000180, 0x10) #0 [662307ms] <- setsockopt$SO_ATTACH_FILTER=0xffffffffffffffff errno=1 cover=169 enabling collider #0 [662307ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [662308ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1769 #0 [662308ms] -> setsockopt$inet_icmp_ICMP_FILTER(0x3, 0x1, 0x2c, 0x20000000, 0x4) #0 [662308ms] <- setsockopt$inet_icmp_ICMP_FILTER=0x0 errno=14 cover=144 pthread_create failed (errno 11) 03:34:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = getpgrp(0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x5, 0x0, @tid=r3}, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, r2, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x20d315) 2033/05/18 03:34:07 result hanged=false: 2033/05/18 03:34:07 poll: candidates=8 inputs=0 signal=0 [662362ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 145968 #0 [662370ms] -> openat(0xffffffffffffff9c, 0x20000080, 0x105142, 0x0) #0 [662373ms] <- openat=0x3 errno=14 cover=6717 #0 [662373ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [662373ms] <- openat=0xffffffffffffffff errno=2 cover=1155 #0 [662374ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x10001, 0x0) #0 [662374ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [662374ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [662374ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=938 #0 [662374ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [662374ms] <- close_range=0x0 errno=14 cover=45 #0 [662374ms] -> getpgrp(0x0) #0 [662374ms] <- getpgrp=0x23a30 errno=14 cover=48 #0 [662374ms] -> timer_create(0x0, 0x20000240, 0x0) #0 [662375ms] <- timer_create=0xffffffffffffffff errno=14 cover=757 #0 [662375ms] -> perf_event_open(0x20001d80, 0x23a30, 0x0, 0xffffffffffffffff, 0x0) #0 [662375ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=3373 #0 [662375ms] -> dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [662375ms] <- dup3=0xffffffffffffffff errno=22 cover=36 #0 [662375ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [662375ms] <- openat=0x4 errno=14 cover=1027 #0 [662375ms] -> sendfile(0x3, 0x4, 0x0, 0x20d315) #0 [662376ms] <- sendfile=0x0 errno=14 cover=1595 enabling collider #0 [662376ms] -> openat(0xffffffffffffff9c, 0x20000080, 0x105142, 0x0) #0 [662376ms] <- openat=0x3 errno=14 cover=1124 #0 [662377ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [662377ms] <- openat=0xffffffffffffffff errno=2 cover=1209 pthread_create failed (errno 11) 2033/05/18 03:34:07 result hanged=false: 03:34:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) [662433ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146070 #0 [662443ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [662447ms] <- socket$inet6_tcp=0x3 errno=14 cover=1742 #0 [662448ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x0, 0x0, 0x0) #0 [662448ms] <- setsockopt$inet6_tcp_int=0xffffffffffffffff errno=22 cover=86 enabling collider #0 [662448ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [662449ms] <- socket$inet6_tcp=0x3 errno=14 cover=1752 03:34:07 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) pwritev2(r0, &(0x7f0000000540)=[{&(0x7f0000000140)='A', 0x1}], 0x1, 0x0, 0x0, 0x2) 2033/05/18 03:34:07 result hanged=false: [662469ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146072 #0 [662479ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x20000100, 0x8001, 0x0) #0 [662480ms] <- openat$vga_arbiter=0xffffffffffffffff errno=2 cover=1181 #0 [662480ms] -> pwritev2(0xffffffffffffffff, 0x20000540, 0x1, 0x0, 0x0, 0x2) #0 [662480ms] <- pwritev2=0xffffffffffffffff errno=9 cover=50 enabling collider #0 [662480ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x20000100, 0x8001, 0x0) #0 [662480ms] <- openat$vga_arbiter=0xffffffffffffffff errno=2 cover=1191 03:34:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) 2033/05/18 03:34:07 result hanged=false: [662504ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146074 #0 [662513ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [662514ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1170 #0 [662514ms] -> syz_genetlink_get_family_id$netlbl_cipso(0x20000000, 0xffffffffffffffff) syz_genetlink_get_family_id(NLBL_CIPSOv4, -1) netlink: failed to get family id for NLBL_CIPSOv4: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [662515ms] <- syz_genetlink_get_family_id$netlbl_cipso=0xffffffffffffffff errno=2 cover=7679 enabling collider #0 [662515ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [662516ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1169 03:34:07 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) 2033/05/18 03:34:07 result hanged=false: [662536ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146076 #0 [662546ms] -> openat$cgroup_root(0xffffffffffffff9c, 0x20000280, 0x200002, 0x0) #0 [662550ms] <- openat$cgroup_root=0xffffffffffffffff errno=2 cover=2256 enabling collider #0 [662551ms] -> openat$cgroup_root(0xffffffffffffff9c, 0x20000280, 0x200002, 0x0) #0 [662551ms] <- openat$cgroup_root=0xffffffffffffffff errno=2 cover=1544 03:34:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[{0x10}], 0x10}}], 0x1, 0x0) 2033/05/18 03:34:08 result hanged=false: [662571ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146078 #0 [662580ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [662580ms] <- socket$nl_generic=0x3 errno=14 cover=1437 #0 [662581ms] -> sendmmsg(0x3, 0x20003940, 0x1, 0x0) #0 [662581ms] <- sendmmsg=0x1 errno=14 cover=993 enabling collider #0 [662582ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [662582ms] <- socket$nl_generic=0x3 errno=14 cover=1433 03:34:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000240)="e8", 0x1}], 0x1) r2 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) close(r2) 2033/05/18 03:34:08 result hanged=false: [662601ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146080 #0 [662611ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [662613ms] <- openat=0x3 errno=14 cover=6753 #0 [662614ms] -> creat(0x20000000, 0x0) #0 [662615ms] <- creat=0x4 errno=14 cover=4945 #0 [662615ms] -> writev(0x4, 0x20000440, 0x1) #0 [662615ms] <- writev=0x1 errno=14 cover=2883 #0 [662615ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [662621ms] <- perf_event_open=0x5 errno=14 cover=9388 #0 [662621ms] -> mmap$IORING_OFF_SQ_RING(0x20ffa000, 0x4000, 0x0, 0x12, 0x3, 0x0) #0 [662622ms] <- mmap$IORING_OFF_SQ_RING=0x20ffa000 errno=14 cover=3823 #0 [662622ms] -> ioctl$EXT4_IOC_SWAP_BOOT(0x4, 0x6611) #0 [662624ms] <- ioctl$EXT4_IOC_SWAP_BOOT=0x0 errno=14 cover=9881 #0 [662625ms] -> close(0x5) #0 [662629ms] <- close=0x0 errno=14 cover=7338 enabling collider #0 [662629ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [662629ms] <- openat=0xffffffffffffffff errno=17 cover=1063 #0 [662630ms] -> creat(0x20000000, 0x0) #0 [662631ms] <- creat=0x3 errno=14 cover=8016 pthread_create failed (errno 11) 03:34:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000240)="e8", 0x1}], 0x1) r2 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) close(r2) 2033/05/18 03:34:08 result hanged=false: 2033/05/18 03:34:08 #0: triaging type=7 2033/05/18 03:34:08 triaging input for call #4 mmap$IORING_OFF_SQ_RING (new signal=1) [662684ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146182 #0 [662694ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [662695ms] <- openat=0x3 errno=14 cover=6708 #0 [662696ms] -> creat(0x20000000, 0x0) #0 [662696ms] <- creat=0x4 errno=14 cover=4991 #0 [662697ms] -> writev(0x4, 0x20000440, 0x1) #0 [662697ms] <- writev=0x1 errno=14 cover=2953 #0 [662698ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [662702ms] <- perf_event_open=0x5 errno=14 cover=9382 #0 [662703ms] -> mmap$IORING_OFF_SQ_RING(0x20ffa000, 0x4000, 0x0, 0x12, 0x3, 0x0) #0 [662703ms] <- mmap$IORING_OFF_SQ_RING=0x20ffa000 errno=14 cover=3745 #0 [662704ms] -> ioctl$EXT4_IOC_SWAP_BOOT(0x4, 0x6611) #0 [662705ms] <- ioctl$EXT4_IOC_SWAP_BOOT=0x0 errno=14 cover=11051 #0 [662706ms] -> close(0x5) #0 [662711ms] <- close=0x0 errno=14 cover=7299 03:34:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000240)="e8", 0x1}], 0x1) r2 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) close(r2) 2033/05/18 03:34:08 result hanged=false: [662732ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146184 #0 [662742ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [662745ms] <- openat=0x3 errno=14 cover=6722 #0 [662746ms] -> creat(0x20000000, 0x0) #0 [662747ms] <- creat=0x4 errno=14 cover=4936 #0 [662747ms] -> writev(0x4, 0x20000440, 0x1) #0 [662748ms] <- writev=0x1 errno=14 cover=2888 #0 [662748ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [662752ms] <- perf_event_open=0x5 errno=14 cover=9356 #0 [662753ms] -> mmap$IORING_OFF_SQ_RING(0x20ffa000, 0x4000, 0x0, 0x12, 0x3, 0x0) #0 [662753ms] <- mmap$IORING_OFF_SQ_RING=0x20ffa000 errno=14 cover=3991 #0 [662754ms] -> ioctl$EXT4_IOC_SWAP_BOOT(0x4, 0x6611) #0 [662755ms] <- ioctl$EXT4_IOC_SWAP_BOOT=0x0 errno=14 cover=10220 #0 [662757ms] -> close(0x5) #0 [662762ms] <- close=0x0 errno=14 cover=7305 03:34:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000240)="e8", 0x1}], 0x1) r2 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) close(r2) 2033/05/18 03:34:08 result hanged=false: [662783ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146186 #0 [662792ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [662797ms] <- openat=0x3 errno=14 cover=6802 #0 [662798ms] -> creat(0x20000000, 0x0) #0 [662799ms] <- creat=0x4 errno=14 cover=4959 #0 [662800ms] -> writev(0x4, 0x20000440, 0x1) #0 [662801ms] <- writev=0x1 errno=14 cover=2913 #0 [662802ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [662807ms] <- perf_event_open=0x5 errno=14 cover=9398 #0 [662808ms] -> mmap$IORING_OFF_SQ_RING(0x20ffa000, 0x4000, 0x0, 0x12, 0x3, 0x0) #0 [662809ms] <- mmap$IORING_OFF_SQ_RING=0x20ffa000 errno=14 cover=3907 #0 [662810ms] -> ioctl$EXT4_IOC_SWAP_BOOT(0x4, 0x6611) #0 [662812ms] <- ioctl$EXT4_IOC_SWAP_BOOT=0x0 errno=14 cover=8986 #0 [662814ms] -> close(0x5) #0 [662819ms] <- close=0x0 errno=14 cover=7341 2033/05/18 03:34:08 result hanged=false: 2033/05/18 03:34:08 added new input for call #4 mmap$IORING_OFF_SQ_RING to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000240)="e8", 0x1}], 0x1) r2 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) close(r2) 03:34:08 executing program 0: r0 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000300)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) [662852ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146188 #0 [662863ms] -> socket$inet(0x2, 0x3, 0xff) #0 [662866ms] <- socket$inet=0x3 errno=14 cover=1677 #0 [662867ms] -> setsockopt$inet_mreqn(0x3, 0x0, 0x40, 0x20000300, 0xc) #0 [662867ms] <- setsockopt$inet_mreqn=0xffffffffffffffff errno=22 cover=212 enabling collider #0 [662868ms] -> socket$inet(0x2, 0x3, 0xff) #0 [662868ms] <- socket$inet=0x3 errno=14 cover=1690 03:34:08 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6f02, &(0x7f0000000180), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 2033/05/18 03:34:08 result hanged=false: 2033/05/18 03:34:08 poll: candidates=8 inputs=0 signal=0 [662890ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146190 #0 [662899ms] -> syz_io_uring_setup(0x0, 0x0, 0x20ffb000, 0x20ffb000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [662903ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=1411 #0 [662903ms] -> syz_io_uring_setup(0x6f02, 0x20000180, 0x20ffc000, 0x20ffd000, 0x20000200, 0x20000240) #0 [662906ms] <- syz_io_uring_setup=0x3 errno=14 cover=21473 enabling collider #0 [662906ms] -> syz_io_uring_setup(0x0, 0x0, 0x20ffb000, 0x20ffb000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [662907ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=1170 03:34:08 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./mnt\x00', 0x0) 2033/05/18 03:34:08 result hanged=false: [662926ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146192 #0 [662936ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [662938ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12832 #0 [662940ms] -> mount(0x0, 0x20000080, 0x200000c0, 0x0, 0x0) #0 [662944ms] <- mount=0x0 errno=14 cover=12948 #0 [662944ms] -> umount2(0x20000000, 0x0) #0 [662947ms] <- umount2=0x0 errno=14 cover=11020 enabling collider #0 [662948ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [662948ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1365 #0 [662950ms] -> mount(0x0, 0x20000080, 0x200000c0, 0x0, 0x0) #0 [662953ms] <- mount=0x0 errno=14 cover=13027 pthread_create failed (errno 11) 03:34:08 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./mnt\x00', 0x0) 2033/05/18 03:34:08 result hanged=false: 2033/05/18 03:34:08 #0: triaging type=7 2033/05/18 03:34:08 triaging input for call #1 mount (new signal=1) umount(./4997/mnt) [663006ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146294 #0 [663016ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [663018ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12770 #0 [663022ms] -> mount(0x0, 0x20000080, 0x200000c0, 0x0, 0x0) #0 [663025ms] <- mount=0x0 errno=14 cover=13041 #0 [663026ms] -> umount2(0x20000000, 0x0) #0 [663028ms] <- umount2=0x0 errno=14 cover=10981 03:34:08 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./mnt\x00', 0x0) 2033/05/18 03:34:08 result hanged=false: [663050ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146296 #0 [663060ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [663067ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12753 #0 [663068ms] -> mount(0x0, 0x20000080, 0x200000c0, 0x0, 0x0) #0 [663071ms] <- mount=0x0 errno=14 cover=13044 #0 [663072ms] -> umount2(0x20000000, 0x0) #0 [663074ms] <- umount2=0x0 errno=14 cover=11001 2033/05/18 03:34:08 result hanged=false: 03:34:08 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./mnt\x00', 0x0) [663096ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146298 #0 [663106ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [663111ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12698 #0 [663113ms] -> mount(0x0, 0x20000080, 0x200000c0, 0x0, 0x0) #0 [663117ms] <- mount=0x0 errno=14 cover=12889 #0 [663118ms] -> umount2(0x20000000, 0x0) #0 [663120ms] <- umount2=0x0 errno=14 cover=10962 2033/05/18 03:34:08 result hanged=false: 2033/05/18 03:34:08 added new input for call #1 mount to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./mnt\x00', 0x0) 03:34:08 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) [663147ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146300 #0 [663156ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000140, 0x0, 0x0) #0 [663159ms] <- openat$loop_ctrl=0xffffffffffffffff errno=2 cover=1159 enabling collider #0 [663159ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000140, 0x0, 0x0) #0 [663160ms] <- openat$loop_ctrl=0xffffffffffffffff errno=2 cover=1194 03:34:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mq_getsetattr(r0, 0x0, 0x0) 2033/05/18 03:34:08 result hanged=false: [663179ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146302 #0 [663191ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [663192ms] <- openat=0x3 errno=14 cover=6732 #0 [663193ms] -> mq_getsetattr(0x3, 0x0, 0x0) #0 [663193ms] <- mq_getsetattr=0xffffffffffffffff errno=9 cover=63 enabling collider #0 [663194ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [663195ms] <- openat=0x3 errno=14 cover=1144 03:34:08 executing program 0: clone3(&(0x7f00000002c0)={0x100000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2033/05/18 03:34:08 result hanged=false: [663216ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146304 #0 [663227ms] -> clone3(0x200002c0, 0x58) #0 [663245ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 enabling collider #0 [663249ms] -> clone3(0x200002c0, 0x58) #0 [663268ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 2033/05/18 03:34:08 result hanged=false: 03:34:08 executing program 0: io_uring_setup(0x7c7f, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0x2b0}) [663288ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146308 #0 [663297ms] -> io_uring_setup(0x7c7f, 0x200003c0) #0 [663300ms] <- io_uring_setup=0x3 errno=14 cover=6873 enabling collider #0 [663303ms] -> io_uring_setup(0x7c7f, 0x200003c0) #0 [663308ms] <- io_uring_setup=0x3 errno=14 cover=6015 03:34:08 executing program 0: prctl$PR_GET_SECUREBITS(0x1b) 2033/05/18 03:34:08 result hanged=false: [663341ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146310 #0 [663350ms] -> prctl$PR_GET_SECUREBITS(0x1b) #0 [663350ms] <- prctl$PR_GET_SECUREBITS=0x0 errno=22 cover=43 enabling collider #0 [663351ms] -> prctl$PR_GET_SECUREBITS(0x1b) #0 [663351ms] <- prctl$PR_GET_SECUREBITS=0x0 errno=22 cover=43 03:34:08 executing program 0: kexec_load(0x7, 0x1, &(0x7f0000000040)=[{0x0}], 0x1) 2033/05/18 03:34:08 result hanged=false: [663372ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146312 #0 [663383ms] -> kexec_load(0x7, 0x1, 0x20000040, 0x1) #0 [663383ms] <- kexec_load=0xffffffffffffffff errno=99 cover=130 enabling collider #0 [663384ms] -> kexec_load(0x7, 0x1, 0x20000040, 0x1) #0 [663384ms] <- kexec_load=0xffffffffffffffff errno=99 cover=130 03:34:08 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400400, 0x0) r0 = fsopen(&(0x7f00000001c0)='v7\x00', 0x1) pread64(r0, &(0x7f0000000200)=""/83, 0x53, 0xb17) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x92000, 0x51) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = getgid() getpid() setgid(r4) r5 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x8040) timerfd_settime(r5, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000280)={{0x2, r1, r4, r1, r2, 0x140, 0xfff}, 0x78058c79, 0x83, 0x0, 0x4, 0x0, 0x0, 0x8}) 2033/05/18 03:34:08 result hanged=false: 2033/05/18 03:34:08 poll: candidates=8 inputs=0 signal=0 [663409ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146314 #0 [663418ms] -> openat$hwrng(0xffffffffffffff9c, 0x20000000, 0x400400, 0x0) #0 [663419ms] <- openat$hwrng=0xffffffffffffffff errno=22 cover=48 #0 [663419ms] -> fsopen(0x200001c0, 0x1) #0 [663432ms] <- fsopen=0xffffffffffffffff errno=19 cover=1303 #0 [663432ms] -> pread64(0xffffffffffffffff, 0x20000200, 0x53, 0xb17) #0 [663433ms] <- pread64=0xffffffffffffffff errno=9 cover=46 #0 [663433ms] -> openat(0xffffffffffffffff, 0x20000100, 0x92000, 0x51) #0 [663433ms] <- openat=0xffffffffffffffff errno=9 cover=690 #0 [663433ms] -> stat(0x20001cc0, 0x20001c00) #0 [663433ms] <- stat=0x0 errno=14 cover=533 #0 [663433ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [663433ms] <- setresuid=0x0 errno=14 cover=382 #0 [663433ms] -> shmget$private(0x0, 0x1000, 0x0, 0x20ffe000) #0 [663434ms] <- shmget$private=0x23 errno=14 cover=1062 #0 [663434ms] -> shmat(0x23, 0x20ffc000, 0x4000) #0 [663434ms] <- shmat=0xffffffffffffffff errno=13 cover=77 #0 [663434ms] -> getgid() #0 [663434ms] <- getgid=0x0 errno=14 cover=43 #0 [663434ms] -> getpid() #0 [663434ms] <- getpid=0x23b8a errno=14 cover=48 #0 [663434ms] -> setgid(0x0) #0 [663434ms] <- setgid=0x0 errno=14 cover=313 #0 [663434ms] -> syz_open_dev$vcsu(0x20000000, 0x4, 0x8040) #0 [663434ms] <- syz_open_dev$vcsu=0xffffffffffffffff errno=2 cover=1172 #0 [663434ms] -> timerfd_settime(0xffffffffffffffff, 0x0, 0x20000180, 0x200001c0) #0 [663434ms] <- timerfd_settime=0xffffffffffffffff errno=9 cover=95 #0 [663434ms] -> shmctl$IPC_SET(0x23, 0x1, 0x20000280) #0 [663435ms] <- shmctl$IPC_SET=0x0 errno=14 cover=141 enabling collider #0 [663435ms] -> openat$hwrng(0xffffffffffffff9c, 0x20000000, 0x400400, 0x0) #0 [663435ms] <- openat$hwrng=0xffffffffffffffff errno=22 cover=48 #0 [663435ms] -> fsopen(0x200001c0, 0x1) #0 [663435ms] <- fsopen=0xffffffffffffffff errno=1 cover=43 pthread_create failed (errno 11) 2033/05/18 03:34:08 result hanged=false: 03:34:08 executing program 0: mlock(&(0x7f0000ff9000/0x2000)=nil, 0x2000) [663486ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146416 #0 [663496ms] -> mlock(0x20ff9000, 0x2000) #0 [663499ms] <- mlock=0x0 errno=14 cover=1807 enabling collider #0 [663500ms] -> mlock(0x20ff9000, 0x2000) #0 [663500ms] <- mlock=0x0 errno=14 cover=591 2033/05/18 03:34:08 result hanged=false: 03:34:08 executing program 0: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) [663520ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146418 #0 [663529ms] -> mkdirat$cgroup(0xffffffffffffffff, 0x20000000, 0x1ff) #0 [663530ms] <- mkdirat$cgroup=0xffffffffffffffff errno=9 cover=292 enabling collider #0 [663530ms] -> mkdirat$cgroup(0xffffffffffffffff, 0x20000000, 0x1ff) #0 [663530ms] <- mkdirat$cgroup=0xffffffffffffffff errno=9 cover=292 2033/05/18 03:34:08 result hanged=false: 03:34:08 executing program 0: r0 = fsopen(&(0x7f0000000040)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nolazytime\x00', 0x0, 0x0) [663549ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146420 #0 [663559ms] -> fsopen(0x20000040, 0x0) #0 [663563ms] <- fsopen=0x3 errno=14 cover=929 #0 [663565ms] -> fsconfig$FSCONFIG_CMD_CREATE(0x3, 0x6, 0x0, 0x0, 0x0) #0 [663567ms] <- fsconfig$FSCONFIG_CMD_CREATE=0x0 errno=14 cover=9723 #0 [663567ms] -> fsconfig$FSCONFIG_SET_FLAG(0x3, 0x0, 0x20000000, 0x0, 0x0) #0 [663568ms] <- fsconfig$FSCONFIG_SET_FLAG=0xffffffffffffffff errno=16 cover=302 enabling collider #0 [663569ms] -> fsopen(0x20000040, 0x0) #0 [663569ms] <- fsopen=0x3 errno=14 cover=961 #0 [663569ms] -> fsconfig$FSCONFIG_CMD_CREATE(0x3, 0x6, 0x0, 0x0, 0x0) #0 [663572ms] <- fsconfig$FSCONFIG_CMD_CREATE=0x0 errno=14 cover=10189 pthread_create failed (errno 11) 03:34:09 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000007380)=[{{&(0x7f0000002740)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x8, 0x3, 0x0, [{@private}, {}]}]}}}], 0x28}}], 0x1, 0x0) 2033/05/18 03:34:09 result hanged=false: [663625ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146522 #0 [663633ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [663634ms] <- socket$inet6_udplite=0x3 errno=14 cover=1641 #0 [663635ms] -> sendmmsg$inet(0x3, 0x20007380, 0x1, 0x0) #0 [663636ms] <- sendmmsg$inet=0x1 errno=14 cover=1886 enabling collider #0 [663636ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [663637ms] <- socket$inet6_udplite=0x3 errno=14 cover=1654 03:34:09 executing program 0: getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000001040)=""/214, &(0x7f0000001140)=0xd6) pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x3, 0x0, &(0x7f0000001140)) 2033/05/18 03:34:09 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [663659ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146524 #0 [663668ms] -> getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x20001040, 0x20001140) #0 [663672ms] <- getsockopt$netlink=0xffffffffffffffff errno=9 cover=49 #0 [663674ms] -> pkey_mprotect(0x20000000, 0x4000, 0x4, 0xffffffffffffffff) #0 [663675ms] <- pkey_mprotect=0x0 errno=14 cover=641 #0 [663676ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [663676ms] <- socket$nl_generic=0x3 errno=14 cover=1434 SIGSEGV on 0x20001140, skipping #0 [663677ms] -> getsockopt$netlink(0x3, 0x10e, 0x3, 0x0, 0x20001140) #0 [663677ms] <- getsockopt$netlink=0xffffffffffffffff errno=14 cover=242 enabling collider SIGSEGV on 0x20001140, skipping #0 [663678ms] -> getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x20001040, 0x20001140) #0 [663678ms] <- getsockopt$netlink=0xffffffffffffffff errno=9 cover=49 #0 [663679ms] -> pkey_mprotect(0x20000000, 0x4000, 0x4, 0xffffffffffffffff) #0 [663679ms] <- pkey_mprotect=0x0 errno=14 cover=184 pthread_create failed (errno 11) 03:34:09 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x200008f, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 2033/05/18 03:34:09 result hanged=false: [663728ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146626 #0 [663739ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [663741ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12981 #0 [663742ms] -> mount(0x0, 0x20000000, 0x20000040, 0x200008f, 0x0) #0 [663746ms] <- mount=0x0 errno=14 cover=12434 #0 [663746ms] -> umount2(0x200000c0, 0x0) #0 [663748ms] <- umount2=0x0 errno=14 cover=10726 enabling collider #0 [663749ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [663749ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1353 #0 [663750ms] -> mount(0x0, 0x20000000, 0x20000040, 0x200008f, 0x0) #0 [663753ms] <- mount=0x0 errno=14 cover=12659 pthread_create failed (errno 11) umount(./5013/file0) 03:34:09 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x200008f, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 2033/05/18 03:34:09 result hanged=false: 2033/05/18 03:34:09 #0: triaging type=7 2033/05/18 03:34:09 triaging input for call #0 syz_mount_image$ext4 (new signal=2) [663806ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146728 #0 [663816ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [663818ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12711 #0 [663820ms] -> mount(0x0, 0x20000000, 0x20000040, 0x200008f, 0x0) #0 [663823ms] <- mount=0x0 errno=14 cover=12304 #0 [663825ms] -> umount2(0x200000c0, 0x0) #0 [663826ms] <- umount2=0x0 errno=14 cover=10627 2033/05/18 03:34:09 result hanged=false: 03:34:09 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x200008f, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [663849ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146730 #0 [663859ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [663862ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12746 #0 [663863ms] -> mount(0x0, 0x20000000, 0x20000040, 0x200008f, 0x0) #0 [663866ms] <- mount=0x0 errno=14 cover=12299 #0 [663867ms] -> umount2(0x200000c0, 0x0) #0 [663869ms] <- umount2=0x0 errno=14 cover=12683 03:34:09 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x200008f, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 2033/05/18 03:34:09 result hanged=false: [663889ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146732 #0 [663899ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [663901ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12755 #0 [663903ms] -> mount(0x0, 0x20000000, 0x20000040, 0x200008f, 0x0) #0 [663906ms] <- mount=0x0 errno=14 cover=12274 #0 [663908ms] -> umount2(0x200000c0, 0x0) #0 [663909ms] <- umount2=0x0 errno=14 cover=10649 2033/05/18 03:34:09 result hanged=false: 2033/05/18 03:34:09 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x200008f, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 03:34:09 executing program 0: r0 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r0, &(0x7f0000002f80)="e1c97353f72cb8b170622cd1648fd630d7209e7d", 0x14, 0xe00, &(0x7f0000003040)={0x2, 0x0, @remote}, 0x10) [663951ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146734 #0 [663959ms] -> socket$inet(0x2, 0x3, 0xff) #0 [663959ms] <- socket$inet=0x3 errno=14 cover=1702 #0 [663960ms] -> sendto$inet(0x3, 0x20002f80, 0x14, 0xe00, 0x20003040, 0x10) [ 1413.937402] SELinux: failure in selinux_parse_skb(), unable to parse packet #0 [663962ms] <- sendto$inet=0xffffffffffffffff errno=1 cover=2862 enabling collider #0 [663964ms] -> socket$inet(0x2, 0x3, 0xff) #0 [663964ms] <- socket$inet=0x3 errno=14 cover=1665 #0 [663966ms] -> sendto$inet(0x3, 0x20002f80, 0x14, 0xe00, 0x20003040, 0x10) #0 [663966ms] <- sendto$inet=0xffffffffffffffff errno=9 cover=109 03:34:09 executing program 0: r0 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r0, &(0x7f0000002f80)="e1c97353f72cb8b170622cd1648fd630d7209e7d", 0x14, 0xe00, &(0x7f0000003040)={0x2, 0x0, @remote}, 0x10) 2033/05/18 03:34:09 result hanged=false: 2033/05/18 03:34:09 #0: triaging type=7 2033/05/18 03:34:09 triaging input for call #1 sendto$inet (new signal=11) iptable filter/2: resetting iptable mangle/2: resetting [663985ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146736 #0 [663996ms] -> socket$inet(0x2, 0x3, 0xff) #0 [663997ms] <- socket$inet=0x3 errno=14 cover=1669 #0 [663998ms] -> sendto$inet(0x3, 0x20002f80, 0x14, 0xe00, 0x20003040, 0x10) [ 1413.975230] SELinux: failure in selinux_parse_skb(), unable to parse packet #0 [664000ms] <- sendto$inet=0xffffffffffffffff errno=1 cover=2777 2033/05/18 03:34:09 result hanged=false: 03:34:09 executing program 0: r0 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r0, &(0x7f0000002f80)="e1c97353f72cb8b170622cd1648fd630d7209e7d", 0x14, 0xe00, &(0x7f0000003040)={0x2, 0x0, @remote}, 0x10) iptable filter/2: resetting iptable mangle/2: resetting [664021ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146738 #0 [664031ms] -> socket$inet(0x2, 0x3, 0xff) #0 [664032ms] <- socket$inet=0x3 errno=14 cover=1720 #0 [664033ms] -> sendto$inet(0x3, 0x20002f80, 0x14, 0xe00, 0x20003040, 0x10) [ 1414.009667] SELinux: failure in selinux_parse_skb(), unable to parse packet #0 [664034ms] <- sendto$inet=0xffffffffffffffff errno=1 cover=2755 2033/05/18 03:34:09 result hanged=false: 03:34:09 executing program 0: r0 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r0, &(0x7f0000002f80)="e1c97353f72cb8b170622cd1648fd630d7209e7d", 0x14, 0xe00, &(0x7f0000003040)={0x2, 0x0, @remote}, 0x10) iptable filter/2: resetting iptable mangle/2: resetting [664056ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146740 #0 [664065ms] -> socket$inet(0x2, 0x3, 0xff) #0 [664067ms] <- socket$inet=0x3 errno=14 cover=1731 [ 1414.045341] SELinux: failure in selinux_parse_skb(), unable to parse packet #0 [664068ms] -> sendto$inet(0x3, 0x20002f80, 0x14, 0xe00, 0x20003040, 0x10) #0 [664071ms] <- sendto$inet=0xffffffffffffffff errno=1 cover=2723 2033/05/18 03:34:09 result hanged=false: 2033/05/18 03:34:09 added new input for call #1 sendto$inet to corpus: r0 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r0, &(0x7f0000002f80)="e1c97353f72cb8b170622cd1648fd630d7209e7d", 0x14, 0xe00, &(0x7f0000003040)={0x2, 0x0, @remote}, 0x10) 03:34:09 executing program 0: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) syz_open_procfs$userns(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x20040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f00000006c0)=[{0x6, 0x3, 0x5, 0x8000}]}) iptable filter/2: resetting iptable mangle/2: resetting [664102ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2033/05/18 03:34:09 poll: candidates=8 inputs=0 signal=0 spawned worker pid 146742 #0 [664110ms] -> ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) #0 [664113ms] <- ioctl$HIDIOCAPPLICATION=0xffffffffffffffff errno=9 cover=45 #0 [664113ms] -> syz_open_procfs$userns(0x0, 0x0) #0 [664113ms] <- syz_open_procfs$userns=0xffffffffffffffff errno=2 cover=2348 #0 [664113ms] -> ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) #0 [664114ms] <- ioctl$sock_SIOCGIFINDEX_80211=0xffffffffffffffff errno=9 cover=45 #0 [664114ms] -> sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x20000680, 0x20040) #0 [664114ms] <- sendmsg$NL80211_CMD_SET_WIPHY_NETNS=0xffffffffffffffff errno=9 cover=52 #0 [664114ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000700) [ 1414.101235] audit: type=1326 audit(2000000049.574:912): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=276222 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=1 compat=0 ip=0x7fe19e0d25ff code=0x0 killing hanging pid 146742 2033/05/18 03:34:12 result hanged=false: 03:34:12 executing program 0: semop(0x0, &(0x7f0000000140)=[{0x0, 0x9, 0x1800}], 0x1) iptable filter/2: resetting iptable mangle/2: resetting [667134ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146744 #0 [667144ms] -> semop(0x0, 0x20000140, 0x1) #0 [667149ms] <- semop=0xffffffffffffffff errno=34 cover=374 enabling collider #0 [667151ms] -> semop(0x0, 0x20000140, 0x1) #0 [667151ms] <- semop=0xffffffffffffffff errno=34 cover=197 03:34:12 executing program 0: semop(0x0, &(0x7f0000000140)=[{0x0, 0x9, 0x1800}], 0x1) 2033/05/18 03:34:12 result hanged=false: 2033/05/18 03:34:12 #0: triaging type=7 2033/05/18 03:34:12 triaging input for call #0 semop (new signal=2) [667169ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146746 #0 [667178ms] -> semop(0x0, 0x20000140, 0x1) #0 [667179ms] <- semop=0xffffffffffffffff errno=34 cover=317 03:34:12 executing program 0: semop(0x0, &(0x7f0000000140)=[{0x0, 0x9, 0x1800}], 0x1) 2033/05/18 03:34:12 result hanged=false: [667198ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146748 #0 [667207ms] -> semop(0x0, 0x20000140, 0x1) #0 [667208ms] <- semop=0xffffffffffffffff errno=34 cover=317 03:34:12 executing program 0: semop(0x0, &(0x7f0000000140)=[{0x0, 0x9, 0x1800}], 0x1) 2033/05/18 03:34:12 result hanged=false: [667228ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146750 #0 [667238ms] -> semop(0x0, 0x20000140, 0x1) #0 [667238ms] <- semop=0xffffffffffffffff errno=34 cover=374 2033/05/18 03:34:12 result hanged=false: 2033/05/18 03:34:12 added new input for call #0 semop to corpus: semop(0x0, &(0x7f0000000140)=[{0x0, 0x9, 0x1800}], 0x1) 03:34:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x40000, 0x3, &(0x7f0000000340)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000001500)="ed410000cb384acfc1f67922f6fbdcd09d59891f9be9ffffff5bc700080000dff465d39c", 0x24, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) [667262ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146752 #0 [667271ms] -> syz_mount_image$ext4(0x20000040, 0x200000c0, 0x40000, 0x3, 0x20000340, 0x0, 0x20012c00) #0 [667276ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=2 cover=6722 enabling collider #0 [667276ms] -> syz_mount_image$ext4(0x20000040, 0x200000c0, 0x40000, 0x3, 0x20000340, 0x0, 0x20012c00) #0 [667277ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=2 cover=6668 03:34:12 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) readv(r0, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/66, 0x42}], 0x1) request_key(0x0, 0x0, 0x0, 0x0) 2033/05/18 03:34:12 result hanged=false: [667296ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146754 #0 [667306ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x200001c0, 0x0, 0x0) #0 [667311ms] <- openat$vga_arbiter=0xffffffffffffffff errno=2 cover=1180 #0 [667311ms] -> readv(0xffffffffffffffff, 0x20000840, 0x1) #0 [667314ms] <- readv=0xffffffffffffffff errno=9 cover=47 #0 [667315ms] -> request_key(0x0, 0x0, 0x0, 0x0) #0 [667316ms] <- request_key=0xffffffffffffffff errno=14 cover=418 enabling collider #0 [667317ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x200001c0, 0x0, 0x0) #0 [667317ms] <- openat$vga_arbiter=0xffffffffffffffff errno=2 cover=1167 #0 [667318ms] -> readv(0xffffffffffffffff, 0x20000840, 0x1) #0 [667318ms] <- readv=0xffffffffffffffff errno=9 cover=47 pthread_create failed (errno 11) 03:34:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/51, 0x33}], 0x1, 0x6, 0x0) 2033/05/18 03:34:12 result hanged=false: [667370ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146856 #0 [667379ms] -> syz_open_procfs(0x0, 0x20000000) #0 [667379ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2398 #0 [667380ms] -> preadv(0xffffffffffffffff, 0x20000380, 0x1, 0x6, 0x0) #0 [667380ms] <- preadv=0xffffffffffffffff errno=9 cover=47 enabling collider #0 [667381ms] -> syz_open_procfs(0x0, 0x20000000) #0 [667381ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2397 03:34:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='attr/sockcreate\x00') read$hidraw(r0, 0x0, 0x7ffffffff000) 2033/05/18 03:34:12 result hanged=false: [667396ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146858 #0 [667405ms] -> syz_open_procfs(0x0, 0x20000440) #0 [667405ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2367 #0 [667406ms] -> read$hidraw(0xffffffffffffffff, 0x0, 0x7ffffffff000) #0 [667406ms] <- read$hidraw=0xffffffffffffffff errno=9 cover=47 enabling collider #0 [667406ms] -> syz_open_procfs(0x0, 0x20000440) #0 [667407ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2381 2033/05/18 03:34:12 result hanged=false: 03:34:12 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, r0, 0x0) [667423ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146860 #0 [667434ms] -> add_key$keyring(0x20000040, 0x20000080, 0x0, 0x0, 0xfffffffffffffffd) #0 [667434ms] <- add_key$keyring=0x3645ee67 errno=14 cover=1327 #0 [667435ms] -> add_key$keyring(0x20000000, 0x200000c0, 0x0, 0x0, 0xfffffffffffffffc) #0 [667435ms] <- add_key$keyring=0x2583937d errno=14 cover=1736 #0 [667435ms] -> keyctl$KEYCTL_MOVE(0x1e, 0x2583937d, 0xfffffffffffffffc, 0x3645ee67, 0x0) #0 [667436ms] <- keyctl$KEYCTL_MOVE=0x0 errno=14 cover=2135 enabling collider #0 [667436ms] -> add_key$keyring(0x20000040, 0x20000080, 0x0, 0x0, 0xfffffffffffffffd) #0 [667436ms] <- add_key$keyring=0x2b8a4cec errno=14 cover=1136 #0 [667436ms] -> add_key$keyring(0x20000000, 0x200000c0, 0x0, 0x0, 0xfffffffffffffffc) #0 [667437ms] <- add_key$keyring=0x276c9afb errno=14 cover=1828 pthread_create failed (errno 11) 03:34:12 executing program 0: syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) 2033/05/18 03:34:12 result hanged=false: [667493ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146962 #0 [667501ms] -> syz_open_dev$sg(0x200004c0, 0x0, 0x0) #0 [667505ms] <- syz_open_dev$sg=0xffffffffffffffff errno=2 cover=1203 enabling collider #0 [667507ms] -> syz_open_dev$sg(0x200004c0, 0x0, 0x0) #0 [667508ms] <- syz_open_dev$sg=0xffffffffffffffff errno=2 cover=1188 03:34:12 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @redirect={0x6c, 0x0, 0x0, @multicast2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @dev}}}}}}, 0x0) 2033/05/18 03:34:12 result hanged=false: 2033/05/18 03:34:12 poll: candidates=8 inputs=0 signal=0 [667523ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146964 #0 [667534ms] -> syz_emit_ethernet(0x3e, 0x20000240, 0x0) 01 80 c2 00 00 00 aa aa aa aa aa aa 08 00 45 00 00 30 00 00 00 00 00 01 95 0c 64 01 01 02 ac 14 14 aa 6c 00 ae e7 e0 00 00 02 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac 14 14 00 #0 [667535ms] <- syz_emit_ethernet=0x3e errno=14 cover=18831 enabling collider #0 [667535ms] -> syz_emit_ethernet(0x3e, 0x20000240, 0x0) 01 80 c2 00 00 00 aa aa aa aa aa aa 08 00 45 00 00 30 00 00 00 00 00 01 95 0c 64 01 01 02 ac 14 14 aa 6c 00 ae e7 e0 00 00 02 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac 14 14 00 #0 [667536ms] <- syz_emit_ethernet=0x3e errno=14 cover=18778 03:34:12 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000540)={0x0, @can, @xdp, @xdp}) fsopen(&(0x7f0000000700)='hugetlbfs\x00', 0x0) syz_io_uring_setup(0x7639, &(0x7f0000000900), &(0x7f0000fef000/0xf000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000000980), &(0x7f00000009c0)) 2033/05/18 03:34:12 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [667557ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 146966 #0 [667568ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [667568ms] <- syz_init_net_socket$bt_sco=0xffffffffffffffff errno=2 cover=1170 #0 [667569ms] -> syz_genetlink_get_family_id$mptcp(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(mptcp_pm, -1) netlink: failed to get family id for mptcp_pm: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [667586ms] <- syz_genetlink_get_family_id$mptcp=0xffffffffffffffff errno=2 cover=16181 #0 [667587ms] -> ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) #0 [667587ms] <- ioctl$sock_ipv6_tunnel_SIOCCHGPRL=0xffffffffffffffff errno=9 cover=45 #0 [667588ms] -> syz_genetlink_get_family_id$batadv(0x200002c0, 0xffffffffffffffff) syz_genetlink_get_family_id(batadv, -1) netlink: failed to get family id for batadv: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [667607ms] <- syz_genetlink_get_family_id$batadv=0xffffffffffffffff errno=2 cover=8252 #0 [667608ms] -> ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) #0 [667609ms] <- ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL=0xffffffffffffffff errno=9 cover=45 #0 [667609ms] -> ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x20000540) #0 [667609ms] <- ioctl$sock_SIOCDELRT=0xffffffffffffffff errno=9 cover=45 #0 [667610ms] -> fsopen(0x20000700, 0x0) #0 [667610ms] <- fsopen=0x3 errno=14 cover=991 #0 [667610ms] -> syz_io_uring_setup(0x7639, 0x20000900, 0x20fef000, 0x20ff4000, 0x20000980, 0x200009c0) #0 [667613ms] <- syz_io_uring_setup=0x4 errno=14 cover=21196 enabling collider #0 [667614ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [667614ms] <- syz_init_net_socket$bt_sco=0xffffffffffffffff errno=2 cover=1157 #0 [667615ms] -> syz_genetlink_get_family_id$mptcp(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(mptcp_pm, -1) netlink: failed to get family id for mptcp_pm: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [667633ms] <- syz_genetlink_get_family_id$mptcp=0xffffffffffffffff errno=2 cover=8138 pthread_create failed (errno 11) 03:34:13 executing program 0: syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) 2033/05/18 03:34:13 result hanged=false: [667673ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 147068 #0 [667685ms] -> syz_genetlink_get_family_id$team(0x200002c0, 0xffffffffffffffff) syz_genetlink_get_family_id(team, -1) netlink: failed to get family id for team: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [667704ms] <- syz_genetlink_get_family_id$team=0xffffffffffffffff errno=2 cover=10975 enabling collider #0 [667705ms] -> syz_genetlink_get_family_id$team(0x200002c0, 0xffffffffffffffff) syz_genetlink_get_family_id(team, -1) netlink: failed to get family id for team: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [667722ms] <- syz_genetlink_get_family_id$team=0xffffffffffffffff errno=2 cover=8034 03:34:13 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f00000000c0), 0x14) sendmmsg$sock(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{&(0x7f0000000040)=@ethernet, 0x80, 0x0}}], 0x2, 0x0) 2033/05/18 03:34:13 result hanged=false: [667742ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 147070 #0 [667752ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [667752ms] <- syz_init_net_socket$802154_dgram=0xffffffffffffffff errno=2 cover=1184 #0 [667753ms] -> bind$802154_dgram(0xffffffffffffffff, 0x20000000, 0x14) #0 [667753ms] <- bind$802154_dgram=0xffffffffffffffff errno=9 cover=48 #0 [667753ms] -> connect$802154_dgram(0xffffffffffffffff, 0x200000c0, 0x14) #0 [667753ms] <- connect$802154_dgram=0xffffffffffffffff errno=9 cover=46 #0 [667753ms] -> sendmmsg$sock(0xffffffffffffffff, 0x20000180, 0x2, 0x0) #0 [667754ms] <- sendmmsg$sock=0xffffffffffffffff errno=9 cover=51 enabling collider #0 [667755ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [667755ms] <- syz_init_net_socket$802154_dgram=0xffffffffffffffff errno=2 cover=1205 #0 [667756ms] -> bind$802154_dgram(0xffffffffffffffff, 0x20000000, 0x14) #0 [667758ms] <- bind$802154_dgram=0xffffffffffffffff errno=9 cover=48 pthread_create failed (errno 11) 03:34:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) 2033/05/18 03:34:13 result hanged=false: [667812ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 147172 #0 [667822ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [667827ms] <- perf_event_open=0x3 errno=14 cover=11076 #0 [667828ms] -> setpriority(0x0, 0x0, 0x0) #0 [667828ms] <- setpriority=0xffffffffffffffff errno=13 cover=88 enabling collider #0 [667839ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [667840ms] <- perf_event_open=0x3 errno=14 cover=10676 #0 [667841ms] -> setpriority(0x0, 0x0, 0x0) #0 [667844ms] <- setpriority=0xffffffffffffffff errno=13 cover=59 2033/05/18 03:34:13 result hanged=false: 2033/05/18 03:34:13 #0: triaging type=7 2033/05/18 03:34:13 triaging input for call #1 setpriority (new signal=1) 03:34:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) [667869ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 147174 #0 [667878ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [667880ms] <- perf_event_open=0x3 errno=14 cover=10102 #0 [667881ms] -> setpriority(0x0, 0x0, 0x0) #0 [667881ms] <- setpriority=0xffffffffffffffff errno=13 cover=59 2033/05/18 03:34:13 result hanged=false: 03:34:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) [667908ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 147176 #0 [667917ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [667919ms] <- perf_event_open=0x3 errno=14 cover=10188 #0 [667920ms] -> setpriority(0x0, 0x0, 0x0) #0 [667920ms] <- setpriority=0xffffffffffffffff errno=13 cover=88 03:34:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) 2033/05/18 03:34:13 result hanged=false: [667948ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 147178 #0 [667959ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [667960ms] <- perf_event_open=0x3 errno=14 cover=10531 #0 [667962ms] -> setpriority(0x0, 0x0, 0x0) #0 [667962ms] <- setpriority=0xffffffffffffffff errno=13 cover=88 2033/05/18 03:34:13 result hanged=false: 2033/05/18 03:34:13 added new input for call #1 setpriority to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) 03:34:13 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) [667994ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 147180 #0 [668003ms] -> pipe(0x20000040) #0 [668003ms] <- pipe=0x0 errno=14 cover=1831 #0 [668004ms] -> syz_genetlink_get_family_id$smc(0x20000000, 0x3) syz_genetlink_get_family_id(SMC_PNETID, 3) netlink_send_ext: short netlink write: -1/36 errno=88 netlink: failed to get family id for SMC_PNETID: Socket operation on non-socket syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [668005ms] <- syz_genetlink_get_family_id$smc=0xffffffffffffffff errno=88 cover=2859 enabling collider #0 [668006ms] -> pipe(0x20000040) #0 [668006ms] <- pipe=0x0 errno=14 cover=1160 2033/05/18 03:34:13 result hanged=false: 03:34:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) close(r0) [668025ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 147182 #0 [668033ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [668035ms] <- perf_event_open=0x3 errno=14 cover=9788 #0 [668036ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [668036ms] <- socket$inet6_udplite=0x4 errno=14 cover=1635 #0 [668037ms] -> setsockopt$inet6_mreq(0x4, 0x29, 0x1b, 0x20000040, 0x14) #0 [668038ms] <- setsockopt$inet6_mreq=0x0 errno=14 cover=3018 #0 [668038ms] -> close(0x4) #0 [668038ms] <- close=0x0 errno=14 cover=2599 enabling collider #0 [668053ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [668054ms] <- perf_event_open=0x3 errno=14 cover=9753 #0 [668054ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [668054ms] <- socket$inet6_udplite=0x4 errno=14 cover=1637 pthread_create failed (errno 11) 03:34:13 executing program 0: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x8921, &(0x7f0000001f00)={'sit0\x00', 0x0}) 2033/05/18 03:34:13 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [668118ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 147284 #0 [668126ms] -> socket(0x11, 0x3, 0x0) #0 [668130ms] <- socket=0x3 errno=14 cover=1747 #0 [668132ms] -> ioctl$sock_ipv6_tunnel_SIOCGETPRL(0x3, 0x8921, 0x20001f00) #0 [668134ms] <- ioctl$sock_ipv6_tunnel_SIOCGETPRL=0x0 errno=14 cover=193 enabling collider #0 [668139ms] -> socket(0x11, 0x3, 0x0) #0 [668139ms] <- socket=0x3 errno=14 cover=1695 #0 [668140ms] -> ioctl$sock_ipv6_tunnel_SIOCGETPRL(0x3, 0x8921, 0x20001f00) #0 [668140ms] <- ioctl$sock_ipv6_tunnel_SIOCGETPRL=0xffffffffffffffff errno=9 cover=46 03:34:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2033/05/18 03:34:13 result hanged=false: 2033/05/18 03:34:13 poll: candidates=8 inputs=0 signal=0 [668166ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 147286 #0 [668175ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [668177ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1159 #0 [668178ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000000, 0xffffffffffffffff) syz_genetlink_get_family_id(NLBL_UNLBL, -1) netlink: failed to get family id for NLBL_UNLBL: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [668178ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0xffffffffffffffff errno=2 cover=7714 #0 [668179ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [668179ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1202 enabling collider #0 [668179ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [668179ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1179 #0 [668180ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000000, 0xffffffffffffffff) syz_genetlink_get_family_id(NLBL_UNLBL, -1) netlink: failed to get family id for NLBL_UNLBL: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [668180ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0xffffffffffffffff errno=2 cover=6004 pthread_create failed (errno 11) 03:34:13 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x201) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000700)=[{0x89, 0x4, 0x0, 0x0, @tick, {}, {0x0, 0xff}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"992a2ba71a0d867370417616"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a9c3e89e3fff169f3f9568f3"}}], 0x70) [668230ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2033/05/18 03:34:13 result hanged=false: spawned worker pid 147388 #0 [668240ms] -> openat$sndseq(0xffffffffffffff9c, 0x200000c0, 0x201) #0 [668241ms] <- openat$sndseq=0xffffffffffffffff errno=2 cover=1178 #0 [668242ms] -> ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x20000140) #0 [668242ms] <- ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE=0xffffffffffffffff errno=9 cover=45 #0 [668242ms] -> write$sndseq(0xffffffffffffffff, 0x20000700, 0x70) #0 [668242ms] <- write$sndseq=0xffffffffffffffff errno=9 cover=47 enabling collider #0 [668243ms] -> openat$sndseq(0xffffffffffffff9c, 0x200000c0, 0x201) #0 [668243ms] <- openat$sndseq=0xffffffffffffffff errno=2 cover=1178 #0 [668244ms] -> ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x20000140) #0 [668246ms] <- ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE=0xffffffffffffffff errno=9 cover=45 pthread_create failed (errno 11) 03:34:13 executing program 0: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) rt_sigprocmask(0x0, &(0x7f0000000040), 0x0, 0x8) 2033/05/18 03:34:13 result hanged=false: [668300ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 147490 #0 [668311ms] -> munmap(0x20000000, 0x2000) #0 [668313ms] <- munmap=0x0 errno=14 cover=764 SIGSEGV on 0x20000040, skipping #0 [668315ms] -> rt_sigprocmask(0x0, 0x20000040, 0x0, 0x8) #0 [668316ms] <- rt_sigprocmask=0xffffffffffffffff errno=14 cover=390 enabling collider #0 [668317ms] -> munmap(0x20000000, 0x2000) #0 [668317ms] <- munmap=0x0 errno=14 cover=93 SIGSEGV on 0x20000040, skipping 03:34:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$setstatus(r1, 0x4, 0x800) splice(r2, 0x0, r1, 0x0, 0x2, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2033/05/18 03:34:13 result hanged=false: [668336ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 147492 #0 [668346ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [668349ms] <- syz_open_dev$tty20=0xffffffffffffffff errno=2 cover=1197 #0 [668351ms] -> pipe(0x20000040) #0 [668352ms] <- pipe=0x0 errno=14 cover=1817 #0 [668354ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [668355ms] <- syz_open_dev$tty20=0xffffffffffffffff errno=2 cover=1166 #0 [668356ms] -> fcntl$setstatus(0x4, 0x4, 0x800) #0 [668356ms] <- fcntl$setstatus=0x0 errno=14 cover=77 #0 [668357ms] -> splice(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x2, 0x0) #0 [668357ms] <- splice=0xffffffffffffffff errno=9 cover=47 #0 [668357ms] -> ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) #0 [668357ms] <- ioctl$TIOCVHANGUP=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [668358ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [668358ms] <- syz_open_dev$tty20=0xffffffffffffffff errno=2 cover=1186 #0 [668359ms] -> pipe(0x20000040) #0 [668360ms] <- pipe=0x0 errno=14 cover=1254 pthread_create failed (errno 11) 03:34:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x52, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x4, 0x3}]}, 0x18}}, 0x0) 2033/05/18 03:34:13 result hanged=false: [668415ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 147594 #0 [668425ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [668425ms] <- socket$netlink=0x3 errno=14 cover=1399 #0 [668426ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [668426ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [668427ms] -> sendmsg$nl_generic(0x4, 0x20000280, 0x0) #0 [668428ms] <- sendmsg$nl_generic=0x18 errno=14 cover=1603 enabling collider #0 [668428ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [668429ms] <- socket$netlink=0x3 errno=14 cover=1434 #0 [668430ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [668430ms] <- fcntl$dupfd=0x4 errno=14 cover=110 pthread_create failed (errno 11) 03:34:13 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0), 0x17, 0x0) fallocate(r0, 0x3, 0x0, 0x18000) 2033/05/18 03:34:13 result hanged=false: [668480ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 147696 #0 [668491ms] -> perf_event_open(0x20000200, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [668492ms] <- perf_event_open=0x3 errno=14 cover=9590 #0 [668493ms] -> creat(0x20000000, 0x0) #0 [668494ms] <- creat=0x4 errno=14 cover=12727 #0 [668495ms] -> pwrite64(0x4, 0x200000c0, 0x17, 0x0) #0 [668496ms] <- pwrite64=0x17 errno=14 cover=6175 #0 [668497ms] -> fallocate(0x4, 0x3, 0x0, 0x18000) #0 [668500ms] <- fallocate=0x0 errno=14 cover=20005 enabling collider #0 [668511ms] -> perf_event_open(0x20000200, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [668512ms] <- perf_event_open=0x3 errno=14 cover=9768 #0 [668513ms] -> creat(0x20000000, 0x0) #0 [668515ms] <- creat=0x4 errno=14 cover=10372 pthread_create failed (errno 11) 2033/05/18 03:34:14 result hanged=false: 03:34:14 executing program 0: setreuid(0x0, 0xee01) mlockall(0x1) [668584ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 147798 #0 [668594ms] -> setreuid(0x0, 0xee01) #0 [668598ms] <- setreuid=0x0 errno=14 cover=395 #0 [668599ms] -> mlockall(0x1) #0 [668599ms] <- mlockall=0xffffffffffffffff errno=12 cover=51 enabling collider #0 [668599ms] -> setreuid(0x0, 0xee01) #0 [668599ms] <- setreuid=0x0 errno=14 cover=412 03:34:14 executing program 0: r0 = socket$inet(0x2, 0x3, 0xff) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') 2033/05/18 03:34:14 result hanged=false: [668619ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 147800 #0 [668629ms] -> socket$inet(0x2, 0x3, 0xff) #0 [668629ms] <- socket$inet=0x3 errno=14 cover=1728 #0 [668630ms] -> fremovexattr(0x3, 0x20000000) #0 [668631ms] <- fremovexattr=0xffffffffffffffff errno=95 cover=234 enabling collider #0 [668631ms] -> socket$inet(0x2, 0x3, 0xff) #0 [668632ms] <- socket$inet=0x3 errno=14 cover=1719 03:34:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ftruncate(r2, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 2033/05/18 03:34:14 result hanged=false: 2033/05/18 03:34:14 poll: candidates=8 inputs=0 signal=0 [668654ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 147802 #0 [668663ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [668667ms] <- openat=0x3 errno=14 cover=6697 #0 [668668ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [668668ms] <- open=0x4 errno=14 cover=6689 #0 [668669ms] -> writev(0x3, 0x200000c0, 0x1) #0 [668669ms] <- writev=0x1 errno=14 cover=2934 #0 [668669ms] -> creat(0x20000040, 0x0) #0 [668670ms] <- creat=0x5 errno=14 cover=4926 #0 [668670ms] -> fallocate(0x5, 0x0, 0x0, 0x8000) #0 [668670ms] <- fallocate=0x0 errno=14 cover=3837 #0 [668671ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [668671ms] <- openat=0x6 errno=14 cover=1138 #0 [668671ms] -> ioctl$FS_IOC_RESVSP(0x6, 0x40305828, 0x20000040) #0 [668675ms] <- ioctl$FS_IOC_RESVSP=0x0 errno=14 cover=13052 #0 [668675ms] -> ftruncate(0x5, 0x9) #0 [668676ms] <- ftruncate=0x0 errno=14 cover=7567 #0 [668676ms] -> ioctl$EXT4_IOC_MOVE_EXT(0x3, 0xc028660f, 0x20000040) #0 [668676ms] <- ioctl$EXT4_IOC_MOVE_EXT=0x0 errno=14 cover=5540 enabling collider #0 [668677ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [668677ms] <- openat=0xffffffffffffffff errno=17 cover=1015 #0 [668678ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [668678ms] <- open=0xffffffffffffffff errno=17 cover=1015 pthread_create failed (errno 11) 03:34:14 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000003c0)={{}, {0x0, 0x81}}) 2033/05/18 03:34:14 result hanged=false: [668731ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 147904 #0 [668742ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000380, 0x0) #0 [668742ms] <- openat$sndseq=0xffffffffffffffff errno=2 cover=1199 #0 [668743ms] -> ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x200003c0) #0 [668743ms] <- ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [668744ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000380, 0x0) #0 [668745ms] <- openat$sndseq=0xffffffffffffffff errno=2 cover=1166 03:34:14 executing program 0: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2033/05/18 03:34:14 result hanged=false: [668764ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 147906 #0 [668772ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000480, 0xffffffffffffffff) syz_genetlink_get_family_id(NLBL_UNLBL, -1) netlink: failed to get family id for NLBL_UNLBL: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [668776ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0xffffffffffffffff errno=2 cover=8881 #0 [668777ms] -> ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) #0 [668777ms] <- ioctl$sock_SIOCGIFINDEX_802154=0xffffffffffffffff errno=9 cover=45 #0 [668777ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [668777ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1202 enabling collider #0 [668778ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000480, 0xffffffffffffffff) syz_genetlink_get_family_id(NLBL_UNLBL, -1) netlink: failed to get family id for NLBL_UNLBL: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [668779ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0xffffffffffffffff errno=2 cover=6040 #0 [668779ms] -> ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) #0 [668779ms] <- ioctl$sock_SIOCGIFINDEX_802154=0xffffffffffffffff errno=9 cover=45 2033/05/18 03:34:14 poll: candidates=0 inputs=0 signal=0 pthread_create failed (errno 11) 03:34:14 executing program 0: keyctl$instantiate(0x18, 0x0, &(0x7f0000000a40)=@encrypted_update={'update ', 'default', 0x20, 'user:', '@)\x13}-%+!!'}, 0x1e, 0x0) 2033/05/18 03:34:14 result hanged=false: [668831ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148008 #0 [668840ms] -> keyctl$instantiate(0x18, 0x0, 0x20000a40, 0x1e, 0x0) #0 [668844ms] <- keyctl$instantiate=0xffffffffffffffff errno=22 cover=36 enabling collider #0 [668846ms] -> keyctl$instantiate(0x18, 0x0, 0x20000a40, 0x1e, 0x0) #0 [668846ms] <- keyctl$instantiate=0xffffffffffffffff errno=22 cover=36 03:34:14 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5425, 0x0) 2033/05/18 03:34:14 result hanged=false: [668865ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148010 #0 [668874ms] -> openat$ttyS3(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [668875ms] <- openat$ttyS3=0xffffffffffffffff errno=2 cover=1225 #0 [668876ms] -> ioctl$TIOCSTI(0xffffffffffffffff, 0x5425, 0x0) #0 [668876ms] <- ioctl$TIOCSTI=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [668876ms] -> openat$ttyS3(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [668876ms] <- openat$ttyS3=0xffffffffffffffff errno=2 cover=1188 03:34:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) 2033/05/18 03:34:14 result hanged=false: [668894ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148012 #0 [668904ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [668910ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12176 #0 [668910ms] -> stat(0x20001cc0, 0x20001c00) #0 [668911ms] <- stat=0x0 errno=14 cover=554 #0 [668911ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [668911ms] <- setresuid=0x0 errno=14 cover=418 #0 [668911ms] -> mknod$loop(0x20000000, 0x0, 0x700) #0 [668911ms] <- mknod$loop=0xffffffffffffffff errno=13 cover=1079 enabling collider #0 [668911ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [668911ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1377 #0 [668912ms] -> stat(0x20001cc0, 0x20001c00) #0 [668912ms] <- stat=0x0 errno=14 cover=542 pthread_create failed (errno 11) 03:34:14 executing program 0: pselect6(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) 2033/05/18 03:34:14 result hanged=false: [668964ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148114 #0 [668974ms] -> pselect6(0x0, 0x0, 0x0, 0x20000080, 0x200000c0, 0x0) #0 [669035ms] <- pselect6=0x0 errno=14 cover=353 enabling collider #0 [669036ms] -> pselect6(0x0, 0x0, 0x0, 0x20000080, 0x200000c0, 0x0) #0 [669096ms] <- pselect6=0x0 errno=14 cover=443 03:34:14 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) 2033/05/18 03:34:14 result hanged=false: [669115ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148116 #0 [669125ms] -> syz_genetlink_get_family_id$ethtool(0x200004c0, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [669130ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=9496 enabling collider #0 [669132ms] -> syz_genetlink_get_family_id$ethtool(0x200004c0, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [669133ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=7706 03:34:14 executing program 0: r0 = io_uring_setup(0x1b22, &(0x7f00000001c0)={0x0, 0x228c, 0xe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r1, r0, 0x0) 2033/05/18 03:34:14 result hanged=false: 2033/05/18 03:34:14 poll: candidates=8 inputs=0 signal=0 [669157ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148118 #0 [669166ms] -> io_uring_setup(0x1b22, 0x200001c0) #0 [669170ms] <- io_uring_setup=0x3 errno=14 cover=5480 #0 [669170ms] -> io_uring_register$IORING_REGISTER_FILES(0x3, 0x2, 0x0, 0x0) #0 [669174ms] <- io_uring_register$IORING_REGISTER_FILES=0xffffffffffffffff errno=22 cover=325 #0 [669174ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [669174ms] <- socket$inet_udp=0x4 errno=14 cover=1673 #0 [669174ms] -> dup3(0x4, 0x3, 0x0) #0 [669174ms] <- dup3=0x3 errno=14 cover=2400 enabling collider #0 [669175ms] -> io_uring_setup(0x1b22, 0x200001c0) #0 [669176ms] <- io_uring_setup=0x3 errno=14 cover=4937 #0 [669177ms] -> io_uring_register$IORING_REGISTER_FILES(0x3, 0x2, 0x0, 0x0) #0 [669180ms] <- io_uring_register$IORING_REGISTER_FILES=0xffffffffffffffff errno=22 cover=252 pthread_create failed (errno 11) 03:34:14 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000000)=0xffffffff) 2033/05/18 03:34:14 result hanged=false: [669226ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148220 #0 [669237ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [669238ms] <- openat=0x3 errno=14 cover=6747 #0 [669239ms] -> mount(0x20000080, 0x200000c0, 0x0, 0x209000, 0x0) #0 [669240ms] <- mount=0xffffffffffffffff errno=2 cover=1546 #0 [669240ms] -> openat(0xffffffffffffff9c, 0x20004c40, 0x84e00, 0x0) #0 [669242ms] <- openat=0x4 errno=14 cover=4939 #0 [669242ms] -> ioctl$SG_SET_TIMEOUT(0x4, 0x2201, 0x20000000) #0 [669242ms] <- ioctl$SG_SET_TIMEOUT=0xffffffffffffffff errno=25 cover=107 enabling collider #0 [669243ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [669243ms] <- openat=0x3 errno=14 cover=1110 #0 [669244ms] -> mount(0x20000080, 0x200000c0, 0x0, 0x209000, 0x0) #0 [669245ms] <- mount=0xffffffffffffffff errno=2 cover=1593 pthread_create failed (errno 11) 03:34:14 executing program 0: r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 2033/05/18 03:34:14 result hanged=false: [669295ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148322 #0 [669305ms] -> fsopen(0x20000000, 0x0) #0 [669306ms] <- fsopen=0x3 errno=14 cover=4453 #0 [669307ms] -> fsconfig$FSCONFIG_CMD_CREATE(0x3, 0x6, 0x0, 0x0, 0x0) #0 [669310ms] <- fsconfig$FSCONFIG_CMD_CREATE=0x0 errno=14 cover=33439 #0 [669311ms] -> fsmount(0x3, 0x0, 0x0) #0 [669311ms] <- fsmount=0x4 errno=14 cover=1138 #0 [669312ms] -> fsmount(0x3, 0x0, 0x0) #0 [669312ms] <- fsmount=0xffffffffffffffff errno=16 cover=115 enabling collider #0 [669315ms] -> fsopen(0x20000000, 0x0) #0 [669315ms] <- fsopen=0x3 errno=14 cover=1002 #0 [669316ms] -> fsconfig$FSCONFIG_CMD_CREATE(0x3, 0x6, 0x0, 0x0, 0x0) #0 [669320ms] <- fsconfig$FSCONFIG_CMD_CREATE=0x0 errno=14 cover=11291 pthread_create failed (errno 11) 2033/05/18 03:34:14 result hanged=false: 03:34:14 executing program 0: syz_emit_ethernet(0x46, &(0x7f00000001c0)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @loopback}, "c8ed01b536ca3d00"}}}}}, 0x0) [669373ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148424 #0 [669383ms] -> syz_emit_ethernet(0x46, 0x200001c0, 0x0) 01 80 c2 00 00 00 aa aa aa aa aa aa 08 00 45 00 00 38 00 00 00 00 00 01 4d e8 ac 1e 00 01 ac 14 14 aa 03 05 8e 53 ac 1e 00 01 45 00 00 00 00 00 00 00 00 04 00 00 ac 14 14 00 7f 00 00 01 c8 ed 01 b5 36 ca 3d 00 #0 [669384ms] <- syz_emit_ethernet=0x46 errno=14 cover=21231 enabling collider #0 [669386ms] -> syz_emit_ethernet(0x46, 0x200001c0, 0x0) 01 80 c2 00 00 00 aa aa aa aa aa aa 08 00 45 00 00 38 00 00 00 00 00 01 4d e8 ac 1e 00 01 ac 14 14 aa 03 05 8e 53 ac 1e 00 01 45 00 00 00 00 00 00 00 00 04 00 00 ac 14 14 00 7f 00 00 01 c8 ed 01 b5 36 ca 3d 00 #0 [669387ms] <- syz_emit_ethernet=0x46 errno=14 cover=21217 2033/05/18 03:34:14 result hanged=false: 2033/05/18 03:34:14 #0: triaging type=7 2033/05/18 03:34:14 triaging input for call #0 syz_emit_ethernet (new signal=1) 03:34:14 executing program 0: syz_emit_ethernet(0x46, &(0x7f00000001c0)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @loopback}, "c8ed01b536ca3d00"}}}}}, 0x0) iptable filter/2: resetting iptable mangle/2: resetting [669407ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148426 #0 [669416ms] -> syz_emit_ethernet(0x46, 0x200001c0, 0x0) 01 80 c2 00 00 00 aa aa aa aa aa aa 08 00 45 00 00 38 00 00 00 00 00 01 4d e8 ac 1e 00 01 ac 14 14 aa 03 05 8e 53 ac 1e 00 01 45 00 00 00 00 00 00 00 00 04 00 00 ac 14 14 00 7f 00 00 01 c8 ed 01 b5 36 ca 3d 00 #0 [669418ms] <- syz_emit_ethernet=0x46 errno=14 cover=21499 03:34:14 executing program 0: syz_emit_ethernet(0x46, &(0x7f00000001c0)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @loopback}, "c8ed01b536ca3d00"}}}}}, 0x0) 2033/05/18 03:34:14 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [669441ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148428 #0 [669451ms] -> syz_emit_ethernet(0x46, 0x200001c0, 0x0) 01 80 c2 00 00 00 aa aa aa aa aa aa 08 00 45 00 00 38 00 00 00 00 00 01 4d e8 ac 1e 00 01 ac 14 14 aa 03 05 8e 53 ac 1e 00 01 45 00 00 00 00 00 00 00 00 04 00 00 ac 14 14 00 7f 00 00 01 c8 ed 01 b5 36 ca 3d 00 #0 [669457ms] <- syz_emit_ethernet=0x46 errno=14 cover=21876 2033/05/18 03:34:14 result hanged=false: 03:34:14 executing program 0: syz_emit_ethernet(0x46, &(0x7f00000001c0)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @loopback}, "c8ed01b536ca3d00"}}}}}, 0x0) iptable filter/2: resetting iptable mangle/2: resetting [669478ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148430 #0 [669487ms] -> syz_emit_ethernet(0x46, 0x200001c0, 0x0) 01 80 c2 00 00 00 aa aa aa aa aa aa 08 00 45 00 00 38 00 00 00 00 00 01 4d e8 ac 1e 00 01 ac 14 14 aa 03 05 8e 53 ac 1e 00 01 45 00 00 00 00 00 00 00 00 04 00 00 ac 14 14 00 7f 00 00 01 c8 ed 01 b5 36 ca 3d 00 #0 [669488ms] <- syz_emit_ethernet=0x46 errno=14 cover=21287 2033/05/18 03:34:14 result hanged=false: 2033/05/18 03:34:14 added new input for call #0 syz_emit_ethernet to corpus: syz_emit_ethernet(0x46, &(0x7f00000001c0)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @loopback}, "c8ed01b536ca3d00"}}}}}, 0x0) iptable filter/2: resetting iptable mangle/2: resetting 03:34:14 executing program 0: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) [669516ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148432 #0 [669524ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(NLBL_MGMT, -1) netlink: failed to get family id for NLBL_MGMT: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [669527ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0xffffffffffffffff errno=2 cover=8742 enabling collider #0 [669528ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(NLBL_MGMT, -1) netlink: failed to get family id for NLBL_MGMT: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [669529ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0xffffffffffffffff errno=2 cover=5934 03:34:14 executing program 0: r0 = syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1a}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:34:14 result hanged=false: [669548ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148434 #0 [669557ms] -> syz_io_uring_setup(0x4, 0x20000080, 0x200a0000, 0x20ffc000, 0x20000040, 0x20000140) #0 [669559ms] <- syz_io_uring_setup=0x3 errno=14 cover=7618 #0 [669560ms] -> syz_io_uring_submit(0x200a0000, 0x20ffc000, 0x20000180, 0x0) #0 [669560ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [669560ms] -> io_uring_enter(0x3, 0x58ab, 0x0, 0x0, 0x0, 0x0) #0 [669561ms] <- io_uring_enter=0x1 errno=14 cover=469 enabling collider #0 [669561ms] -> syz_io_uring_setup(0x4, 0x20000080, 0x200a0000, 0x20ffc000, 0x20000040, 0x20000140) #0 [669563ms] <- syz_io_uring_setup=0x3 errno=14 cover=5754 #0 [669564ms] -> syz_io_uring_submit(0x200a0000, 0x20ffc000, 0x20000180, 0x0) #0 [669564ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 pthread_create failed (errno 11) 03:34:15 executing program 0: pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x3}, &(0x7f0000000140)={0x0, 0x3938700}, 0x0) 2033/05/18 03:34:15 result hanged=false: [669613ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148536 #0 [669623ms] -> pselect6(0x40, 0x20000080, 0x0, 0x20000100, 0x20000140, 0x0) #0 [669683ms] <- pselect6=0x0 errno=14 cover=724 enabling collider #0 [669684ms] -> pselect6(0x40, 0x20000080, 0x0, 0x20000100, 0x20000140, 0x0) #0 [669745ms] <- pselect6=0x0 errno=14 cover=648 03:34:15 executing program 0: getitimer(0x0, 0x0) 2033/05/18 03:34:15 result hanged=false: [669763ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148538 #0 [669773ms] -> getitimer(0x0, 0x0) #0 [669775ms] <- getitimer=0xffffffffffffffff errno=14 cover=432 enabling collider #0 [669777ms] -> getitimer(0x0, 0x0) #0 [669777ms] <- getitimer=0xffffffffffffffff errno=14 cover=433 03:34:15 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) r0 = clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f00000008c0)={0x8000, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {}, &(0x7f0000000500), 0x0, &(0x7f0000000840)=""/93, &(0x7f0000000540)=[r0, r0, r0], 0x3}, 0x58) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000980)={0x80101880, 0x0, &(0x7f0000000300), &(0x7f0000000340), {0x35}, &(0x7f0000000380)=""/67, 0x43, 0x0, &(0x7f0000000940)=[0x0, r0], 0x2, {r1}}, 0x58) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x101600, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@local, @in6=@ipv4={""/10, ""/2, @multicast2}}}, {{@in=@private}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)=':]\\\xd9', 0x0) 2033/05/18 03:34:15 result hanged=false: 2033/05/18 03:34:15 poll: candidates=8 inputs=0 signal=0 [669796ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148540 #0 [669806ms] -> keyctl$set_reqkey_keyring(0xe, 0x2) #0 [669808ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=798 #0 [669809ms] -> keyctl$set_reqkey_keyring(0xe, 0x0) #0 [669811ms] <- keyctl$set_reqkey_keyring=0x2 errno=14 cover=306 #0 [669812ms] -> keyctl$set_reqkey_keyring(0xe, 0x2) #0 [669812ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=309 #0 [669813ms] -> keyctl$set_reqkey_keyring(0xe, 0x4) #0 [669813ms] <- keyctl$set_reqkey_keyring=0x2 errno=14 cover=317 #0 [669813ms] -> clone3(0x20001200, 0x58) #0 [669816ms] <- clone3=0xffffffffffffffff errno=11 cover=12111 #0 [669816ms] -> clone3(0x200008c0, 0x58) #0 [669816ms] <- clone3=0xffffffffffffffff errno=22 cover=108 #0 [669816ms] -> dup2(0xffffffffffffffff, 0xffffffffffffffff) #0 [669817ms] <- dup2=0xffffffffffffffff errno=9 cover=41 #0 [669817ms] -> clone3(0x20000980, 0x58) #0 [669817ms] <- clone3=0xffffffffffffffff errno=22 cover=103 #0 [669817ms] -> openat$zero(0xffffffffffffff9c, 0x20000140, 0x101600, 0x0) #0 [669817ms] <- openat$zero=0xffffffffffffffff errno=2 cover=1192 #0 [669817ms] -> getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x20000180, 0x20000280) #0 [669817ms] <- getsockopt$inet_IP_XFRM_POLICY=0xffffffffffffffff errno=9 cover=49 #0 [669817ms] -> openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) #0 [669817ms] <- openat=0xffffffffffffffff errno=14 cover=642 #0 [669817ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [669818ms] <- openat=0x3 errno=14 cover=6854 #0 [669818ms] -> request_key(0x20000040, 0x20000080, 0x200000c0, 0x0) #0 [669820ms] <- request_key=0xffffffffffffffff errno=2 cover=7414 enabling collider #0 [669820ms] -> keyctl$set_reqkey_keyring(0xe, 0x2) #0 [669820ms] <- keyctl$set_reqkey_keyring=0x4 errno=14 cover=297 #0 [669821ms] -> keyctl$set_reqkey_keyring(0xe, 0x0) #0 [669821ms] <- keyctl$set_reqkey_keyring=0x2 errno=14 cover=331 pthread_create failed (errno 11) 2033/05/18 03:34:15 result hanged=false: 2033/05/18 03:34:15 #0: triaging type=7 2033/05/18 03:34:15 triaging input for call #12 request_key (new signal=2) 03:34:15 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) r0 = clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f00000008c0)={0x8000, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {}, &(0x7f0000000500), 0x0, &(0x7f0000000840)=""/93, &(0x7f0000000540)=[r0, r0, r0], 0x3}, 0x58) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000980)={0x80101880, 0x0, &(0x7f0000000300), &(0x7f0000000340), {0x35}, &(0x7f0000000380)=""/67, 0x43, 0x0, &(0x7f0000000940)=[0x0, r0], 0x2, {r1}}, 0x58) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x101600, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@local, @in6=@ipv4={""/10, ""/2, @multicast2}}}, {{@in=@private}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)=':]\\\xd9', 0x0) [669872ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148643 #0 [669880ms] -> keyctl$set_reqkey_keyring(0xe, 0x2) #0 [669883ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=690 #0 [669884ms] -> keyctl$set_reqkey_keyring(0xe, 0x0) #0 [669885ms] <- keyctl$set_reqkey_keyring=0x2 errno=14 cover=328 #0 [669885ms] -> keyctl$set_reqkey_keyring(0xe, 0x2) #0 [669885ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=323 #0 [669885ms] -> keyctl$set_reqkey_keyring(0xe, 0x4) #0 [669885ms] <- keyctl$set_reqkey_keyring=0x2 errno=14 cover=317 #0 [669885ms] -> clone3(0x20001200, 0x58) #0 [669889ms] <- clone3=0xffffffffffffffff errno=11 cover=12291 #0 [669891ms] -> clone3(0x200008c0, 0x58) #0 [669891ms] <- clone3=0xffffffffffffffff errno=22 cover=108 #0 [669891ms] -> dup2(0xffffffffffffffff, 0xffffffffffffffff) #0 [669891ms] <- dup2=0xffffffffffffffff errno=9 cover=41 #0 [669891ms] -> clone3(0x20000980, 0x58) #0 [669891ms] <- clone3=0xffffffffffffffff errno=22 cover=103 #0 [669892ms] -> openat$zero(0xffffffffffffff9c, 0x20000140, 0x101600, 0x0) #0 [669893ms] <- openat$zero=0xffffffffffffffff errno=2 cover=1194 #0 [669894ms] -> getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x20000180, 0x20000280) #0 [669894ms] <- getsockopt$inet_IP_XFRM_POLICY=0xffffffffffffffff errno=9 cover=49 #0 [669894ms] -> openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) #0 [669894ms] <- openat=0xffffffffffffffff errno=14 cover=642 #0 [669894ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [669895ms] <- openat=0x3 errno=14 cover=6720 #0 [669895ms] -> request_key(0x20000040, 0x20000080, 0x200000c0, 0x0) #0 [669896ms] <- request_key=0xffffffffffffffff errno=126 cover=1536 2033/05/18 03:34:15 result hanged=false: 03:34:15 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) r0 = clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f00000008c0)={0x8000, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {}, &(0x7f0000000500), 0x0, &(0x7f0000000840)=""/93, &(0x7f0000000540)=[r0, r0, r0], 0x3}, 0x58) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000980)={0x80101880, 0x0, &(0x7f0000000300), &(0x7f0000000340), {0x35}, &(0x7f0000000380)=""/67, 0x43, 0x0, &(0x7f0000000940)=[0x0, r0], 0x2, {r1}}, 0x58) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x101600, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@local, @in6=@ipv4={""/10, ""/2, @multicast2}}}, {{@in=@private}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)=':]\\\xd9', 0x0) [669916ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148646 #0 [669926ms] -> keyctl$set_reqkey_keyring(0xe, 0x2) #0 [669926ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=883 #0 [669927ms] -> keyctl$set_reqkey_keyring(0xe, 0x0) #0 [669929ms] <- keyctl$set_reqkey_keyring=0x2 errno=14 cover=6515 #0 [669929ms] -> keyctl$set_reqkey_keyring(0xe, 0x2) #0 [669930ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=353 #0 [669930ms] -> keyctl$set_reqkey_keyring(0xe, 0x4) #0 [669930ms] <- keyctl$set_reqkey_keyring=0x2 errno=14 cover=386 #0 [669931ms] -> clone3(0x20001200, 0x58) #0 [669934ms] <- clone3=0xffffffffffffffff errno=11 cover=12254 #0 [669935ms] -> clone3(0x200008c0, 0x58) #0 [669935ms] <- clone3=0xffffffffffffffff errno=22 cover=108 #0 [669936ms] -> dup2(0xffffffffffffffff, 0xffffffffffffffff) #0 [669936ms] <- dup2=0xffffffffffffffff errno=9 cover=41 #0 [669936ms] -> clone3(0x20000980, 0x58) #0 [669936ms] <- clone3=0xffffffffffffffff errno=22 cover=103 #0 [669936ms] -> openat$zero(0xffffffffffffff9c, 0x20000140, 0x101600, 0x0) #0 [669937ms] <- openat$zero=0xffffffffffffffff errno=2 cover=1180 #0 [669939ms] -> getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x20000180, 0x20000280) #0 [669939ms] <- getsockopt$inet_IP_XFRM_POLICY=0xffffffffffffffff errno=9 cover=49 #0 [669939ms] -> openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) #0 [669939ms] <- openat=0xffffffffffffffff errno=14 cover=631 #0 [669939ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [669940ms] <- openat=0x3 errno=14 cover=6670 #0 [669941ms] -> request_key(0x20000040, 0x20000080, 0x200000c0, 0x0) #0 [669941ms] <- request_key=0xffffffffffffffff errno=126 cover=1571 2033/05/18 03:34:15 result hanged=false: 03:34:15 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) r0 = clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f00000008c0)={0x8000, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {}, &(0x7f0000000500), 0x0, &(0x7f0000000840)=""/93, &(0x7f0000000540)=[r0, r0, r0], 0x3}, 0x58) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000980)={0x80101880, 0x0, &(0x7f0000000300), &(0x7f0000000340), {0x35}, &(0x7f0000000380)=""/67, 0x43, 0x0, &(0x7f0000000940)=[0x0, r0], 0x2, {r1}}, 0x58) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x101600, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@local, @in6=@ipv4={""/10, ""/2, @multicast2}}}, {{@in=@private}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)=':]\\\xd9', 0x0) [669961ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148649 #0 [669971ms] -> keyctl$set_reqkey_keyring(0xe, 0x2) #0 [669974ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=861 #0 [669975ms] -> keyctl$set_reqkey_keyring(0xe, 0x0) #0 [669975ms] <- keyctl$set_reqkey_keyring=0x2 errno=14 cover=328 #0 [669975ms] -> keyctl$set_reqkey_keyring(0xe, 0x2) #0 [669975ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=309 #0 [669976ms] -> keyctl$set_reqkey_keyring(0xe, 0x4) #0 [669976ms] <- keyctl$set_reqkey_keyring=0x2 errno=14 cover=320 #0 [669977ms] -> clone3(0x20001200, 0x58) #0 [669980ms] <- clone3=0xffffffffffffffff errno=11 cover=12226 #0 [669981ms] -> clone3(0x200008c0, 0x58) #0 [669982ms] <- clone3=0xffffffffffffffff errno=22 cover=108 #0 [669982ms] -> dup2(0xffffffffffffffff, 0xffffffffffffffff) #0 [669982ms] <- dup2=0xffffffffffffffff errno=9 cover=41 #0 [669982ms] -> clone3(0x20000980, 0x58) #0 [669982ms] <- clone3=0xffffffffffffffff errno=22 cover=103 #0 [669982ms] -> openat$zero(0xffffffffffffff9c, 0x20000140, 0x101600, 0x0) #0 [669983ms] <- openat$zero=0xffffffffffffffff errno=2 cover=1234 #0 [669984ms] -> getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x20000180, 0x20000280) #0 [669984ms] <- getsockopt$inet_IP_XFRM_POLICY=0xffffffffffffffff errno=9 cover=49 #0 [669984ms] -> openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) #0 [669984ms] <- openat=0xffffffffffffffff errno=14 cover=621 #0 [669985ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [669986ms] <- openat=0x3 errno=14 cover=6718 #0 [669987ms] -> request_key(0x20000040, 0x20000080, 0x200000c0, 0x0) #0 [669987ms] <- request_key=0xffffffffffffffff errno=126 cover=1514 2033/05/18 03:34:15 result hanged=false: 2033/05/18 03:34:15 added new input for call #12 request_key to corpus: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) r0 = clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f00000008c0)={0x8000, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {}, &(0x7f0000000500), 0x0, &(0x7f0000000840)=""/93, &(0x7f0000000540)=[r0, r0, r0], 0x3}, 0x58) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000980)={0x80101880, 0x0, &(0x7f0000000300), &(0x7f0000000340), {0x35}, &(0x7f0000000380)=""/67, 0x43, 0x0, &(0x7f0000000940)=[0x0, r0], 0x2, {r1}}, 0x58) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x101600, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@local, @in6=@ipv4={""/10, ""/2, @multicast2}}}, {{@in=@private}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)=':]\\\xd9', 0x0) 03:34:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chown(&(0x7f0000000280)='./file0\x00', 0xee01, 0x0) [670014ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148652 #0 [670023ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [670024ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12967 #0 [670025ms] -> mount(0x0, 0x20000180, 0x20000040, 0x0, 0x0) #0 [670028ms] <- mount=0x0 errno=14 cover=13399 #0 [670029ms] -> chown(0x20000280, 0xee01, 0x0) #0 [670029ms] <- chown=0x0 errno=14 cover=3284 enabling collider #0 [670030ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [670030ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1359 #0 [670031ms] -> mount(0x0, 0x20000180, 0x20000040, 0x0, 0x0) #0 [670032ms] <- mount=0xffffffffffffffff errno=16 cover=2714 pthread_create failed (errno 11) 03:34:15 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000026c0)='net/if_inet6\x00') pread64(r0, &(0x7f0000001340)=""/4083, 0xff3, 0xd1) 2033/05/18 03:34:15 result hanged=false: umount(./5074/file0) [670087ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148754 #0 [670098ms] -> syz_open_procfs(0xffffffffffffffff, 0x200026c0) #0 [670101ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2353 #0 [670102ms] -> pread64(0xffffffffffffffff, 0x20001340, 0xff3, 0xd1) #0 [670102ms] <- pread64=0xffffffffffffffff errno=9 cover=46 enabling collider #0 [670102ms] -> syz_open_procfs(0xffffffffffffffff, 0x200026c0) #0 [670103ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2407 03:34:15 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80585414, &(0x7f0000000300)) 2033/05/18 03:34:15 result hanged=false: [670124ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148756 #0 [670135ms] -> openat$sndtimer(0xffffffffffffff9c, 0x200003c0, 0x0) #0 [670138ms] <- openat$sndtimer=0xffffffffffffffff errno=2 cover=1155 #0 [670140ms] -> ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x20000040) #0 [670141ms] <- ioctl$SNDRV_TIMER_IOCTL_SELECT=0xffffffffffffffff errno=9 cover=45 #0 [670142ms] -> ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x80585414, 0x20000300) #0 [670142ms] <- ioctl$SNDRV_TIMER_IOCTL_PARAMS=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [670143ms] -> openat$sndtimer(0xffffffffffffff9c, 0x200003c0, 0x0) #0 [670143ms] <- openat$sndtimer=0xffffffffffffffff errno=2 cover=1212 #0 [670143ms] -> ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x20000040) #0 [670144ms] <- ioctl$SNDRV_TIMER_IOCTL_SELECT=0xffffffffffffffff errno=9 cover=45 pthread_create failed (errno 11) 03:34:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\n'], 0xd3) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 2033/05/18 03:34:15 result hanged=false: [670196ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148858 #0 [670206ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [670208ms] <- openat=0x3 errno=14 cover=6770 #0 [670208ms] -> write$binfmt_elf64(0x3, 0x20000040, 0xd3) #0 [670209ms] <- write$binfmt_elf64=0xd3 errno=14 cover=2939 #0 [670210ms] -> close(0x3) #0 [670210ms] <- close=0x0 errno=14 cover=313 #0 [670211ms] -> clone3(0x200008c0, 0x58) #0 [670213ms] <- clone3=0xffffffffffffffff errno=11 cover=4421 #0 [670215ms] -> execveat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0, 0x0) #0 [670229ms] <- execveat=0xffffffffffffffff errno=8 cover=8272 enabling collider #0 [670231ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [670232ms] <- openat=0x3 errno=14 cover=1057 #0 [670233ms] -> write$binfmt_elf64(0x3, 0x20000040, 0xd3) #0 [670234ms] <- write$binfmt_elf64=0xd3 errno=14 cover=1338 pthread_create failed (errno 11) 03:34:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\n'], 0xd3) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 2033/05/18 03:34:15 result hanged=false: 2033/05/18 03:34:15 #0: triaging type=7 2033/05/18 03:34:15 triaging input for call #4 execveat (new signal=1) [670287ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148961 #0 [670296ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [670298ms] <- openat=0x3 errno=14 cover=6746 #0 [670300ms] -> write$binfmt_elf64(0x3, 0x20000040, 0xd3) #0 [670301ms] <- write$binfmt_elf64=0xd3 errno=14 cover=2890 #0 [670301ms] -> close(0x3) #0 [670302ms] <- close=0x0 errno=14 cover=313 #0 [670302ms] -> clone3(0x200008c0, 0x58) #0 [670303ms] <- clone3=0xffffffffffffffff errno=11 cover=4844 #0 [670304ms] -> execveat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0, 0x0) #0 [670320ms] <- execveat=0xffffffffffffffff errno=8 cover=8592 03:34:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\n'], 0xd3) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 2033/05/18 03:34:15 result hanged=false: [670341ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148964 #0 [670350ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [670351ms] <- openat=0x3 errno=14 cover=6705 #0 [670352ms] -> write$binfmt_elf64(0x3, 0x20000040, 0xd3) #0 [670353ms] <- write$binfmt_elf64=0xd3 errno=14 cover=2882 #0 [670353ms] -> close(0x3) #0 [670353ms] <- close=0x0 errno=14 cover=313 #0 [670353ms] -> clone3(0x200008c0, 0x58) #0 [670354ms] <- clone3=0xffffffffffffffff errno=11 cover=4457 #0 [670354ms] -> execveat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0, 0x0) #0 [670368ms] <- execveat=0xffffffffffffffff errno=8 cover=8128 03:34:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\n'], 0xd3) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 2033/05/18 03:34:15 result hanged=false: [670392ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148967 #0 [670400ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [670404ms] <- openat=0x3 errno=14 cover=6698 #0 [670405ms] -> write$binfmt_elf64(0x3, 0x20000040, 0xd3) #0 [670406ms] <- write$binfmt_elf64=0xd3 errno=14 cover=2879 #0 [670406ms] -> close(0x3) #0 [670406ms] <- close=0x0 errno=14 cover=313 #0 [670406ms] -> clone3(0x200008c0, 0x58) #0 [670407ms] <- clone3=0xffffffffffffffff errno=11 cover=4510 #0 [670407ms] -> execveat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0, 0x0) #0 [670421ms] <- execveat=0xffffffffffffffff errno=8 cover=8445 2033/05/18 03:34:15 result hanged=false: 2033/05/18 03:34:15 added new input for call #4 execveat to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\n'], 0xd3) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 03:34:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in=@local}, 0x11, @in6=@dev, 0x0, 0x4}]}]}, 0xfc}}, 0x0) [670460ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148970 #0 [670468ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [670469ms] <- socket$nl_xfrm=0x3 errno=14 cover=1419 #0 [670469ms] -> sendmsg$nl_xfrm(0x3, 0x20000100, 0x0) #0 [670470ms] <- sendmsg$nl_xfrm=0xfc errno=14 cover=1662 enabling collider #0 [670471ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [670471ms] <- socket$nl_xfrm=0x3 errno=14 cover=1418 03:34:15 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r1, r0) 2033/05/18 03:34:15 result hanged=false: [670489ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 148972 #0 [670498ms] -> add_key$keyring(0x20000000, 0x20000040, 0x0, 0x0, 0xfffffffffffffffd) #0 [670498ms] <- add_key$keyring=0x6ebbbe4 errno=14 cover=1118 #0 [670499ms] -> add_key$keyring(0x20000080, 0x200000c0, 0x0, 0x0, 0xfffffffffffffffc) #0 [670499ms] <- add_key$keyring=0x2d8cf13f errno=14 cover=1727 #0 [670499ms] -> keyctl$unlink(0x9, 0x2d8cf13f, 0x6ebbbe4) #0 [670499ms] <- keyctl$unlink=0xffffffffffffffff errno=2 cover=978 enabling collider #0 [670500ms] -> add_key$keyring(0x20000000, 0x20000040, 0x0, 0x0, 0xfffffffffffffffd) #0 [670500ms] <- add_key$keyring=0x3177677 errno=14 cover=1303 #0 [670500ms] -> add_key$keyring(0x20000080, 0x200000c0, 0x0, 0x0, 0xfffffffffffffffc) #0 [670500ms] <- add_key$keyring=0x1bea5276 errno=14 cover=1682 pthread_create failed (errno 11) 03:34:15 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) 2033/05/18 03:34:15 result hanged=false: [670551ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149074 #0 [670561ms] -> pipe(0x20000040) #0 [670564ms] <- pipe=0x0 errno=14 cover=1798 #0 [670565ms] -> syz_genetlink_get_family_id$ethtool(0x20000000, 0x4) syz_genetlink_get_family_id(ethtool, 4) netlink_send_ext: short netlink write: -1/32 errno=88 netlink: failed to get family id for ethtool: Socket operation on non-socket syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [670565ms] <- syz_genetlink_get_family_id$ethtool=0xffffffffffffffff errno=88 cover=2835 enabling collider #0 [670566ms] -> pipe(0x20000040) #0 [670566ms] <- pipe=0x0 errno=14 cover=1124 03:34:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, r1, 0xd8499488957a772f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 2033/05/18 03:34:16 result hanged=false: 2033/05/18 03:34:16 poll: candidates=8 inputs=0 signal=0 [670587ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149076 #0 [670596ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [670599ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1159 #0 [670601ms] -> syz_genetlink_get_family_id$nl802154(0x20000000, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [670603ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=7936 #0 [670603ms] -> sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x200002c0, 0x0) #0 [670603ms] <- sendmsg$NL802154_CMD_GET_WPAN_PHY=0xffffffffffffffff errno=9 cover=52 enabling collider #0 [670603ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [670604ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1169 #0 [670604ms] -> syz_genetlink_get_family_id$nl802154(0x20000000, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [670605ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=7375 pthread_create failed (errno 11) 03:34:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000340)) 2033/05/18 03:34:16 result hanged=false: [670659ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149178 #0 [670668ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [670672ms] <- syz_open_dev$tty1=0xffffffffffffffff errno=2 cover=1199 #0 [670673ms] -> stat(0x200001c0, 0x20001c00) #0 [670673ms] <- stat=0x0 errno=14 cover=805 #0 [670673ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [670673ms] <- setresuid=0x0 errno=14 cover=382 #0 [670673ms] -> ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x20000340) #0 [670673ms] <- ioctl$KDGKBLED=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [670673ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [670674ms] <- syz_open_dev$tty1=0xffffffffffffffff errno=2 cover=1178 #0 [670674ms] -> stat(0x200001c0, 0x20001c00) #0 [670674ms] <- stat=0x0 errno=14 cover=555 pthread_create failed (errno 11) 03:34:16 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = dup(r1) setns(r2, 0x80) 2033/05/18 03:34:16 result hanged=false: [670728ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149280 #0 [670738ms] -> getpid() #0 [670739ms] <- getpid=0x24720 errno=14 cover=48 #0 [670740ms] -> pidfd_open(0x24720, 0x0) #0 [670740ms] <- pidfd_open=0x3 errno=14 cover=434 #0 [670741ms] -> dup(0x3) #0 [670741ms] <- dup=0x4 errno=14 cover=87 #0 [670741ms] -> setns(0x4, 0x80) #0 [670741ms] <- setns=0xffffffffffffffff errno=87 cover=351 enabling collider #0 [670741ms] -> getpid() #0 [670741ms] <- getpid=0x24720 errno=14 cover=48 #0 [670742ms] -> pidfd_open(0x24720, 0x0) #0 [670742ms] <- pidfd_open=0x3 errno=14 cover=456 pthread_create failed (errno 11) 03:34:16 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) 2033/05/18 03:34:16 result hanged=false: [670797ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149382 #0 [670805ms] -> syz_genetlink_get_family_id$nl80211(0x20000680, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [670810ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=13973 enabling collider #0 [670812ms] -> syz_genetlink_get_family_id$nl80211(0x20000680, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [670813ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11565 2033/05/18 03:34:16 result hanged=false: 03:34:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), 0xffffffffffffffff) [670833ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149384 #0 [670842ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [670842ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1193 #0 [670842ms] -> sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) #0 [670842ms] <- sendmsg$NL802154_CMD_GET_SEC_KEY=0xffffffffffffffff errno=9 cover=52 #0 [670843ms] -> syz_genetlink_get_family_id$nl80211(0x200004c0, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [670843ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12057 #0 [670844ms] -> syz_genetlink_get_family_id$nl802154(0x200009c0, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [670845ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=7378 enabling collider #0 [670845ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [670845ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1168 #0 [670846ms] -> sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) #0 [670846ms] <- sendmsg$NL802154_CMD_GET_SEC_KEY=0xffffffffffffffff errno=9 cover=52 pthread_create failed (errno 11) 03:34:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), 0xffffffffffffffff) 2033/05/18 03:34:16 result hanged=false: 2033/05/18 03:34:16 #0: triaging type=7 2033/05/18 03:34:16 triaging input for call #2 syz_genetlink_get_family_id$nl80211 (new signal=2) [670898ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149486 #0 [670907ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [670912ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1180 #0 [670913ms] -> sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) #0 [670913ms] <- sendmsg$NL802154_CMD_GET_SEC_KEY=0xffffffffffffffff errno=9 cover=52 #0 [670913ms] -> syz_genetlink_get_family_id$nl80211(0x200004c0, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [670914ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12001 #0 [670915ms] -> syz_genetlink_get_family_id$nl802154(0x200009c0, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [670916ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=7374 03:34:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), 0xffffffffffffffff) 2033/05/18 03:34:16 result hanged=false: [670934ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149488 #0 [670944ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [670944ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1192 #0 [670946ms] -> sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) #0 [670946ms] <- sendmsg$NL802154_CMD_GET_SEC_KEY=0xffffffffffffffff errno=9 cover=52 #0 [670946ms] -> syz_genetlink_get_family_id$nl80211(0x200004c0, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [670948ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12104 #0 [670949ms] -> syz_genetlink_get_family_id$nl802154(0x200009c0, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [670950ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=7402 03:34:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), 0xffffffffffffffff) 2033/05/18 03:34:16 result hanged=false: [670969ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149490 #0 [670982ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [670982ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1158 #0 [670983ms] -> sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) #0 [670983ms] <- sendmsg$NL802154_CMD_GET_SEC_KEY=0xffffffffffffffff errno=9 cover=52 #0 [670984ms] -> syz_genetlink_get_family_id$nl80211(0x200004c0, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [670985ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12090 #0 [670987ms] -> syz_genetlink_get_family_id$nl802154(0x200009c0, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [670988ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=7421 2033/05/18 03:34:16 result hanged=false: 2033/05/18 03:34:16 added new input for call #2 syz_genetlink_get_family_id$nl80211 to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), 0xffffffffffffffff) 03:34:16 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) [671024ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149492 #0 [671033ms] -> syz_open_procfs$namespace(0x0, 0x20000080) #0 [671036ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=2360 #0 [671037ms] -> ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) #0 [671037ms] <- ioctl$NS_GET_USERNS=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [671038ms] -> syz_open_procfs$namespace(0x0, 0x20000080) #0 [671038ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=2349 2033/05/18 03:34:16 result hanged=false: 03:34:16 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_tables_targets\x00') [671058ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149494 #0 [671068ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000180) #0 [671068ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2377 enabling collider #0 [671069ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000180) #0 [671069ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2342 2033/05/18 03:34:16 result hanged=false: 03:34:16 executing program 0: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) [671088ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149496 #0 [671098ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000000, 0x1, 0x0) #0 [671102ms] <- openat$tcp_mem=0xffffffffffffffff errno=2 cover=1216 enabling collider #0 [671103ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000000, 0x1, 0x0) #0 [671104ms] <- openat$tcp_mem=0xffffffffffffffff errno=2 cover=1185 03:34:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 2033/05/18 03:34:16 result hanged=false: 2033/05/18 03:34:16 poll: candidates=8 inputs=0 signal=0 [671124ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149498 #0 [671133ms] -> socketpair$unix(0x1, 0x1, 0x0, 0x20000000) #0 [671133ms] <- socketpair$unix=0x0 errno=14 cover=3553 #0 [671134ms] -> sendmmsg$unix(0x4, 0x0, 0x0, 0x0) #0 [671134ms] <- sendmmsg$unix=0x0 errno=14 cover=66 enabling collider #0 [671134ms] -> socketpair$unix(0x1, 0x1, 0x0, 0x20000000) #0 [671135ms] <- socketpair$unix=0x0 errno=14 cover=2887 2033/05/18 03:34:16 result hanged=false: 03:34:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x3) [671157ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149500 #0 [671168ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [671172ms] <- socket$inet6_tcp=0x3 errno=14 cover=1731 #0 [671173ms] -> setsockopt$inet6_tcp_TCP_CONGESTION(0x3, 0x6, 0xd, 0x20000180, 0x3) #0 [671187ms] <- setsockopt$inet6_tcp_TCP_CONGESTION=0xffffffffffffffff errno=2 cover=4224 enabling collider #0 [671188ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [671188ms] <- socket$inet6_tcp=0x3 errno=14 cover=1730 2033/05/18 03:34:16 result hanged=false: 03:34:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000040)) [671209ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149502 #0 [671219ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [671219ms] <- syz_open_dev$tty20=0xffffffffffffffff errno=2 cover=1155 #0 [671220ms] -> stat(0x20001cc0, 0x20001c00) #0 [671221ms] <- stat=0x0 errno=14 cover=532 #0 [671221ms] -> setresuid(0xffffffffffffffff, 0x41ed, 0x0) #0 [671221ms] <- setresuid=0x0 errno=14 cover=376 #0 [671221ms] -> ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x20000040) #0 [671221ms] <- ioctl$KDGKBMODE=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [671222ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [671222ms] <- syz_open_dev$tty20=0xffffffffffffffff errno=2 cover=1181 #0 [671224ms] -> stat(0x20001cc0, 0x20001c00) #0 [671224ms] <- stat=0x0 errno=14 cover=542 pthread_create failed (errno 11) 03:34:16 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 2033/05/18 03:34:16 result hanged=false: [671275ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149604 #0 [671285ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [671285ms] <- socket$inet6_udplite=0x3 errno=14 cover=1602 #0 [671286ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [671287ms] <- close_range=0x0 errno=14 cover=1341 #0 [671287ms] -> sendmmsg$inet(0x3, 0x0, 0x0, 0x0) #0 [671287ms] <- sendmmsg$inet=0x0 errno=14 cover=51 enabling collider #0 [671287ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [671288ms] <- socket$inet6_udplite=0x4 errno=14 cover=1715 #0 [671289ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [671289ms] <- close_range=0x0 errno=14 cover=51 pthread_create failed (errno 11) 03:34:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x52, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}}, 0x0) read(r0, &(0x7f0000000040)=""/86, 0x56) 2033/05/18 03:34:16 result hanged=false: [671342ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149706 #0 [671353ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [671353ms] <- socket$netlink=0x3 errno=14 cover=1421 #0 [671355ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [671356ms] <- sendmsg$nl_generic=0x14 errno=14 cover=3739 #0 [671356ms] -> read(0x3, 0x20000040, 0x56) #0 [671357ms] <- read=0x56 errno=14 cover=1329 enabling collider #0 [671357ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [671357ms] <- socket$netlink=0x3 errno=14 cover=1409 #0 [671358ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [671358ms] <- sendmsg$nl_generic=0x14 errno=14 cover=3700 pthread_create failed (errno 11) 03:34:16 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/ipc\x00') 2033/05/18 03:34:16 result hanged=false: [671410ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149808 #0 [671419ms] -> syz_open_procfs$namespace(0x0, 0x200003c0) #0 [671421ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=2375 #0 [671422ms] -> syz_open_procfs$namespace(0x0, 0x200007c0) #0 [671425ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=2369 enabling collider #0 [671427ms] -> syz_open_procfs$namespace(0x0, 0x200003c0) #0 [671427ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=2438 03:34:16 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x3f9, 0x300, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x18}}, 0x4000840) shmget(0x2, 0x2000, 0x20, &(0x7f0000ffd000/0x2000)=nil) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0xc8001, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 2033/05/18 03:34:16 result hanged=false: [671449ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149810 #0 [671458ms] -> ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) #0 [671461ms] <- ioctl$LOOP_CTL_ADD=0xffffffffffffffff errno=9 cover=45 #0 [671463ms] -> ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) #0 [671463ms] <- ioctl$LOOP_CTL_GET_FREE=0xffffffffffffffff errno=9 cover=45 #0 [671464ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000000, 0x40, 0x0) #0 [671464ms] <- openat$loop_ctrl=0xffffffffffffffff errno=2 cover=1189 #0 [671464ms] -> ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) #0 [671464ms] <- ioctl$LOOP_CTL_REMOVE=0xffffffffffffffff errno=9 cover=45 #0 [671465ms] -> ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) #0 [671465ms] <- ioctl$LOOP_CTL_REMOVE=0xffffffffffffffff errno=9 cover=45 #0 [671465ms] -> ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) #0 [671465ms] <- ioctl$LOOP_CTL_REMOVE=0xffffffffffffffff errno=9 cover=45 #0 [671466ms] -> sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x200001c0, 0x4000840) #0 [671466ms] <- sendmsg$AUDIT_TTY_SET=0xffffffffffffffff errno=9 cover=52 #0 [671466ms] -> shmget(0x798dd815, 0x2000, 0x20, 0x20ffd000) #0 [671466ms] <- shmget=0x17 errno=14 cover=178 #0 [671467ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000300, 0xc8001, 0x0) #0 [671467ms] <- openat$loop_ctrl=0xffffffffffffffff errno=2 cover=1157 #0 [671468ms] -> ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) #0 [671468ms] <- ioctl$LOOP_CTL_ADD=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [671468ms] -> ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) #0 [671469ms] <- ioctl$LOOP_CTL_ADD=0xffffffffffffffff errno=9 cover=45 #0 [671469ms] -> ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) #0 [671469ms] <- ioctl$LOOP_CTL_GET_FREE=0xffffffffffffffff errno=9 cover=45 pthread_create failed (errno 11) 03:34:16 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x3f9, 0x300, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x18}}, 0x4000840) shmget(0x2, 0x2000, 0x20, &(0x7f0000ffd000/0x2000)=nil) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0xc8001, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 2033/05/18 03:34:16 result hanged=false: 2033/05/18 03:34:16 #0: triaging type=7 2033/05/18 03:34:16 triaging input for call #7 shmget (new signal=10) [671517ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149912 #0 [671526ms] -> ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) #0 [671527ms] <- ioctl$LOOP_CTL_ADD=0xffffffffffffffff errno=9 cover=45 #0 [671529ms] -> ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) #0 [671529ms] <- ioctl$LOOP_CTL_GET_FREE=0xffffffffffffffff errno=9 cover=45 #0 [671529ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000000, 0x40, 0x0) #0 [671529ms] <- openat$loop_ctrl=0xffffffffffffffff errno=2 cover=1195 #0 [671529ms] -> ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) #0 [671529ms] <- ioctl$LOOP_CTL_REMOVE=0xffffffffffffffff errno=9 cover=45 #0 [671529ms] -> ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) #0 [671530ms] <- ioctl$LOOP_CTL_REMOVE=0xffffffffffffffff errno=9 cover=45 #0 [671530ms] -> ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) #0 [671530ms] <- ioctl$LOOP_CTL_REMOVE=0xffffffffffffffff errno=9 cover=45 #0 [671530ms] -> sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x200001c0, 0x4000840) #0 [671530ms] <- sendmsg$AUDIT_TTY_SET=0xffffffffffffffff errno=9 cover=52 #0 [671530ms] -> shmget(0x798dd815, 0x2000, 0x20, 0x20ffd000) #0 [671530ms] <- shmget=0x17 errno=14 cover=178 #0 [671530ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000300, 0xc8001, 0x0) #0 [671531ms] <- openat$loop_ctrl=0xffffffffffffffff errno=2 cover=1194 #0 [671532ms] -> ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) #0 [671533ms] <- ioctl$LOOP_CTL_ADD=0xffffffffffffffff errno=9 cover=45 03:34:16 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x3f9, 0x300, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x18}}, 0x4000840) shmget(0x2, 0x2000, 0x20, &(0x7f0000ffd000/0x2000)=nil) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0xc8001, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 2033/05/18 03:34:16 result hanged=false: [671553ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149914 #0 [671562ms] -> ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) #0 [671562ms] <- ioctl$LOOP_CTL_ADD=0xffffffffffffffff errno=9 cover=45 #0 [671563ms] -> ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) #0 [671563ms] <- ioctl$LOOP_CTL_GET_FREE=0xffffffffffffffff errno=9 cover=45 #0 [671563ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000000, 0x40, 0x0) #0 [671563ms] <- openat$loop_ctrl=0xffffffffffffffff errno=2 cover=1194 #0 [671563ms] -> ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) #0 [671564ms] <- ioctl$LOOP_CTL_REMOVE=0xffffffffffffffff errno=9 cover=45 #0 [671564ms] -> ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) #0 [671564ms] <- ioctl$LOOP_CTL_REMOVE=0xffffffffffffffff errno=9 cover=45 #0 [671564ms] -> ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) #0 [671564ms] <- ioctl$LOOP_CTL_REMOVE=0xffffffffffffffff errno=9 cover=45 #0 [671564ms] -> sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x200001c0, 0x4000840) #0 [671564ms] <- sendmsg$AUDIT_TTY_SET=0xffffffffffffffff errno=9 cover=52 #0 [671564ms] -> shmget(0x798dd815, 0x2000, 0x20, 0x20ffd000) #0 [671564ms] <- shmget=0x17 errno=14 cover=178 #0 [671564ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000300, 0xc8001, 0x0) #0 [671564ms] <- openat$loop_ctrl=0xffffffffffffffff errno=2 cover=1157 #0 [671565ms] -> ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) #0 [671565ms] <- ioctl$LOOP_CTL_ADD=0xffffffffffffffff errno=9 cover=45 2033/05/18 03:34:17 result hanged=false: 03:34:17 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x3f9, 0x300, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x18}}, 0x4000840) shmget(0x2, 0x2000, 0x20, &(0x7f0000ffd000/0x2000)=nil) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0xc8001, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) [671584ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149916 #0 [671592ms] -> ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) #0 [671596ms] <- ioctl$LOOP_CTL_ADD=0xffffffffffffffff errno=9 cover=45 #0 [671597ms] -> ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) #0 [671597ms] <- ioctl$LOOP_CTL_GET_FREE=0xffffffffffffffff errno=9 cover=45 #0 [671597ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000000, 0x40, 0x0) #0 [671598ms] <- openat$loop_ctrl=0xffffffffffffffff errno=2 cover=1175 #0 [671599ms] -> ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) #0 [671599ms] <- ioctl$LOOP_CTL_REMOVE=0xffffffffffffffff errno=9 cover=45 #0 [671599ms] -> ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) #0 [671599ms] <- ioctl$LOOP_CTL_REMOVE=0xffffffffffffffff errno=9 cover=45 #0 [671599ms] -> ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) #0 [671599ms] <- ioctl$LOOP_CTL_REMOVE=0xffffffffffffffff errno=9 cover=45 #0 [671600ms] -> sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x200001c0, 0x4000840) #0 [671600ms] <- sendmsg$AUDIT_TTY_SET=0xffffffffffffffff errno=9 cover=52 #0 [671600ms] -> shmget(0x798dd815, 0x2000, 0x20, 0x20ffd000) #0 [671601ms] <- shmget=0x17 errno=14 cover=178 #0 [671601ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000300, 0xc8001, 0x0) #0 [671602ms] <- openat$loop_ctrl=0xffffffffffffffff errno=2 cover=1182 #0 [671603ms] -> ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) #0 [671603ms] <- ioctl$LOOP_CTL_ADD=0xffffffffffffffff errno=9 cover=45 2033/05/18 03:34:17 result hanged=false: 2033/05/18 03:34:17 added new input for call #7 shmget to corpus: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x3f9, 0x300, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x18}}, 0x4000840) shmget(0x2, 0x2000, 0x20, &(0x7f0000ffd000/0x2000)=nil) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0xc8001, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 03:34:17 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "1c00000000000000000000f1ffffff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) [671622ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149918 #0 [671631ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [671634ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [671636ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [671637ms] <- openat$tun=0xffffffffffffffff errno=2 cover=1202 #0 [671637ms] -> ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, 0x20000000) #0 [671638ms] <- ioctl$TUNSETQUEUE=0xffffffffffffffff errno=9 cover=45 #0 [671638ms] -> io_uring_setup(0x0, 0x200001c0) #0 [671638ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=53 #0 [671639ms] -> ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x20000040) #0 [671639ms] <- ioctl$TUNSETCARRIER=0xffffffffffffffff errno=9 cover=45 #0 [671639ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [671645ms] <- perf_event_open=0x3 errno=14 cover=10569 #0 [671645ms] -> socket$inet(0x2, 0xa, 0x0) #0 [671647ms] <- socket$inet=0x4 errno=14 cover=4945 #0 [671647ms] -> ioctl$sock_inet_SIOCGIFNETMASK(0x4, 0x8914, 0x200001c0) #0 [671675ms] <- ioctl$sock_inet_SIOCGIFNETMASK=0xffffffffffffffff errno=19 cover=6211 enabling collider #0 [671691ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [671691ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [671692ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [671692ms] <- openat$tun=0xffffffffffffffff errno=2 cover=1224 pthread_create failed (errno 11) 2033/05/18 03:34:17 result hanged=false: 03:34:17 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480), 0x0) connect$inet(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x6) getpeername(r3, &(0x7f0000000180)=@un=@abs, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x40000, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) lseek(r1, 0x0, 0x4) r5 = dup(0xffffffffffffffff) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000003c0)={'hsr0\x00'}) 2033/05/18 03:34:17 poll: candidates=8 inputs=0 signal=0 [671747ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150020 #0 [671756ms] -> creat(0x20000080, 0x0) #0 [671759ms] <- creat=0x3 errno=14 cover=13842 #0 [671760ms] -> creat(0x20000000, 0x0) #0 [671761ms] <- creat=0x4 errno=14 cover=4928 #0 [671761ms] -> fallocate(0xffffffffffffffff, 0x1, 0x0, 0x0) #0 [671761ms] <- fallocate=0xffffffffffffffff errno=9 cover=45 #0 [671761ms] -> socket$inet(0x2, 0x0, 0x0) #0 [671787ms] <- socket$inet=0xffffffffffffffff errno=94 cover=2724 #0 [671787ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [671788ms] <- socket$inet6_tcp=0x5 errno=14 cover=1774 #0 [671788ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [671788ms] <- openat$loop_ctrl=0xffffffffffffffff errno=14 cover=628 #0 [671789ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [671789ms] <- socket$inet_udp=0x6 errno=14 cover=1759 #0 [671789ms] -> readv(0xffffffffffffffff, 0x20000480, 0x0) #0 [671789ms] <- readv=0xffffffffffffffff errno=9 cover=47 #0 [671789ms] -> connect$inet(0x6, 0x0, 0x0) #0 [671790ms] <- connect$inet=0xffffffffffffffff errno=22 cover=74 #0 [671790ms] -> openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [671790ms] <- openat$procfs=0xffffffffffffffff errno=14 cover=627 #0 [671791ms] -> sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) #0 [671791ms] <- sendfile=0xffffffffffffffff errno=9 cover=48 #0 [671791ms] -> getpeername(0x6, 0x20000180, 0x0) #0 [671791ms] <- getpeername=0xffffffffffffffff errno=107 cover=73 #0 [671791ms] -> getsockopt$inet6_tcp_buf(0x5, 0x6, 0x0, 0x0, 0x0) #0 [671791ms] <- getsockopt$inet6_tcp_buf=0xffffffffffffffff errno=14 cover=262 #0 [671791ms] -> syz_io_uring_setup(0x40000, 0x0, 0x20ffd000, 0x20ffc000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [671792ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=1455 #0 [671792ms] -> fallocate(0x4, 0x0, 0x0, 0x8800000) #0 [671797ms] <- fallocate=0x0 errno=14 cover=79549 #0 [671798ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [672146ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [672155ms] -> lseek(0x4, 0x0, 0x4) #0 [672160ms] <- lseek=0xfff000 errno=14 cover=177642 #0 [672161ms] -> dup(0xffffffffffffffff) #0 [672161ms] <- dup=0xffffffffffffffff errno=9 cover=41 #0 [672161ms] -> ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x200003c0) #0 [672161ms] <- ioctl$sock_inet_SIOCGIFPFLAGS=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [672163ms] -> creat(0x20000080, 0x0) #0 [672261ms] <- creat=0x3 errno=14 cover=262143 #0 [672262ms] -> creat(0x20000000, 0x0) #0 [672263ms] <- creat=0x4 errno=14 cover=4765 pthread_create failed (errno 11) 2033/05/18 03:34:17 result hanged=false: 2033/05/18 03:34:17 #0: triaging type=7 2033/05/18 03:34:17 triaging input for call #16 lseek (new signal=4) 03:34:17 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480), 0x0) connect$inet(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x6) getpeername(r3, &(0x7f0000000180)=@un=@abs, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x40000, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) lseek(r1, 0x0, 0x4) r5 = dup(0xffffffffffffffff) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000003c0)={'hsr0\x00'}) [672317ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150122 #0 [672326ms] -> creat(0x20000080, 0x0) #0 [672327ms] <- creat=0x3 errno=14 cover=6692 #0 [672329ms] -> creat(0x20000000, 0x0) #0 [672330ms] <- creat=0x4 errno=14 cover=4932 #0 [672331ms] -> fallocate(0xffffffffffffffff, 0x1, 0x0, 0x0) #0 [672331ms] <- fallocate=0xffffffffffffffff errno=9 cover=45 #0 [672331ms] -> socket$inet(0x2, 0x0, 0x0) #0 [672360ms] <- socket$inet=0xffffffffffffffff errno=94 cover=2676 #0 [672361ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [672361ms] <- socket$inet6_tcp=0x5 errno=14 cover=1753 #0 [672363ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [672363ms] <- openat$loop_ctrl=0xffffffffffffffff errno=14 cover=628 #0 [672363ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [672364ms] <- socket$inet_udp=0x6 errno=14 cover=1740 #0 [672365ms] -> readv(0xffffffffffffffff, 0x20000480, 0x0) #0 [672365ms] <- readv=0xffffffffffffffff errno=9 cover=47 #0 [672365ms] -> connect$inet(0x6, 0x0, 0x0) #0 [672365ms] <- connect$inet=0xffffffffffffffff errno=22 cover=74 #0 [672365ms] -> openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [672365ms] <- openat$procfs=0xffffffffffffffff errno=14 cover=627 #0 [672366ms] -> sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) #0 [672366ms] <- sendfile=0xffffffffffffffff errno=9 cover=48 #0 [672366ms] -> getpeername(0x6, 0x20000180, 0x0) #0 [672366ms] <- getpeername=0xffffffffffffffff errno=107 cover=73 #0 [672366ms] -> getsockopt$inet6_tcp_buf(0x5, 0x6, 0x0, 0x0, 0x0) #0 [672367ms] <- getsockopt$inet6_tcp_buf=0xffffffffffffffff errno=14 cover=262 #0 [672367ms] -> syz_io_uring_setup(0x40000, 0x0, 0x20ffd000, 0x20ffc000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [672367ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=1412 #0 [672368ms] -> fallocate(0x4, 0x0, 0x0, 0x8800000) #0 [672373ms] <- fallocate=0x0 errno=14 cover=78166 #0 [672379ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [672736ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [672757ms] -> lseek(0x4, 0x0, 0x4) #0 [672766ms] <- lseek=0xfff000 errno=14 cover=175644 #0 [672777ms] -> dup(0xffffffffffffffff) #0 [672779ms] <- dup=0xffffffffffffffff errno=9 cover=41 #0 [672780ms] -> ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x200003c0) #0 [672782ms] <- ioctl$sock_inet_SIOCGIFPFLAGS=0xffffffffffffffff errno=9 cover=45 2033/05/18 03:34:18 result hanged=false: 03:34:18 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480), 0x0) connect$inet(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x6) getpeername(r3, &(0x7f0000000180)=@un=@abs, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x40000, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) lseek(r1, 0x0, 0x4) r5 = dup(0xffffffffffffffff) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000003c0)={'hsr0\x00'}) [672891ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150124 #0 [672902ms] -> creat(0x20000080, 0x0) #0 [672902ms] <- creat=0x3 errno=14 cover=6773 #0 [672904ms] -> creat(0x20000000, 0x0) #0 [672904ms] <- creat=0x4 errno=14 cover=4978 #0 [672905ms] -> fallocate(0xffffffffffffffff, 0x1, 0x0, 0x0) #0 [672905ms] <- fallocate=0xffffffffffffffff errno=9 cover=45 #0 [672905ms] -> socket$inet(0x2, 0x0, 0x0) #0 [672933ms] <- socket$inet=0xffffffffffffffff errno=94 cover=2893 #0 [672933ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [672934ms] <- socket$inet6_tcp=0x5 errno=14 cover=1720 #0 [672934ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [672934ms] <- openat$loop_ctrl=0xffffffffffffffff errno=14 cover=617 #0 [672934ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [672934ms] <- socket$inet_udp=0x6 errno=14 cover=1672 #0 [672935ms] -> readv(0xffffffffffffffff, 0x20000480, 0x0) #0 [672935ms] <- readv=0xffffffffffffffff errno=9 cover=47 #0 [672935ms] -> connect$inet(0x6, 0x0, 0x0) #0 [672935ms] <- connect$inet=0xffffffffffffffff errno=22 cover=74 #0 [672935ms] -> openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [672935ms] <- openat$procfs=0xffffffffffffffff errno=14 cover=628 #0 [672935ms] -> sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) #0 [672935ms] <- sendfile=0xffffffffffffffff errno=9 cover=48 #0 [672935ms] -> getpeername(0x6, 0x20000180, 0x0) #0 [672935ms] <- getpeername=0xffffffffffffffff errno=107 cover=73 #0 [672935ms] -> getsockopt$inet6_tcp_buf(0x5, 0x6, 0x0, 0x0, 0x0) #0 [672935ms] <- getsockopt$inet6_tcp_buf=0xffffffffffffffff errno=14 cover=262 #0 [672936ms] -> syz_io_uring_setup(0x40000, 0x0, 0x20ffd000, 0x20ffc000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [672936ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=1468 #0 [672936ms] -> fallocate(0x4, 0x0, 0x0, 0x8800000) #0 [672940ms] <- fallocate=0x0 errno=14 cover=77429 #0 [672946ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [673297ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [673317ms] -> lseek(0x4, 0x0, 0x4) #0 [673323ms] <- lseek=0xfff000 errno=14 cover=175678 #0 [673332ms] -> dup(0xffffffffffffffff) #0 [673332ms] <- dup=0xffffffffffffffff errno=9 cover=41 #0 [673332ms] -> ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x200003c0) #0 [673332ms] <- ioctl$sock_inet_SIOCGIFPFLAGS=0xffffffffffffffff errno=9 cover=45 2033/05/18 03:34:18 result hanged=false: 03:34:18 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480), 0x0) connect$inet(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x6) getpeername(r3, &(0x7f0000000180)=@un=@abs, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x40000, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) lseek(r1, 0x0, 0x4) r5 = dup(0xffffffffffffffff) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000003c0)={'hsr0\x00'}) [673459ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150126 #0 [673468ms] -> creat(0x20000080, 0x0) #0 [673469ms] <- creat=0x3 errno=14 cover=6682 #0 [673470ms] -> creat(0x20000000, 0x0) #0 [673471ms] <- creat=0x4 errno=14 cover=7914 #0 [673473ms] -> fallocate(0xffffffffffffffff, 0x1, 0x0, 0x0) #0 [673473ms] <- fallocate=0xffffffffffffffff errno=9 cover=45 #0 [673473ms] -> socket$inet(0x2, 0x0, 0x0) #0 [673501ms] <- socket$inet=0xffffffffffffffff errno=94 cover=2670 #0 [673502ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [673503ms] <- socket$inet6_tcp=0x5 errno=14 cover=1745 #0 [673504ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [673504ms] <- openat$loop_ctrl=0xffffffffffffffff errno=14 cover=617 #0 [673505ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [673506ms] <- socket$inet_udp=0x6 errno=14 cover=1690 #0 [673506ms] -> readv(0xffffffffffffffff, 0x20000480, 0x0) #0 [673507ms] <- readv=0xffffffffffffffff errno=9 cover=47 #0 [673507ms] -> connect$inet(0x6, 0x0, 0x0) #0 [673507ms] <- connect$inet=0xffffffffffffffff errno=22 cover=74 #0 [673507ms] -> openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [673507ms] <- openat$procfs=0xffffffffffffffff errno=14 cover=628 #0 [673507ms] -> sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) #0 [673508ms] <- sendfile=0xffffffffffffffff errno=9 cover=48 #0 [673508ms] -> getpeername(0x6, 0x20000180, 0x0) #0 [673508ms] <- getpeername=0xffffffffffffffff errno=107 cover=73 #0 [673508ms] -> getsockopt$inet6_tcp_buf(0x5, 0x6, 0x0, 0x0, 0x0) #0 [673509ms] <- getsockopt$inet6_tcp_buf=0xffffffffffffffff errno=14 cover=262 #0 [673509ms] -> syz_io_uring_setup(0x40000, 0x0, 0x20ffd000, 0x20ffc000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [673511ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=1476 #0 [673511ms] -> fallocate(0x4, 0x0, 0x0, 0x8800000) #0 [673517ms] <- fallocate=0x0 errno=14 cover=77183 #0 [673522ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [673883ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [673904ms] -> lseek(0x4, 0x0, 0x4) #0 [673910ms] <- lseek=0xfff000 errno=14 cover=175866 #0 [673921ms] -> dup(0xffffffffffffffff) #0 [673921ms] <- dup=0xffffffffffffffff errno=9 cover=41 #0 [673921ms] -> ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x200003c0) #0 [673921ms] <- ioctl$sock_inet_SIOCGIFPFLAGS=0xffffffffffffffff errno=9 cover=45 2033/05/18 03:34:19 result hanged=false: 2033/05/18 03:34:19 added new input for call #16 lseek to corpus: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480), 0x0) connect$inet(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x6) getpeername(r3, &(0x7f0000000180)=@un=@abs, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x40000, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) lseek(r1, 0x0, 0x4) r5 = dup(0xffffffffffffffff) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000003c0)={'hsr0\x00'}) 03:34:19 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480), 0x0) connect$inet(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x6) getpeername(r3, &(0x7f0000000180)=@un=@abs, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x40000, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) lseek(r1, 0x0, 0x4) r5 = dup(0xffffffffffffffff) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000003c0)={'hsr0\x00'}) 2033/05/18 03:34:19 #0: triaging type=7 2033/05/18 03:34:19 triaging input for call #15 pwrite64 (new signal=2) [674060ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150128 #0 [674070ms] -> creat(0x20000080, 0x0) #0 [674073ms] <- creat=0x3 errno=14 cover=6700 #0 [674075ms] -> creat(0x20000000, 0x0) #0 [674077ms] <- creat=0x4 errno=14 cover=4942 #0 [674079ms] -> fallocate(0xffffffffffffffff, 0x1, 0x0, 0x0) #0 [674081ms] <- fallocate=0xffffffffffffffff errno=9 cover=45 #0 [674081ms] -> socket$inet(0x2, 0x0, 0x0) #0 [674109ms] <- socket$inet=0xffffffffffffffff errno=94 cover=2703 #0 [674110ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [674110ms] <- socket$inet6_tcp=0x5 errno=14 cover=1731 #0 [674112ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [674112ms] <- openat$loop_ctrl=0xffffffffffffffff errno=14 cover=617 #0 [674114ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [674114ms] <- socket$inet_udp=0x6 errno=14 cover=1683 #0 [674114ms] -> readv(0xffffffffffffffff, 0x20000480, 0x0) #0 [674114ms] <- readv=0xffffffffffffffff errno=9 cover=47 #0 [674115ms] -> connect$inet(0x6, 0x0, 0x0) #0 [674115ms] <- connect$inet=0xffffffffffffffff errno=22 cover=74 #0 [674115ms] -> openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [674115ms] <- openat$procfs=0xffffffffffffffff errno=14 cover=627 #0 [674115ms] -> sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) #0 [674115ms] <- sendfile=0xffffffffffffffff errno=9 cover=48 #0 [674115ms] -> getpeername(0x6, 0x20000180, 0x0) #0 [674115ms] <- getpeername=0xffffffffffffffff errno=107 cover=73 #0 [674115ms] -> getsockopt$inet6_tcp_buf(0x5, 0x6, 0x0, 0x0, 0x0) #0 [674116ms] <- getsockopt$inet6_tcp_buf=0xffffffffffffffff errno=14 cover=262 #0 [674116ms] -> syz_io_uring_setup(0x40000, 0x0, 0x20ffd000, 0x20ffc000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [674116ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=1412 #0 [674116ms] -> fallocate(0x4, 0x0, 0x0, 0x8800000) #0 [674121ms] <- fallocate=0x0 errno=14 cover=77165 #0 [674126ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [674476ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [674497ms] -> lseek(0x4, 0x0, 0x4) #0 [674508ms] <- lseek=0xfff000 errno=14 cover=175773 #0 [674518ms] -> dup(0xffffffffffffffff) #0 [674518ms] <- dup=0xffffffffffffffff errno=9 cover=41 #0 [674518ms] -> ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x200003c0) #0 [674518ms] <- ioctl$sock_inet_SIOCGIFPFLAGS=0xffffffffffffffff errno=9 cover=45 2033/05/18 03:34:19 result hanged=false: 03:34:19 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480), 0x0) connect$inet(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x6) getpeername(r3, &(0x7f0000000180)=@un=@abs, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x40000, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) lseek(r1, 0x0, 0x4) r5 = dup(0xffffffffffffffff) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000003c0)={'hsr0\x00'}) [674623ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150130 #0 [674634ms] -> creat(0x20000080, 0x0) #0 [674635ms] <- creat=0x3 errno=14 cover=6839 #0 [674636ms] -> creat(0x20000000, 0x0) #0 [674636ms] <- creat=0x4 errno=14 cover=4923 #0 [674637ms] -> fallocate(0xffffffffffffffff, 0x1, 0x0, 0x0) #0 [674637ms] <- fallocate=0xffffffffffffffff errno=9 cover=45 #0 [674637ms] -> socket$inet(0x2, 0x0, 0x0) #0 [674669ms] <- socket$inet=0xffffffffffffffff errno=94 cover=2673 #0 [674670ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [674671ms] <- socket$inet6_tcp=0x5 errno=14 cover=1789 #0 [674672ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [674672ms] <- openat$loop_ctrl=0xffffffffffffffff errno=14 cover=616 #0 [674673ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [674673ms] <- socket$inet_udp=0x6 errno=14 cover=1661 #0 [674674ms] -> readv(0xffffffffffffffff, 0x20000480, 0x0) #0 [674674ms] <- readv=0xffffffffffffffff errno=9 cover=47 #0 [674674ms] -> connect$inet(0x6, 0x0, 0x0) #0 [674675ms] <- connect$inet=0xffffffffffffffff errno=22 cover=74 #0 [674675ms] -> openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [674676ms] <- openat$procfs=0xffffffffffffffff errno=14 cover=616 #0 [674676ms] -> sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) #0 [674677ms] <- sendfile=0xffffffffffffffff errno=9 cover=48 #0 [674677ms] -> getpeername(0x6, 0x20000180, 0x0) #0 [674677ms] <- getpeername=0xffffffffffffffff errno=107 cover=73 #0 [674678ms] -> getsockopt$inet6_tcp_buf(0x5, 0x6, 0x0, 0x0, 0x0) #0 [674678ms] <- getsockopt$inet6_tcp_buf=0xffffffffffffffff errno=14 cover=262 #0 [674679ms] -> syz_io_uring_setup(0x40000, 0x0, 0x20ffd000, 0x20ffc000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [674680ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=1424 #0 [674680ms] -> fallocate(0x4, 0x0, 0x0, 0x8800000) #0 [674685ms] <- fallocate=0x0 errno=14 cover=77079 #0 [674690ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [675038ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [675057ms] -> lseek(0x4, 0x0, 0x4) #0 [675061ms] <- lseek=0xfff000 errno=14 cover=175563 #0 [675070ms] -> dup(0xffffffffffffffff) #0 [675070ms] <- dup=0xffffffffffffffff errno=9 cover=41 #0 [675070ms] -> ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x200003c0) #0 [675070ms] <- ioctl$sock_inet_SIOCGIFPFLAGS=0xffffffffffffffff errno=9 cover=45 2033/05/18 03:34:20 result hanged=false: 03:34:20 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480), 0x0) connect$inet(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x6) getpeername(r3, &(0x7f0000000180)=@un=@abs, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x40000, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) lseek(r1, 0x0, 0x4) r5 = dup(0xffffffffffffffff) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000003c0)={'hsr0\x00'}) [675179ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150132 #0 [675194ms] -> creat(0x20000080, 0x0) #0 [675195ms] <- creat=0x3 errno=14 cover=6704 #0 [675197ms] -> creat(0x20000000, 0x0) #0 [675197ms] <- creat=0x4 errno=14 cover=4958 #0 [675198ms] -> fallocate(0xffffffffffffffff, 0x1, 0x0, 0x0) #0 [675199ms] <- fallocate=0xffffffffffffffff errno=9 cover=45 #0 [675199ms] -> socket$inet(0x2, 0x0, 0x0) #0 [675227ms] <- socket$inet=0xffffffffffffffff errno=94 cover=2758 #0 [675228ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [675229ms] <- socket$inet6_tcp=0x5 errno=14 cover=1745 #0 [675230ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [675230ms] <- openat$loop_ctrl=0xffffffffffffffff errno=14 cover=617 #0 [675231ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [675231ms] <- socket$inet_udp=0x6 errno=14 cover=1683 #0 [675231ms] -> readv(0xffffffffffffffff, 0x20000480, 0x0) #0 [675232ms] <- readv=0xffffffffffffffff errno=9 cover=47 #0 [675232ms] -> connect$inet(0x6, 0x0, 0x0) #0 [675232ms] <- connect$inet=0xffffffffffffffff errno=22 cover=74 #0 [675232ms] -> openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [675235ms] <- openat$procfs=0xffffffffffffffff errno=14 cover=5575 #0 [675236ms] -> sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) #0 [675236ms] <- sendfile=0xffffffffffffffff errno=9 cover=48 #0 [675237ms] -> getpeername(0x6, 0x20000180, 0x0) #0 [675237ms] <- getpeername=0xffffffffffffffff errno=107 cover=73 #0 [675237ms] -> getsockopt$inet6_tcp_buf(0x5, 0x6, 0x0, 0x0, 0x0) #0 [675237ms] <- getsockopt$inet6_tcp_buf=0xffffffffffffffff errno=14 cover=262 #0 [675238ms] -> syz_io_uring_setup(0x40000, 0x0, 0x20ffd000, 0x20ffc000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [675238ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=1472 #0 [675239ms] -> fallocate(0x4, 0x0, 0x0, 0x8800000) #0 [675244ms] <- fallocate=0x0 errno=14 cover=77647 #0 [675249ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [675606ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [675629ms] -> lseek(0x4, 0x0, 0x4) #0 [675632ms] <- lseek=0xfff000 errno=14 cover=175629 #0 [675642ms] -> dup(0xffffffffffffffff) #0 [675642ms] <- dup=0xffffffffffffffff errno=9 cover=41 #0 [675642ms] -> ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x200003c0) #0 [675642ms] <- ioctl$sock_inet_SIOCGIFPFLAGS=0xffffffffffffffff errno=9 cover=45 2033/05/18 03:34:21 result hanged=false: 2033/05/18 03:34:21 added new input for call #15 pwrite64 to corpus: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480), 0x0) connect$inet(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x6) getpeername(r3, &(0x7f0000000180)=@un=@abs, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x40000, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) lseek(r1, 0x0, 0x4) r5 = dup(0xffffffffffffffff) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000003c0)={'hsr0\x00'}) 03:34:21 executing program 0: msgctl$IPC_SET(0x0, 0x1, 0x0) [675789ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150134 #0 [675799ms] -> msgctl$IPC_SET(0x0, 0x1, 0x0) #0 [675800ms] <- msgctl$IPC_SET=0xffffffffffffffff errno=14 cover=399 enabling collider #0 [675800ms] -> msgctl$IPC_SET(0x0, 0x1, 0x0) #0 [675800ms] <- msgctl$IPC_SET=0xffffffffffffffff errno=14 cover=400 03:34:21 executing program 0: mq_open(&(0x7f0000000b00)=':-&+\x00', 0x40, 0x0, &(0x7f0000000b40)={0x3677, 0x1000, 0x0, 0x6}) 2033/05/18 03:34:21 result hanged=false: [675821ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150136 #0 [675832ms] -> mq_open(0x20000b00, 0x40, 0x0, 0x20000b40) #0 [675834ms] <- mq_open=0xffffffffffffffff errno=22 cover=1702 enabling collider #0 [675835ms] -> mq_open(0x20000b00, 0x40, 0x0, 0x20000b40) #0 [675835ms] <- mq_open=0xffffffffffffffff errno=22 cover=1676 03:34:21 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:34:21 result hanged=false: [675853ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150138 #0 [675863ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [675871ms] <- perf_event_open=0x3 errno=14 cover=20833 #0 [675872ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [675873ms] <- close_range=0x0 errno=14 cover=3838 #0 [675873ms] -> pwritev(0x3, 0x0, 0x0, 0x0, 0x0) #0 [675874ms] <- pwritev=0xffffffffffffffff errno=29 cover=45 enabling collider #0 [675874ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [675877ms] <- perf_event_open=0x4 errno=14 cover=34302 #0 [675878ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [675878ms] <- close_range=0x0 errno=14 cover=51 pthread_create failed (errno 11) 03:34:21 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f00000006c0)=[{}]}) 2033/05/18 03:34:21 result hanged=false: [675931ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150240 #0 [675942ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000700) #0 [675945ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0xffffffffffffffff errno=22 cover=1491 enabling collider #0 [675947ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000700) #0 [675949ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0xffffffffffffffff errno=22 cover=1543 03:34:21 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet(r0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11}}], 0x30}, 0x0) 2033/05/18 03:34:21 result hanged=false: [675969ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150242 #0 [675979ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [675982ms] <- syz_init_net_socket$bt_sco=0xffffffffffffffff errno=2 cover=1192 #0 [675982ms] -> sendmsg$inet(0xffffffffffffffff, 0x20001780, 0x0) #0 [675982ms] <- sendmsg$inet=0xffffffffffffffff errno=9 cover=52 enabling collider #0 [675983ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [675983ms] <- syz_init_net_socket$bt_sco=0xffffffffffffffff errno=2 cover=1183 2033/05/18 03:34:21 result hanged=false: 03:34:21 executing program 0: setgid(0x0) [676003ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150244 #0 [676011ms] -> setgid(0x0) #0 [676012ms] <- setgid=0x0 errno=14 cover=334 enabling collider #0 [676014ms] -> setgid(0x0) #0 [676014ms] <- setgid=0x0 errno=14 cover=368 2033/05/18 03:34:21 result hanged=false: 03:34:21 executing program 0: r0 = epoll_create(0x8000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) [676035ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150246 #0 [676045ms] -> epoll_create(0x8000) #0 [676047ms] <- epoll_create=0x3 errno=14 cover=499 #0 [676048ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [676049ms] <- syz_open_dev$tty1=0xffffffffffffffff errno=2 cover=1214 #0 [676049ms] -> epoll_create(0x8000) #0 [676049ms] <- epoll_create=0x4 errno=14 cover=506 #0 [676051ms] -> epoll_ctl$EPOLL_CTL_ADD(0x4, 0x1, 0x3, 0x200000c0) #0 [676051ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=412 #0 [676051ms] -> epoll_ctl$EPOLL_CTL_ADD(0x4, 0x1, 0xffffffffffffffff, 0x200001c0) #0 [676051ms] <- epoll_ctl$EPOLL_CTL_ADD=0xffffffffffffffff errno=9 cover=86 #0 [676051ms] -> epoll_ctl$EPOLL_CTL_ADD(0x3, 0x1, 0xffffffffffffffff, 0x20000040) #0 [676051ms] <- epoll_ctl$EPOLL_CTL_ADD=0xffffffffffffffff errno=9 cover=86 enabling collider #0 [676052ms] -> epoll_create(0x8000) #0 [676052ms] <- epoll_create=0x3 errno=14 cover=473 #0 [676053ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [676053ms] <- syz_open_dev$tty1=0xffffffffffffffff errno=2 cover=1176 pthread_create failed (errno 11) 03:34:21 executing program 0: r0 = epoll_create(0x8000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 2033/05/18 03:34:21 result hanged=false: 2033/05/18 03:34:21 #0: triaging type=7 2033/05/18 03:34:21 triaging input for call #3 epoll_ctl$EPOLL_CTL_ADD (new signal=2) [676108ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150348 #0 [676118ms] -> epoll_create(0x8000) #0 [676119ms] <- epoll_create=0x3 errno=14 cover=485 #0 [676120ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [676120ms] <- syz_open_dev$tty1=0xffffffffffffffff errno=2 cover=1169 #0 [676121ms] -> epoll_create(0x8000) #0 [676122ms] <- epoll_create=0x4 errno=14 cover=484 #0 [676124ms] -> epoll_ctl$EPOLL_CTL_ADD(0x4, 0x1, 0x3, 0x200000c0) #0 [676125ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=412 #0 [676125ms] -> epoll_ctl$EPOLL_CTL_ADD(0x4, 0x1, 0xffffffffffffffff, 0x200001c0) #0 [676126ms] <- epoll_ctl$EPOLL_CTL_ADD=0xffffffffffffffff errno=9 cover=86 #0 [676126ms] -> epoll_ctl$EPOLL_CTL_ADD(0x3, 0x1, 0xffffffffffffffff, 0x20000040) #0 [676126ms] <- epoll_ctl$EPOLL_CTL_ADD=0xffffffffffffffff errno=9 cover=86 2033/05/18 03:34:21 result hanged=false: 03:34:21 executing program 0: r0 = epoll_create(0x8000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) [676145ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150350 #0 [676156ms] -> epoll_create(0x8000) #0 [676157ms] <- epoll_create=0x3 errno=14 cover=474 #0 [676158ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [676162ms] <- syz_open_dev$tty1=0xffffffffffffffff errno=2 cover=1210 #0 [676162ms] -> epoll_create(0x8000) #0 [676162ms] <- epoll_create=0x4 errno=14 cover=484 #0 [676163ms] -> epoll_ctl$EPOLL_CTL_ADD(0x4, 0x1, 0x3, 0x200000c0) #0 [676163ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=445 #0 [676163ms] -> epoll_ctl$EPOLL_CTL_ADD(0x4, 0x1, 0xffffffffffffffff, 0x200001c0) #0 [676164ms] <- epoll_ctl$EPOLL_CTL_ADD=0xffffffffffffffff errno=9 cover=86 #0 [676164ms] -> epoll_ctl$EPOLL_CTL_ADD(0x3, 0x1, 0xffffffffffffffff, 0x20000040) #0 [676164ms] <- epoll_ctl$EPOLL_CTL_ADD=0xffffffffffffffff errno=9 cover=86 2033/05/18 03:34:21 result hanged=false: 03:34:21 executing program 0: r0 = epoll_create(0x8000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) [676185ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150352 #0 [676195ms] -> epoll_create(0x8000) #0 [676196ms] <- epoll_create=0x3 errno=14 cover=543 #0 [676197ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [676197ms] <- syz_open_dev$tty1=0xffffffffffffffff errno=2 cover=1167 #0 [676198ms] -> epoll_create(0x8000) #0 [676198ms] <- epoll_create=0x4 errno=14 cover=484 #0 [676199ms] -> epoll_ctl$EPOLL_CTL_ADD(0x4, 0x1, 0x3, 0x200000c0) #0 [676199ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=409 #0 [676199ms] -> epoll_ctl$EPOLL_CTL_ADD(0x4, 0x1, 0xffffffffffffffff, 0x200001c0) #0 [676199ms] <- epoll_ctl$EPOLL_CTL_ADD=0xffffffffffffffff errno=9 cover=86 #0 [676199ms] -> epoll_ctl$EPOLL_CTL_ADD(0x3, 0x1, 0xffffffffffffffff, 0x20000040) #0 [676200ms] <- epoll_ctl$EPOLL_CTL_ADD=0xffffffffffffffff errno=9 cover=86 2033/05/18 03:34:21 result hanged=false: 2033/05/18 03:34:21 added new input for call #3 epoll_ctl$EPOLL_CTL_ADD to corpus: r0 = epoll_create(0x8000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 03:34:21 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f0000000300)=""/4096, 0x1000) 2033/05/18 03:34:21 poll: candidates=8 inputs=0 signal=0 [676226ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150354 #0 [676235ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [676237ms] <- perf_event_open=0x3 errno=14 cover=9509 #0 [676237ms] -> syz_open_procfs(0x0, 0x20000080) #0 [676238ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=7548 #0 [676238ms] -> getdents(0xffffffffffffffff, 0x20000300, 0x1000) #0 [676238ms] <- getdents=0xffffffffffffffff errno=9 cover=75 enabling collider #0 [676253ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [676254ms] <- perf_event_open=0x3 errno=14 cover=9532 #0 [676254ms] -> syz_open_procfs(0x0, 0x20000080) #0 [676255ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=7604 pthread_create failed (errno 11) 03:34:21 executing program 0: timer_create(0x1, &(0x7f0000000bc0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000c00)) timer_settime(0x0, 0x0, &(0x7f0000000cc0), &(0x7f0000000d00)) 2033/05/18 03:34:21 result hanged=false: [676327ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150456 #0 [676337ms] -> timer_create(0x1, 0x20000bc0, 0x20000c00) #0 [676338ms] <- timer_create=0x0 errno=14 cover=298 #0 [676339ms] -> timer_settime(0x0, 0x0, 0x20000cc0, 0x20000d00) #0 [676339ms] <- timer_settime=0x0 errno=14 cover=178 enabling collider #0 [676340ms] -> timer_create(0x1, 0x20000bc0, 0x20000c00) #0 [676341ms] <- timer_create=0x0 errno=14 cover=252 03:34:21 executing program 0: timer_create(0x1, &(0x7f0000000bc0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000c00)) timer_settime(0x0, 0x0, &(0x7f0000000cc0), &(0x7f0000000d00)) 2033/05/18 03:34:21 result hanged=false: 2033/05/18 03:34:21 #0: triaging type=7 2033/05/18 03:34:21 triaging input for call #0 timer_create (new signal=2) [676361ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150458 #0 [676378ms] -> timer_create(0x1, 0x20000bc0, 0x20000c00) #0 [676379ms] <- timer_create=0x0 errno=14 cover=255 #0 [676381ms] -> timer_settime(0x0, 0x0, 0x20000cc0, 0x20000d00) #0 [676381ms] <- timer_settime=0x0 errno=14 cover=178 03:34:21 executing program 0: timer_create(0x1, &(0x7f0000000bc0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000c00)) timer_settime(0x0, 0x0, &(0x7f0000000cc0), &(0x7f0000000d00)) 2033/05/18 03:34:21 result hanged=false: [676402ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150460 #0 [676412ms] -> timer_create(0x1, 0x20000bc0, 0x20000c00) #0 [676415ms] <- timer_create=0x0 errno=14 cover=255 #0 [676416ms] -> timer_settime(0x0, 0x0, 0x20000cc0, 0x20000d00) #0 [676418ms] <- timer_settime=0x0 errno=14 cover=178 03:34:21 executing program 0: timer_create(0x1, &(0x7f0000000bc0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000c00)) timer_settime(0x0, 0x0, &(0x7f0000000cc0), &(0x7f0000000d00)) 2033/05/18 03:34:21 result hanged=false: [676437ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150462 #0 [676447ms] -> timer_create(0x1, 0x20000bc0, 0x20000c00) #0 [676447ms] <- timer_create=0x0 errno=14 cover=255 #0 [676448ms] -> timer_settime(0x0, 0x0, 0x20000cc0, 0x20000d00) #0 [676449ms] <- timer_settime=0x0 errno=14 cover=178 2033/05/18 03:34:21 result hanged=false: 2033/05/18 03:34:21 added new input for call #0 timer_create to corpus: timer_create(0x1, &(0x7f0000000bc0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000c00)) timer_settime(0x0, 0x0, &(0x7f0000000cc0), &(0x7f0000000d00)) 03:34:21 executing program 0: semget$private(0x0, 0x4000, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) [676473ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150464 #0 [676483ms] -> semget$private(0x0, 0x4000, 0x0) #0 [676486ms] <- semget$private=0xffffffffffffffff errno=22 cover=35 #0 [676487ms] -> unshare(0x8000000) #0 [676492ms] <- unshare=0x0 errno=14 cover=11967 #0 [676492ms] -> semget$private(0x0, 0x4000, 0x0) #0 [676495ms] <- semget$private=0x0 errno=14 cover=16849 enabling collider #0 [676495ms] -> semget$private(0x0, 0x4000, 0x0) #0 [676497ms] <- semget$private=0x1 errno=14 cover=16783 #0 [676498ms] -> unshare(0x8000000) #0 [676501ms] <- unshare=0x0 errno=14 cover=12481 pthread_create failed (errno 11) 2033/05/18 03:34:21 result hanged=false: 03:34:22 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x8906, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) [676557ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150566 #0 [676568ms] -> syz_emit_ethernet(0x2a, 0x20000080, 0x0) aa aa aa aa aa aa 00 00 00 00 00 00 89 06 45 00 00 1c 00 00 00 00 00 11 ba d2 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ff de #0 [676569ms] <- syz_emit_ethernet=0x2a errno=14 cover=12906 enabling collider #0 [676570ms] -> syz_emit_ethernet(0x2a, 0x20000080, 0x0) aa aa aa aa aa aa 00 00 00 00 00 00 89 06 45 00 00 1c 00 00 00 00 00 11 ba d2 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ff de #0 [676570ms] <- syz_emit_ethernet=0x2a errno=14 cover=12765 2033/05/18 03:34:22 result hanged=false: 03:34:22 executing program 0: syz_io_uring_setup(0x2210, &(0x7f0000000000), &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [676589ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150568 #0 [676599ms] -> syz_io_uring_setup(0x2210, 0x20000000, 0x207fd000, 0x20ff4000, 0x20000080, 0x200000c0) #0 [676602ms] <- syz_io_uring_setup=0x3 errno=14 cover=12604 enabling collider #0 [676603ms] -> syz_io_uring_setup(0x2210, 0x20000000, 0x207fd000, 0x20ff4000, 0x20000080, 0x200000c0) #0 [676604ms] <- syz_io_uring_setup=0x3 errno=14 cover=17119 03:34:22 executing program 0: syz_io_uring_setup(0x2210, &(0x7f0000000000), &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 2033/05/18 03:34:22 result hanged=false: 2033/05/18 03:34:22 #0: triaging type=7 2033/05/18 03:34:22 triaging input for call #0 syz_io_uring_setup (new signal=2) [676624ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150570 #0 [676635ms] -> syz_io_uring_setup(0x2210, 0x20000000, 0x207fd000, 0x20ff4000, 0x20000080, 0x200000c0) #0 [676638ms] <- syz_io_uring_setup=0x3 errno=14 cover=12780 03:34:22 executing program 0: syz_io_uring_setup(0x2210, &(0x7f0000000000), &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 2033/05/18 03:34:22 result hanged=false: [676661ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150572 #0 [676669ms] -> syz_io_uring_setup(0x2210, 0x20000000, 0x207fd000, 0x20ff4000, 0x20000080, 0x200000c0) #0 [676672ms] <- syz_io_uring_setup=0x3 errno=14 cover=12639 03:34:22 executing program 0: syz_io_uring_setup(0x2210, &(0x7f0000000000), &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 2033/05/18 03:34:22 result hanged=false: [676695ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150574 #0 [676706ms] -> syz_io_uring_setup(0x2210, 0x20000000, 0x207fd000, 0x20ff4000, 0x20000080, 0x200000c0) #0 [676714ms] <- syz_io_uring_setup=0x3 errno=14 cover=12884 2033/05/18 03:34:22 result hanged=false: 2033/05/18 03:34:22 added new input for call #0 syz_io_uring_setup to corpus: syz_io_uring_setup(0x2210, &(0x7f0000000000), &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 03:34:22 executing program 0: semget$private(0x0, 0x2, 0x0) [676743ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150576 #0 [676753ms] -> semget$private(0x0, 0x2, 0x0) #0 [676755ms] <- semget$private=0x1a errno=14 cover=353 enabling collider #0 [676755ms] -> semget$private(0x0, 0x2, 0x0) #0 [676755ms] <- semget$private=0x1b errno=14 cover=353 03:34:22 executing program 0: openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2033/05/18 03:34:22 result hanged=false: [676777ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150578 #0 [676787ms] -> openat$hpet(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [676787ms] <- openat$hpet=0xffffffffffffffff errno=2 cover=1188 enabling collider #0 [676789ms] -> openat$hpet(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [676789ms] <- openat$hpet=0xffffffffffffffff errno=2 cover=1154 03:34:22 executing program 0: r0 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x2, 0x0, 0x0) 2033/05/18 03:34:22 result hanged=false: [676811ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150580 #0 [676821ms] -> fsopen(0x20000040, 0x0) #0 [676823ms] <- fsopen=0x3 errno=14 cover=961 #0 [676825ms] -> fsconfig$FSCONFIG_CMD_RECONFIGURE(0x3, 0x7, 0x2, 0x0, 0x0) #0 [676827ms] <- fsconfig$FSCONFIG_CMD_RECONFIGURE=0xffffffffffffffff errno=22 cover=37 enabling collider #0 [676828ms] -> fsopen(0x20000040, 0x0) #0 [676828ms] <- fsopen=0x3 errno=14 cover=995 2033/05/18 03:34:22 result hanged=false: 03:34:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000100), 0x4) 2033/05/18 03:34:22 poll: candidates=8 inputs=0 signal=0 [676852ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150582 #0 [676860ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [676865ms] <- socket$inet6_tcp=0x3 errno=14 cover=1731 #0 [676866ms] -> setsockopt$sock_int(0x3, 0x1, 0x24, 0x20000100, 0x4) #0 [676866ms] <- setsockopt$sock_int=0x0 errno=14 cover=179 enabling collider #0 [676867ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [676867ms] <- socket$inet6_tcp=0x3 errno=14 cover=1741 2033/05/18 03:34:22 result hanged=false: 03:34:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x43, 0x0, &(0x7f0000000000)) [676888ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150584 #0 [676897ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [676898ms] <- socket$inet6_tcp=0x3 errno=14 cover=1756 #0 [676899ms] -> getsockopt$inet6_opts(0x3, 0x29, 0x43, 0x0, 0x20000000) #0 [676899ms] <- getsockopt$inet6_opts=0x0 errno=14 cover=116 enabling collider #0 [676900ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [676900ms] <- socket$inet6_tcp=0x3 errno=14 cover=1730 2033/05/18 03:34:22 result hanged=false: 03:34:22 executing program 0: syz_io_uring_setup(0x2aa7, &(0x7f0000000780), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000000800), &(0x7f0000000840)) [676921ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150586 #0 [676930ms] -> syz_io_uring_setup(0x2aa7, 0x20000780, 0x20ffd000, 0x20ffa000, 0x20000800, 0x20000840) #0 [676935ms] <- syz_io_uring_setup=0x3 errno=14 cover=14788 enabling collider #0 [676937ms] -> syz_io_uring_setup(0x2aa7, 0x20000780, 0x20ffd000, 0x20ffa000, 0x20000800, 0x20000840) #0 [676939ms] <- syz_io_uring_setup=0x3 errno=14 cover=18513 03:34:22 executing program 0: sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x4000090) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x2}, 0x3f) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x0, 0x10, 0x0, 0xa7f}}) syz_open_dev$vcsa(0x0, 0x2, 0x0) r1 = fspick(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000380)='/dev/nvram\x00', 0x0, 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x0, 0x8f) syz_io_uring_setup(0x7247, &(0x7f0000000900)={0x0, 0x422f, 0x8, 0x1, 0x2cd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000980), &(0x7f00000009c0)) 2033/05/18 03:34:22 result hanged=false: [676961ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150588 #0 [676971ms] -> sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x4000090) #0 [676975ms] <- sendmsg$NL80211_CMD_GET_INTERFACE=0xffffffffffffffff errno=9 cover=52 #0 [676976ms] -> syz_io_uring_submit(0x0, 0x0, 0x200001c0, 0x3f) SIGSEGV on 0x10c, skipping #0 [676976ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=1021 #0 [676977ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [676977ms] <- syz_init_net_socket$bt_sco=0xffffffffffffffff errno=2 cover=1159 #0 [676978ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [676978ms] <- socket$inet6_udplite=0x3 errno=14 cover=1623 #0 [676979ms] -> ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0x3, 0x89f7, 0x200002c0) #0 [677005ms] <- ioctl$sock_ipv6_tunnel_SIOCCHGPRL=0xffffffffffffffff errno=19 cover=1860 #0 [677005ms] -> syz_open_dev$vcsa(0x0, 0x2, 0x0) SIGSEGV on (nil), skipping #0 [677005ms] <- syz_open_dev$vcsa=0xffffffffffffffff errno=14 cover=781 #0 [677005ms] -> fspick(0xffffffffffffffff, 0x0, 0x1) #0 [677006ms] <- fspick=0xffffffffffffffff errno=14 cover=716 #0 [677006ms] -> fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x20000380, 0x0, 0xffffffffffffffff) #0 [677006ms] <- fsconfig$FSCONFIG_SET_FD=0xffffffffffffffff errno=22 cover=35 #0 [677006ms] -> fsmount(0xffffffffffffffff, 0x0, 0x8f) #0 [677006ms] <- fsmount=0xffffffffffffffff errno=9 cover=102 #0 [677006ms] -> syz_io_uring_setup(0x7247, 0x20000900, 0x20fff000, 0x20ffc000, 0x20000980, 0x200009c0) #0 [677009ms] <- syz_io_uring_setup=0x4 errno=14 cover=17437 enabling collider #0 [677011ms] -> sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x4000090) #0 [677011ms] <- sendmsg$NL80211_CMD_GET_INTERFACE=0xffffffffffffffff errno=9 cover=52 #0 [677011ms] -> syz_io_uring_submit(0x0, 0x0, 0x200001c0, 0x3f) SIGSEGV on 0x10c, skipping #0 [677011ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=787 pthread_create failed (errno 11) 03:34:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000100)=@updsa={0x184, 0x1a, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'hmac(sha256-neon)\x00'}}}, @algo_aead={0x4c, 0x12, {{'gcm(tea-generic)\x00'}}}]}, 0x184}}, 0x0) 2033/05/18 03:34:22 result hanged=false: [677074ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150690 #0 [677084ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [677084ms] <- socket$nl_xfrm=0x3 errno=14 cover=1430 #0 [677085ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) #0 [677085ms] <- sendmsg$nl_xfrm=0x184 errno=14 cover=1553 enabling collider #0 [677086ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [677086ms] <- socket$nl_xfrm=0x3 errno=14 cover=1429 2033/05/18 03:34:22 result hanged=false: 03:34:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, 0x11, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0x4}]}, 0x20}}, 0x0) [677107ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150692 #0 [677116ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [677116ms] <- socket$netlink=0x3 errno=14 cover=1464 #0 [677116ms] -> sendmsg$nl_generic(0x3, 0x20000100, 0x0) #0 [677117ms] <- sendmsg$nl_generic=0x20 errno=14 cover=1529 enabling collider #0 [677117ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [677117ms] <- socket$netlink=0x3 errno=14 cover=1409 2033/05/18 03:34:22 result hanged=false: 03:34:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) [677136ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150694 #0 [677147ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [677148ms] <- socket$nl_generic=0x3 errno=14 cover=1426 #0 [677149ms] -> sendmsg$TIPC_CMD_GET_BEARER_NAMES(0x3, 0x20000580, 0x0) #0 [677149ms] <- sendmsg$TIPC_CMD_GET_BEARER_NAMES=0xffffffffffffffff errno=14 cover=477 enabling collider #0 [677149ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [677150ms] <- socket$nl_generic=0x3 errno=14 cover=1439 03:34:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @ax25={0x3, @bcast}, @hci, @nfc={0x27, 0x0, 0x0, 0x7}}) 2033/05/18 03:34:22 result hanged=false: [677171ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150696 #0 [677181ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [677184ms] <- socket$inet6_udp=0x3 errno=14 cover=1698 #0 [677186ms] -> ioctl$sock_SIOCADDRT(0x3, 0x890b, 0x20000180) #0 [677188ms] <- ioctl$sock_SIOCADDRT=0xffffffffffffffff errno=19 cover=354 enabling collider #0 [677189ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [677189ms] <- socket$inet6_udp=0x3 errno=14 cover=1686 #0 [677190ms] -> ioctl$sock_SIOCADDRT(0x3, 0x890b, 0x20000180) #0 [677190ms] <- ioctl$sock_SIOCADDRT=0xffffffffffffffff errno=9 cover=46 03:34:22 executing program 0: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, 0x0) 2033/05/18 03:34:22 result hanged=false: 2033/05/18 03:34:22 poll: candidates=8 inputs=0 signal=0 [677210ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150698 #0 [677220ms] -> stat(0x20001cc0, 0x20001c00) #0 [677221ms] <- stat=0x0 errno=14 cover=543 #0 [677221ms] -> setresuid(0xffffffffffffffff, 0x41ed, 0x0) #0 [677221ms] <- setresuid=0x0 errno=14 cover=387 #0 [677222ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [677222ms] <- socket$inet6_udplite=0x3 errno=14 cover=1660 #0 [677222ms] -> ioctl$sock_inet6_SIOCDIFADDR(0x3, 0x8936, 0x0) #0 [677222ms] <- ioctl$sock_inet6_SIOCDIFADDR=0xffffffffffffffff errno=1 cover=124 enabling collider #0 [677222ms] -> stat(0x20001cc0, 0x20001c00) #0 [677223ms] <- stat=0x0 errno=14 cover=541 #0 [677223ms] -> setresuid(0xffffffffffffffff, 0x41ed, 0x0) #0 [677223ms] <- setresuid=0x0 errno=14 cover=344 pthread_create failed (errno 11) 2033/05/18 03:34:22 result hanged=false: 03:34:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001880)) [677276ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150800 #0 [677285ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20001880) #0 [677286ms] <- socketpair$unix=0x0 errno=14 cover=3682 enabling collider #0 [677287ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20001880) #0 [677287ms] <- socketpair$unix=0x0 errno=14 cover=2826 2033/05/18 03:34:22 result hanged=false: 03:34:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') read$snapshot(r0, &(0x7f0000000240)=""/255, 0xff) [677307ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150802 #0 [677317ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [677323ms] <- perf_event_open=0x3 errno=14 cover=10611 #0 [677324ms] -> syz_open_procfs(0xffffffffffffffff, 0x200000c0) #0 [677325ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=7507 #0 [677325ms] -> read$snapshot(0xffffffffffffffff, 0x20000240, 0xff) #0 [677325ms] <- read$snapshot=0xffffffffffffffff errno=9 cover=76 enabling collider #0 [677339ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [677340ms] <- perf_event_open=0x3 errno=14 cover=10129 #0 [677341ms] -> syz_open_procfs(0xffffffffffffffff, 0x200000c0) #0 [677343ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=7689 pthread_create failed (errno 11) 03:34:22 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) 2033/05/18 03:34:22 result hanged=false: [677420ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 150904 #0 [677431ms] -> syz_genetlink_get_family_id$nl80211(0x20000440, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [677434ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=13305 #0 [677436ms] -> sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) #0 [677439ms] <- sendmsg$NL80211_CMD_FRAME=0xffffffffffffffff errno=9 cover=52 #0 [677441ms] -> sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x20000800, 0x0) #0 [677441ms] <- sendmsg$SEG6_CMD_GET_TUNSRC=0xffffffffffffffff errno=9 cover=52 #0 [677441ms] -> syz_genetlink_get_family_id$nl80211(0x20000840, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [677442ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11592 enabling collider #0 [677443ms] -> syz_genetlink_get_family_id$nl80211(0x20000440, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [677444ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11691 #0 [677445ms] -> sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) #0 [677445ms] <- sendmsg$NL80211_CMD_FRAME=0xffffffffffffffff errno=9 cover=52 pthread_create failed (errno 11) 03:34:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000030c0)='net/unix\x00') preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=""/56, 0x38}], 0x1, 0xfefffffa, 0x0) 2033/05/18 03:34:22 result hanged=false: [677502ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151006 #0 [677512ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [677514ms] <- perf_event_open=0x3 errno=14 cover=9589 #0 [677515ms] -> syz_open_procfs(0xffffffffffffffff, 0x200030c0) #0 [677516ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=7745 #0 [677517ms] -> preadv(0xffffffffffffffff, 0x20001380, 0x1, 0xfefffffa, 0x0) #0 [677517ms] <- preadv=0xffffffffffffffff errno=9 cover=76 enabling collider #0 [677530ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [677531ms] <- perf_event_open=0x3 errno=14 cover=9738 #0 [677532ms] -> syz_open_procfs(0xffffffffffffffff, 0x200030c0) #0 [677533ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=7548 pthread_create failed (errno 11) 03:34:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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"}, 0x9fb) 2033/05/18 03:34:23 result hanged=false: [677602ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151108 #0 [677611ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [677614ms] <- syz_open_dev$tty1=0xffffffffffffffff errno=2 cover=1266 #0 [677616ms] -> write$binfmt_elf64(0xffffffffffffffff, 0x20000340, 0x9fb) #0 [677618ms] <- write$binfmt_elf64=0xffffffffffffffff errno=9 cover=47 enabling collider #0 [677619ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [677620ms] <- syz_open_dev$tty1=0xffffffffffffffff errno=2 cover=1155 03:34:23 executing program 0: openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB='/dev/sr0'], &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x1a4e00, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5390, &(0x7f0000000000)) 2033/05/18 03:34:23 result hanged=false: [677639ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151110 #0 [677649ms] -> openat$hpet(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [677653ms] <- openat$hpet=0xffffffffffffffff errno=2 cover=1189 #0 [677654ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [677656ms] <- openat=0x3 errno=14 cover=6863 #0 [677656ms] -> mount(0x20000280, 0x200000c0, 0x0, 0x209000, 0x0) #0 [677657ms] <- mount=0xffffffffffffffff errno=2 cover=1606 #0 [677657ms] -> openat(0xffffffffffffff9c, 0x20004c40, 0x1a4e00, 0x0) #0 [677659ms] <- openat=0x4 errno=14 cover=4893 #0 [677659ms] -> ioctl$SCSI_IOCTL_GET_PCI(0x4, 0x5390, 0x20000000) #0 [677659ms] <- ioctl$SCSI_IOCTL_GET_PCI=0xffffffffffffffff errno=25 cover=121 enabling collider #0 [677660ms] -> openat$hpet(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [677660ms] <- openat$hpet=0xffffffffffffffff errno=2 cover=1155 #0 [677661ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [677662ms] <- openat=0x3 errno=14 cover=1125 pthread_create failed (errno 11) 03:34:23 executing program 0: openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB='/dev/sr0'], &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x1a4e00, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5390, &(0x7f0000000000)) 2033/05/18 03:34:23 result hanged=false: 2033/05/18 03:34:23 #0: triaging type=7 2033/05/18 03:34:23 triaging input for call #4 ioctl$SCSI_IOCTL_GET_PCI (new signal=2) [677712ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151212 #0 [677721ms] -> openat$hpet(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [677722ms] <- openat$hpet=0xffffffffffffffff errno=2 cover=1166 #0 [677722ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [677723ms] <- openat=0x3 errno=14 cover=6720 #0 [677724ms] -> mount(0x20000280, 0x200000c0, 0x0, 0x209000, 0x0) #0 [677724ms] <- mount=0xffffffffffffffff errno=2 cover=1591 #0 [677724ms] -> openat(0xffffffffffffff9c, 0x20004c40, 0x1a4e00, 0x0) #0 [677725ms] <- openat=0x4 errno=14 cover=4868 #0 [677725ms] -> ioctl$SCSI_IOCTL_GET_PCI(0x4, 0x5390, 0x20000000) #0 [677726ms] <- ioctl$SCSI_IOCTL_GET_PCI=0xffffffffffffffff errno=25 cover=107 2033/05/18 03:34:23 result hanged=false: 03:34:23 executing program 0: openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB='/dev/sr0'], &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x1a4e00, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5390, &(0x7f0000000000)) [677746ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151214 #0 [677760ms] -> openat$hpet(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [677764ms] <- openat$hpet=0xffffffffffffffff errno=2 cover=1156 #0 [677766ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [677767ms] <- openat=0x3 errno=14 cover=6726 #0 [677769ms] -> mount(0x20000280, 0x200000c0, 0x0, 0x209000, 0x0) #0 [677770ms] <- mount=0xffffffffffffffff errno=2 cover=1561 #0 [677771ms] -> openat(0xffffffffffffff9c, 0x20004c40, 0x1a4e00, 0x0) #0 [677771ms] <- openat=0x4 errno=14 cover=4827 #0 [677772ms] -> ioctl$SCSI_IOCTL_GET_PCI(0x4, 0x5390, 0x20000000) #0 [677773ms] <- ioctl$SCSI_IOCTL_GET_PCI=0xffffffffffffffff errno=25 cover=107 2033/05/18 03:34:23 result hanged=false: 03:34:23 executing program 0: openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB='/dev/sr0'], &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x1a4e00, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5390, &(0x7f0000000000)) [677795ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151216 #0 [677803ms] -> openat$hpet(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [677807ms] <- openat$hpet=0xffffffffffffffff errno=2 cover=1166 #0 [677809ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [677812ms] <- openat=0x3 errno=14 cover=6706 #0 [677813ms] -> mount(0x20000280, 0x200000c0, 0x0, 0x209000, 0x0) #0 [677813ms] <- mount=0xffffffffffffffff errno=2 cover=1591 #0 [677814ms] -> openat(0xffffffffffffff9c, 0x20004c40, 0x1a4e00, 0x0) #0 [677815ms] <- openat=0x4 errno=14 cover=4849 #0 [677815ms] -> ioctl$SCSI_IOCTL_GET_PCI(0x4, 0x5390, 0x20000000) #0 [677816ms] <- ioctl$SCSI_IOCTL_GET_PCI=0xffffffffffffffff errno=25 cover=107 2033/05/18 03:34:23 result hanged=false: 2033/05/18 03:34:23 added new input for call #4 ioctl$SCSI_IOCTL_GET_PCI to corpus: openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB='/dev/sr0'], &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x1a4e00, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5390, &(0x7f0000000000)) 03:34:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}}, 0x0) [677837ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151218 #0 [677846ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [677849ms] <- socket$nl_generic=0x3 errno=14 cover=1434 #0 [677851ms] -> syz_genetlink_get_family_id$nl80211(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [677854ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12194 #0 [677856ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x200000c0) #0 [677857ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [677857ms] -> sendmsg$NL80211_CMD_CONNECT(0x3, 0x200001c0, 0x0) #0 [677857ms] <- sendmsg$NL80211_CMD_CONNECT=0x20 errno=14 cover=1928 enabling collider #0 [677857ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [677857ms] <- socket$nl_generic=0x3 errno=14 cover=1411 #0 [677858ms] -> syz_genetlink_get_family_id$nl80211(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [677859ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11591 pthread_create failed (errno 11) 2033/05/18 03:34:23 result hanged=false: 03:34:23 executing program 0: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 2033/05/18 03:34:23 poll: candidates=8 inputs=0 signal=0 [677920ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151320 #0 [677929ms] -> add_key$keyring(0x20000000, 0x20000040, 0x0, 0x0, 0xfffffffffffffffd) #0 [677929ms] <- add_key$keyring=0x25ca745d errno=14 cover=1417 enabling collider #0 [677931ms] -> add_key$keyring(0x20000000, 0x20000040, 0x0, 0x0, 0xfffffffffffffffd) #0 [677932ms] <- add_key$keyring=0x158f6814 errno=14 cover=1417 2033/05/18 03:34:23 result hanged=false: 03:34:23 executing program 0: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) syz_io_uring_setup(0x70d9, &(0x7f0000000200)={0x0, 0xc4ae}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) [677952ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151322 #0 [677961ms] -> ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x200000c0) #0 [677964ms] <- ioctl$sock_inet6_udp_SIOCINQ=0xffffffffffffffff errno=9 cover=45 #0 [677966ms] -> syz_io_uring_setup(0x70d9, 0x20000200, 0x20ffd000, 0x20ffc000, 0x20000280, 0x200002c0) #0 [677970ms] <- syz_io_uring_setup=0x3 errno=14 cover=21748 enabling collider #0 [677971ms] -> ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x200000c0) #0 [677971ms] <- ioctl$sock_inet6_udp_SIOCINQ=0xffffffffffffffff errno=9 cover=45 03:34:23 executing program 0: clone3(&(0x7f00000004c0)={0x130000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2033/05/18 03:34:23 result hanged=false: [677995ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151324 #0 [678005ms] -> clone3(0x200004c0, 0x58) #0 [678005ms] <- clone3=0xffffffffffffffff errno=1 cover=1154 enabling collider #0 [678006ms] -> clone3(0x200004c0, 0x58) #0 [678006ms] <- clone3=0xffffffffffffffff errno=1 cover=1182 03:34:23 executing program 0: prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffff9) poll(0x0, 0x0, 0x200) 2033/05/18 03:34:23 result hanged=false: [678025ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151326 #0 [678034ms] -> prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffff9) #0 [678034ms] <- prctl$PR_SET_TIMERSLACK=0x0 errno=22 cover=44 #0 [678035ms] -> poll(0x0, 0x0, 0x200) enabling collider pthread_create failed (errno 11) 03:34:24 executing program 0: r0 = syz_io_uring_setup(0x701, &(0x7f0000003e80), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000003f00), &(0x7f0000003f40)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x10000000) 2033/05/18 03:34:24 result hanged=false: [679193ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151428 #0 [679203ms] -> syz_io_uring_setup(0x701, 0x20003e80, 0x20ffc000, 0x20ffe000, 0x20003f00, 0x20003f40) #0 [679205ms] <- syz_io_uring_setup=0x3 errno=14 cover=8431 #0 [679206ms] -> mmap$IORING_OFF_SQES(0x20ffb000, 0x1000, 0x0, 0x40010, 0x3, 0x10000000) #0 [679206ms] <- mmap$IORING_OFF_SQES=0xffffffffffffffff errno=22 cover=56 enabling collider #0 [679207ms] -> syz_io_uring_setup(0x701, 0x20003e80, 0x20ffc000, 0x20ffe000, 0x20003f00, 0x20003f40) #0 [679209ms] <- syz_io_uring_setup=0x3 errno=14 cover=8420 2033/05/18 03:34:24 result hanged=false: 03:34:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {0x17}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) [679231ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151430 #0 [679241ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [679250ms] <- perf_event_open=0x3 errno=14 cover=10525 #0 [679252ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [679255ms] <- socket$nl_generic=0x4 errno=14 cover=4305 #0 [679255ms] -> syz_genetlink_get_family_id$ethtool(0x20002740, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [679257ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=20217 #0 [679258ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [679259ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=5133 #0 [679259ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x20000140) #0 [679259ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=367 #0 [679260ms] -> sendmsg$ETHTOOL_MSG_EEE_SET(0x4, 0x20002800, 0x0) #0 [679262ms] <- sendmsg$ETHTOOL_MSG_EEE_SET=0x20 errno=14 cover=6330 enabling collider #0 [679273ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [679275ms] <- perf_event_open=0x3 errno=14 cover=10077 #0 [679276ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [679276ms] <- socket$nl_generic=0x4 errno=14 cover=4351 pthread_create failed (errno 11) 03:34:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20d315) 2033/05/18 03:34:24 result hanged=false: [679350ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151532 #0 [679361ms] -> openat(0xffffffffffffff9c, 0x20000080, 0x105142, 0x0) #0 [679362ms] <- openat=0x3 errno=14 cover=6830 #0 [679362ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [679362ms] <- openat=0xffffffffffffffff errno=2 cover=1189 #0 [679363ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x10001, 0x0) #0 [679363ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [679363ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [679363ms] <- perf_event_open=0x4 errno=14 cover=9405 #0 [679364ms] -> dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [679364ms] <- dup3=0xffffffffffffffff errno=22 cover=36 #0 [679364ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [679364ms] <- openat=0x5 errno=14 cover=1072 #0 [679364ms] -> sendfile(0x3, 0x5, 0x0, 0x20d315) #0 [679364ms] <- sendfile=0x0 errno=14 cover=1703 enabling collider #0 [679374ms] -> openat(0xffffffffffffff9c, 0x20000080, 0x105142, 0x0) #0 [679374ms] <- openat=0x3 errno=14 cover=1125 #0 [679375ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [679375ms] <- openat=0xffffffffffffffff errno=2 cover=1169 pthread_create failed (errno 11) 03:34:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, 0x18, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0x8, 0x8, 0x0, 0x1, [@typed={0x3}]}]}, 0x24}}, 0x0) 2033/05/18 03:34:24 result hanged=false: [679431ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151634 #0 [679443ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [679447ms] <- socket$netlink=0x3 errno=14 cover=1421 #0 [679448ms] -> sendmsg$nl_generic(0x3, 0x20000100, 0x0) #0 [679449ms] <- sendmsg$nl_generic=0x24 errno=14 cover=1834 enabling collider #0 [679449ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [679449ms] <- socket$netlink=0x3 errno=14 cover=1442 03:34:24 executing program 0: kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000000)) r0 = epoll_create(0xe3) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) 2033/05/18 03:34:24 result hanged=false: 2033/05/18 03:34:24 poll: candidates=8 inputs=0 signal=0 [679467ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151636 #0 [679476ms] -> kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x20000000) #0 [679477ms] <- kcmp$KCMP_EPOLL_TFD=0xffffffffffffffff errno=3 cover=77 #0 [679478ms] -> epoll_create(0xe3) #0 [679479ms] <- epoll_create=0x3 errno=14 cover=485 #0 [679479ms] -> fcntl$F_GET_FILE_RW_HINT(0x3, 0x40d, 0x20000040) #0 [679479ms] <- fcntl$F_GET_FILE_RW_HINT=0x0 errno=14 cover=85 enabling collider #0 [679480ms] -> kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x20000000) #0 [679480ms] <- kcmp$KCMP_EPOLL_TFD=0xffffffffffffffff errno=3 cover=77 #0 [679481ms] -> epoll_create(0xe3) #0 [679481ms] <- epoll_create=0x3 errno=14 cover=506 pthread_create failed (errno 11) 03:34:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) 2033/05/18 03:34:24 result hanged=false: [679537ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151738 #0 [679548ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [679553ms] <- perf_event_open=0x3 errno=14 cover=9197 #0 [679554ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [679556ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1180 #0 [679557ms] -> syz_genetlink_get_family_id$ieee802154(0x200002c0, 0xffffffffffffffff) syz_genetlink_get_family_id(802.15.4 MAC, -1) netlink: failed to get family id for 802.15.4 MAC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [679558ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=2 cover=7733 #0 [679558ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x4) #0 [679561ms] <- openat=0x4 errno=14 cover=6735 #0 [679561ms] -> ioctl$EXT4_IOC_GROUP_EXTEND(0x4, 0x40086607, 0x200004c0) #0 [679579ms] <- ioctl$EXT4_IOC_GROUP_EXTEND=0x0 errno=14 cover=26018 enabling collider #0 [679589ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [679590ms] <- perf_event_open=0x3 errno=14 cover=9273 #0 [679590ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [679591ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1215 pthread_create failed (errno 11) 2033/05/18 03:34:25 result hanged=false: 2033/05/18 03:34:25 #0: triaging type=7 03:34:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) 2033/05/18 03:34:25 triaging input for call #4 ioctl$EXT4_IOC_GROUP_EXTEND (new signal=1) [679659ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151840 #0 [679668ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [679681ms] <- perf_event_open=0x3 errno=14 cover=98492 #0 [679686ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [679686ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1181 #0 [679687ms] -> syz_genetlink_get_family_id$ieee802154(0x200002c0, 0xffffffffffffffff) syz_genetlink_get_family_id(802.15.4 MAC, -1) netlink: failed to get family id for 802.15.4 MAC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [679689ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=2 cover=8587 #0 [679690ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x4) #0 [679692ms] <- openat=0x4 errno=14 cover=6685 #0 [679693ms] -> ioctl$EXT4_IOC_GROUP_EXTEND(0x4, 0x40086607, 0x200004c0) #0 [679702ms] <- ioctl$EXT4_IOC_GROUP_EXTEND=0x0 errno=14 cover=9758 03:34:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) 2033/05/18 03:34:25 result hanged=false: [679733ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151842 #0 [679742ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [679744ms] <- perf_event_open=0x3 errno=14 cover=9760 #0 [679746ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [679746ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1172 #0 [679747ms] -> syz_genetlink_get_family_id$ieee802154(0x200002c0, 0xffffffffffffffff) syz_genetlink_get_family_id(802.15.4 MAC, -1) netlink: failed to get family id for 802.15.4 MAC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [679748ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=2 cover=7841 #0 [679749ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x4) #0 [679751ms] <- openat=0x4 errno=14 cover=6715 #0 [679752ms] -> ioctl$EXT4_IOC_GROUP_EXTEND(0x4, 0x40086607, 0x200004c0) #0 [679761ms] <- ioctl$EXT4_IOC_GROUP_EXTEND=0x0 errno=14 cover=10440 03:34:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) 2033/05/18 03:34:25 result hanged=false: [679795ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151844 #0 [679805ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [679810ms] <- perf_event_open=0x3 errno=14 cover=9099 #0 [679812ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [679815ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1169 #0 [679815ms] -> syz_genetlink_get_family_id$ieee802154(0x200002c0, 0xffffffffffffffff) syz_genetlink_get_family_id(802.15.4 MAC, -1) netlink: failed to get family id for 802.15.4 MAC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [679816ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=2 cover=7751 #0 [679817ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x4) #0 [679821ms] <- openat=0x4 errno=14 cover=6684 #0 [679822ms] -> ioctl$EXT4_IOC_GROUP_EXTEND(0x4, 0x40086607, 0x200004c0) #0 [679830ms] <- ioctl$EXT4_IOC_GROUP_EXTEND=0x0 errno=14 cover=9790 2033/05/18 03:34:25 result hanged=false: 2033/05/18 03:34:25 added new input for call #4 ioctl$EXT4_IOC_GROUP_EXTEND to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) 03:34:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000004080)={'wlan1\x00'}) [679871ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151846 #0 [679881ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [679884ms] <- socket$nl_generic=0x3 errno=14 cover=1601 #0 [679885ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x20004080) #0 [679885ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 enabling collider #0 [679885ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [679885ms] <- socket$nl_generic=0x3 errno=14 cover=1444 03:34:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000200)) 2033/05/18 03:34:25 result hanged=false: [679905ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151848 #0 [679915ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [679916ms] <- perf_event_open=0x3 errno=14 cover=9652 #0 [679918ms] -> clock_adjtime(0x0, 0x20000200) #0 [679918ms] <- clock_adjtime=0x5 errno=14 cover=165 enabling collider #0 [679930ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [679932ms] <- perf_event_open=0x3 errno=14 cover=9670 #0 [679932ms] -> clock_adjtime(0x0, 0x20000200) #0 [679932ms] <- clock_adjtime=0x5 errno=14 cover=136 03:34:25 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000dc0)) 2033/05/18 03:34:25 result hanged=false: [679963ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151850 #0 [679972ms] -> syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [679972ms] <- syz_genetlink_get_family_id$nl80211=0xffffffffffffffff errno=14 cover=5293 #0 [679973ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [679973ms] <- socket$inet_tcp=0x4 errno=14 cover=1729 #0 [679973ms] -> getsockopt$inet_tcp_buf(0x4, 0x6, 0x1c, 0x0, 0x20000dc0) #0 [679973ms] <- getsockopt$inet_tcp_buf=0x0 errno=14 cover=132 enabling collider #0 [679974ms] -> syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [679974ms] <- syz_genetlink_get_family_id$nl80211=0xffffffffffffffff errno=14 cover=2480 #0 [679975ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [679975ms] <- socket$inet_tcp=0x4 errno=14 cover=1706 pthread_create failed (errno 11) 2033/05/18 03:34:25 result hanged=false: 03:34:25 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='id_legacy\x00', 0x0) [680030ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151952 #0 [680040ms] -> keyctl$set_reqkey_keyring(0xe, 0x0) #0 [680044ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=269 #0 [680045ms] -> keyctl$set_reqkey_keyring(0xe, 0x2) #0 [680045ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=710 #0 [680045ms] -> request_key(0x20000000, 0x200003c0, 0x20000400, 0x0) #0 [680047ms] <- request_key=0xffffffffffffffff errno=2 cover=6943 enabling collider #0 [680047ms] -> keyctl$set_reqkey_keyring(0xe, 0x0) #0 [680047ms] <- keyctl$set_reqkey_keyring=0x2 errno=14 cover=294 #0 [680048ms] -> keyctl$set_reqkey_keyring(0xe, 0x2) #0 [680048ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=345 pthread_create failed (errno 11) 2033/05/18 03:34:25 result hanged=false: 03:34:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x1d, 0xc21, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x1}]}, 0x20}}, 0x0) [680103ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152054 #0 [680113ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [680117ms] <- socket$netlink=0x3 errno=14 cover=1432 #0 [680117ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [680118ms] <- sendmsg$nl_generic=0x20 errno=14 cover=1581 enabling collider #0 [680118ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [680118ms] <- socket$netlink=0x3 errno=14 cover=1420 03:34:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x8140) 2033/05/18 03:34:25 result hanged=false: [680139ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152056 #0 [680153ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [680153ms] <- socket$nl_generic=0x3 errno=14 cover=1390 #0 [680154ms] -> sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0x3, 0x200000c0, 0x0) #0 [680157ms] <- sendmsg$BATADV_CMD_GET_BLA_BACKBONE=0x0 errno=14 cover=967 #0 [680157ms] -> sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0x3, 0x200002c0, 0x8140) #0 [680157ms] <- sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL=0x0 errno=14 cover=812 enabling collider #0 [680159ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [680159ms] <- socket$nl_generic=0x3 errno=14 cover=1425 #0 [680160ms] -> sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0x3, 0x200000c0, 0x0) #0 [680160ms] <- sendmsg$BATADV_CMD_GET_BLA_BACKBONE=0x0 errno=14 cover=978 pthread_create failed (errno 11) 03:34:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r0) 2033/05/18 03:34:25 result hanged=false: 2033/05/18 03:34:25 poll: candidates=8 inputs=0 signal=0 [680216ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152158 #0 [680226ms] -> socket$netlink(0x10, 0x3, 0x9) #0 [680227ms] <- socket$netlink=0x3 errno=14 cover=1422 #0 [680228ms] -> syz_genetlink_get_family_id$ethtool(0x20000540, 0x3) [ 1430.205393] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=281703 comm=syz-executor.0 syz_genetlink_get_family_id(ethtool, 3) netlink: failed to get family id for ethtool: Invalid argument syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [680233ms] <- syz_genetlink_get_family_id$ethtool=0xffffffffffffffff errno=22 cover=7158 enabling collider #0 [680235ms] -> socket$netlink(0x10, 0x3, 0x9) #0 [680235ms] <- socket$netlink=0x3 errno=14 cover=1533 #0 [680236ms] -> syz_genetlink_get_family_id$ethtool(0x20000540, 0x3) syz_genetlink_get_family_id(ethtool, 3) netlink_send_ext: short netlink write: -1/32 errno=9 netlink: failed to get family id for ethtool: Bad file descriptor syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [680236ms] <- syz_genetlink_get_family_id$ethtool=0xffffffffffffffff errno=9 cover=1139 03:34:25 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) 2033/05/18 03:34:25 result hanged=false: [680256ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152160 #0 [680268ms] -> openat$snapshot(0xffffffffffffff9c, 0x20000040, 0x201, 0x0) #0 [680269ms] <- openat$snapshot=0xffffffffffffffff errno=2 cover=1225 #0 [680270ms] -> ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) #0 [680270ms] <- ioctl$SNAPSHOT_ATOMIC_RESTORE=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [680270ms] -> openat$snapshot(0xffffffffffffff9c, 0x20000040, 0x201, 0x0) #0 [680271ms] <- openat$snapshot=0xffffffffffffffff errno=2 cover=1199 03:34:25 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r0, 0x0, 0x0) 2033/05/18 03:34:25 result hanged=false: [680292ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152162 #0 [680302ms] -> socket$packet(0x11, 0x3, 0x300) #0 [680306ms] <- socket$packet=0x3 errno=14 cover=1728 #0 [680307ms] -> getpeername$packet(0x3, 0x0, 0x0) #0 [680309ms] <- getpeername$packet=0xffffffffffffffff errno=95 cover=72 enabling collider #0 [680315ms] -> socket$packet(0x11, 0x3, 0x300) #0 [680315ms] <- socket$packet=0x3 errno=14 cover=1763 #0 [680315ms] -> getpeername$packet(0x3, 0x0, 0x0) #0 [680315ms] <- getpeername$packet=0xffffffffffffffff errno=9 cover=50 03:34:25 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ra={0x94, 0x4, 0x500}]}}, @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 2033/05/18 03:34:25 result hanged=false: [680342ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152164 #0 [680352ms] -> syz_emit_ethernet(0x46, 0x20000080, 0x0) aa aa aa aa aa aa 31 f5 26 99 46 4f 08 00 46 00 00 38 00 00 00 00 00 06 ff f7 64 01 01 00 ac 14 14 aa 94 04 00 05 41 00 00 20 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 #0 [680359ms] <- syz_emit_ethernet=0x46 errno=14 cover=21969 enabling collider #0 [680359ms] -> syz_emit_ethernet(0x46, 0x20000080, 0x0) aa aa aa aa aa aa 31 f5 26 99 46 4f 08 00 46 00 00 38 00 00 00 00 00 06 ff f7 64 01 01 00 ac 14 14 aa 94 04 00 05 41 00 00 20 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 #0 [680360ms] <- syz_emit_ethernet=0x46 errno=14 cover=21160 2033/05/18 03:34:25 result hanged=false: 03:34:25 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ra={0x94, 0x4, 0x500}]}}, @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 2033/05/18 03:34:25 #0: triaging type=7 2033/05/18 03:34:25 triaging input for call #0 syz_emit_ethernet (new signal=6) iptable filter/2: resetting iptable mangle/2: resetting [680379ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152166 #0 [680389ms] -> syz_emit_ethernet(0x46, 0x20000080, 0x0) aa aa aa aa aa aa 31 f5 26 99 46 4f 08 00 46 00 00 38 00 00 00 00 00 06 ff f7 64 01 01 00 ac 14 14 aa 94 04 00 05 41 00 00 20 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 #0 [680394ms] <- syz_emit_ethernet=0x46 errno=14 cover=21856 03:34:25 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ra={0x94, 0x4, 0x500}]}}, @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 2033/05/18 03:34:25 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [680417ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152168 #0 [680427ms] -> syz_emit_ethernet(0x46, 0x20000080, 0x0) aa aa aa aa aa aa 31 f5 26 99 46 4f 08 00 46 00 00 38 00 00 00 00 00 06 ff f7 64 01 01 00 ac 14 14 aa 94 04 00 05 41 00 00 20 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 #0 [680429ms] <- syz_emit_ethernet=0x46 errno=14 cover=21310 03:34:25 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ra={0x94, 0x4, 0x500}]}}, @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 2033/05/18 03:34:25 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [680455ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152170 #0 [680464ms] -> syz_emit_ethernet(0x46, 0x20000080, 0x0) aa aa aa aa aa aa 31 f5 26 99 46 4f 08 00 46 00 00 38 00 00 00 00 00 06 ff f7 64 01 01 00 ac 14 14 aa 94 04 00 05 41 00 00 20 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 #0 [680467ms] <- syz_emit_ethernet=0x46 errno=14 cover=21454 iptable filter/2: resetting iptable mangle/2: resetting 2033/05/18 03:34:25 result hanged=false: 2033/05/18 03:34:25 added new input for call #0 syz_emit_ethernet to corpus: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ra={0x94, 0x4, 0x500}]}}, @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 03:34:25 executing program 0: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{'\x02\x00\x00\x00l'}]}) [680493ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152172 #0 [680501ms] -> syz_mount_image$nfs(0x20000000, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x20000200) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='nfs' flags=0 opts='' syz_mount_image > mount error: 22 #0 [680503ms] <- syz_mount_image$nfs=0xffffffffffffffff errno=22 cover=2429 enabling collider #0 [680503ms] -> syz_mount_image$nfs(0x20000000, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x20000200) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='nfs' flags=0 opts='' syz_mount_image > mount error: 22 #0 [680503ms] <- syz_mount_image$nfs=0xffffffffffffffff errno=22 cover=2414 2033/05/18 03:34:25 result hanged=false: 03:34:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x0, 0xe1}}]}, 0x1c}}, 0x0) [680523ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152174 #0 [680532ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [680535ms] <- socket$nl_xfrm=0x3 errno=14 cover=1389 #0 [680536ms] -> sendmsg$nl_xfrm(0x3, 0x20000100, 0x0) #0 [680536ms] <- sendmsg$nl_xfrm=0x1c errno=14 cover=1653 enabling collider #0 [680536ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [680537ms] <- socket$nl_xfrm=0x3 errno=14 cover=1421 2033/05/18 03:34:26 result hanged=false: 03:34:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000001680)={0x0, 0x0, "1fa08d", 0xd}) [680557ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152176 #0 [680568ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [680571ms] <- syz_init_net_socket$bt_hci=0xffffffffffffffff errno=2 cover=1191 #0 [680573ms] -> ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) #0 [680575ms] <- ioctl$BTRFS_IOC_DEFAULT_SUBVOL=0xffffffffffffffff errno=9 cover=45 #0 [680575ms] -> ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x20001680) #0 [680575ms] <- ioctl$HCIINQUIRY=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [680576ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [680576ms] <- syz_init_net_socket$bt_hci=0xffffffffffffffff errno=2 cover=1158 #0 [680577ms] -> ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) #0 [680577ms] <- ioctl$BTRFS_IOC_DEFAULT_SUBVOL=0xffffffffffffffff errno=9 cover=45 pthread_create failed (errno 11) 03:34:26 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') 2033/05/18 03:34:26 result hanged=false: [680632ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152278 #0 [680643ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [680649ms] <- perf_event_open=0x3 errno=14 cover=13168 #0 [680650ms] -> syz_open_procfs(0x0, 0x20000100) #0 [680651ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=7637 enabling collider #0 [680662ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [680663ms] <- perf_event_open=0x3 errno=14 cover=11589 #0 [680664ms] -> syz_open_procfs(0x0, 0x20000100) #0 [680665ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2353 03:34:26 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='binder\x00', 0x0, 0x0) 2033/05/18 03:34:26 result hanged=false: 2033/05/18 03:34:26 poll: candidates=8 inputs=0 signal=0 [680698ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152280 #0 [680707ms] -> syz_mount_image$ext4(0x0, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [680708ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12235 #0 [680709ms] -> mount(0x0, 0x200000c0, 0x20000100, 0x0, 0x0) #0 [680723ms] <- mount=0xffffffffffffffff errno=19 cover=1846 enabling collider #0 [680723ms] -> syz_mount_image$ext4(0x0, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [680724ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1420 2033/05/18 03:34:26 result hanged=false: 03:34:26 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}}}, 0xb8}}, 0x0) [680746ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152282 #0 [680756ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [680761ms] <- perf_event_open=0x3 errno=14 cover=12068 #0 [680762ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [680762ms] <- socket$nl_xfrm=0x4 errno=14 cover=4250 #0 [680763ms] -> sendmsg$nl_xfrm(0x4, 0x20000240, 0x0) #0 [680763ms] <- sendmsg$nl_xfrm=0xb8 errno=14 cover=6182 enabling collider #0 [680774ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [680775ms] <- perf_event_open=0x3 errno=14 cover=11595 #0 [680775ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [680776ms] <- socket$nl_xfrm=0x4 errno=14 cover=4143 2033/05/18 03:34:26 poll: candidates=0 inputs=0 signal=0 pthread_create failed (errno 11) 03:34:26 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}}}, 0xb8}}, 0x0) 2033/05/18 03:34:26 result hanged=false: 2033/05/18 03:34:26 #0: triaging type=7 2033/05/18 03:34:26 triaging input for call #2 sendmsg$nl_xfrm (new signal=2) [680847ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152384 #0 [680857ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [680859ms] <- perf_event_open=0x3 errno=14 cover=11653 #0 [680860ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [680861ms] <- socket$nl_xfrm=0x4 errno=14 cover=4264 #0 [680862ms] -> sendmsg$nl_xfrm(0x4, 0x20000240, 0x0) #0 [680863ms] <- sendmsg$nl_xfrm=0xb8 errno=14 cover=5958 03:34:26 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}}}, 0xb8}}, 0x0) 2033/05/18 03:34:26 result hanged=false: [680896ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152386 #0 [680905ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [680910ms] <- perf_event_open=0x3 errno=14 cover=11523 #0 [680913ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [680916ms] <- socket$nl_xfrm=0x4 errno=14 cover=4310 #0 [680917ms] -> sendmsg$nl_xfrm(0x4, 0x20000240, 0x0) #0 [680918ms] <- sendmsg$nl_xfrm=0xb8 errno=14 cover=5824 03:34:26 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}}}, 0xb8}}, 0x0) 2033/05/18 03:34:26 result hanged=false: [680949ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152388 #0 [680958ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [680960ms] <- perf_event_open=0x3 errno=14 cover=11825 #0 [680962ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [680962ms] <- socket$nl_xfrm=0x4 errno=14 cover=4130 #0 [680963ms] -> sendmsg$nl_xfrm(0x4, 0x20000240, 0x0) #0 [680964ms] <- sendmsg$nl_xfrm=0xb8 errno=14 cover=5844 2033/05/18 03:34:26 result hanged=false: 2033/05/18 03:34:26 added new input for call #2 sendmsg$nl_xfrm to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}}}, 0xb8}}, 0x0) 03:34:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x4b49, &(0x7f0000000040)=0x7f) [681004ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152390 #0 [681012ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [681015ms] <- syz_open_dev$tty20=0xffffffffffffffff errno=2 cover=1183 #0 [681017ms] -> ioctl$TIOCSTI(0xffffffffffffffff, 0x4b49, 0x20000040) #0 [681017ms] <- ioctl$TIOCSTI=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [681017ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [681017ms] <- syz_open_dev$tty20=0xffffffffffffffff errno=2 cover=1190 03:34:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x101}, 0x14}}, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/205, 0xcd}], 0x1) 2033/05/18 03:34:26 result hanged=false: [681038ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152392 #0 [681047ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [681049ms] <- socket$nl_netfilter=0x3 errno=14 cover=1427 #0 [681049ms] -> sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0x3, 0x20000180, 0x0) #0 [681050ms] <- sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU=0x14 errno=14 cover=3496 #0 [681050ms] -> readv(0x3, 0x20000580, 0x1) #0 [681050ms] <- readv=0xb8 errno=14 cover=4593 enabling collider #0 [681051ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [681051ms] <- socket$nl_netfilter=0x3 errno=14 cover=1404 #0 [681051ms] -> sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0x3, 0x20000180, 0x0) #0 [681052ms] <- sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU=0x14 errno=14 cover=1427 pthread_create failed (errno 11) 2033/05/18 03:34:26 result hanged=false: 03:34:26 executing program 0: pselect6(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={[0xfff]}, 0x8}) [681104ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152494 #0 [681114ms] -> pselect6(0x0, 0x0, 0x0, 0x20000100, 0x0, 0x200001c0) enabling collider pthread_create failed (errno 11) 2033/05/18 03:34:27 result hanged=false: 03:34:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10) [682271ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152596 #0 [682280ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [682280ms] <- socket$inet_tcp=0x3 errno=14 cover=1721 #0 [682282ms] -> getsockname$inet(0x3, 0x200000c0, 0x20000100) #0 [682282ms] <- getsockname$inet=0x0 errno=14 cover=114 enabling collider #0 [682282ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [682283ms] <- socket$inet_tcp=0x3 errno=14 cover=1742 #0 [682284ms] -> getsockname$inet(03:34:27 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000b00)='./file1\x00', 0x0, 0x1, &(0x7f0000000c40)=[{0x0}], 0x0, &(0x7f0000000cc0)) 2033/05/18 03:34:27 result hanged=false: [682306ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152598 #0 [682315ms] -> syz_mount_image$iso9660(0x0, 0x20000b00, 0x0, 0x1, 0x20000c40, 0x0, 0x20000cc0) #0 [682317ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=2 cover=3523 enabling collider #0 [682318ms] -> syz_mount_image$iso9660(0x0, 0x20000b00, 0x0, 0x1, 0x20000c40, 0x0, 0x20000cc0) #0 [682319ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=2 cover=3453 2033/05/18 03:34:27 result hanged=false: 03:34:27 executing program 0: syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) syz_io_uring_setup(0x5b6f, &(0x7f0000000940), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) [682340ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152600 #0 [682350ms] -> syz_genetlink_get_family_id$gtp(0x20000000, 0xffffffffffffffff) syz_genetlink_get_family_id(gtp, -1) netlink: failed to get family id for gtp: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [682366ms] <- syz_genetlink_get_family_id$gtp=0xffffffffffffffff errno=2 cover=11079 #0 [682367ms] -> syz_io_uring_setup(0x5b6f, 0x20000940, 0x20ffe000, 0x20ffb000, 0x200009c0, 0x20000a00) #0 [682371ms] <- syz_io_uring_setup=0x3 errno=14 cover=21964 enabling collider #0 [682372ms] -> syz_genetlink_get_family_id$gtp(0x20000000, 0xffffffffffffffff) syz_genetlink_get_family_id(gtp, -1) netlink: failed to get family id for gtp: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [682387ms] <- syz_genetlink_get_family_id$gtp=0xffffffffffffffff errno=2 cover=8140 2033/05/18 03:34:27 result hanged=false: 2033/05/18 03:34:27 #0: triaging type=7 2033/05/18 03:34:27 triaging input for call #0 syz_genetlink_get_family_id$gtp (new signal=1) 03:34:27 executing program 0: syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) syz_io_uring_setup(0x5b6f, &(0x7f0000000940), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) [682411ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152602 #0 [682421ms] -> syz_genetlink_get_family_id$gtp(0x20000000, 0xffffffffffffffff) syz_genetlink_get_family_id(gtp, -1) netlink: failed to get family id for gtp: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [682439ms] <- syz_genetlink_get_family_id$gtp=0xffffffffffffffff errno=2 cover=11089 #0 [682442ms] -> syz_io_uring_setup(0x5b6f, 0x20000940, 0x20ffe000, 0x20ffb000, 0x200009c0, 0x20000a00) #0 [682446ms] <- syz_io_uring_setup=0x3 errno=14 cover=21994 03:34:27 executing program 0: syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) syz_io_uring_setup(0x5b6f, &(0x7f0000000940), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) 2033/05/18 03:34:27 result hanged=false: [682467ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152604 #0 [682476ms] -> syz_genetlink_get_family_id$gtp(0x20000000, 0xffffffffffffffff) syz_genetlink_get_family_id(gtp, -1) netlink: failed to get family id for gtp: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [682491ms] <- syz_genetlink_get_family_id$gtp=0xffffffffffffffff errno=2 cover=10984 #0 [682493ms] -> syz_io_uring_setup(0x5b6f, 0x20000940, 0x20ffe000, 0x20ffb000, 0x200009c0, 0x20000a00) #0 [682497ms] <- syz_io_uring_setup=0x3 errno=14 cover=22361 03:34:27 executing program 0: syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) syz_io_uring_setup(0x5b6f, &(0x7f0000000940), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) 2033/05/18 03:34:27 result hanged=false: [682519ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152606 #0 [682527ms] -> syz_genetlink_get_family_id$gtp(0x20000000, 0xffffffffffffffff) syz_genetlink_get_family_id(gtp, -1) netlink: failed to get family id for gtp: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [682542ms] <- syz_genetlink_get_family_id$gtp=0xffffffffffffffff errno=2 cover=10902 #0 [682544ms] -> syz_io_uring_setup(0x5b6f, 0x20000940, 0x20ffe000, 0x20ffb000, 0x200009c0, 0x20000a00) #0 [682547ms] <- syz_io_uring_setup=0x3 errno=14 cover=22184 2033/05/18 03:34:28 result hanged=false: 2033/05/18 03:34:28 added new input for call #0 syz_genetlink_get_family_id$gtp to corpus: syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) syz_io_uring_setup(0x5b6f, &(0x7f0000000940), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) 03:34:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000140)=0xcdd7, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) [682579ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152608 2033/05/18 03:34:28 poll: candidates=8 inputs=0 signal=0 #0 [682588ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [682588ms] <- socket$inet_udp=0x3 errno=14 cover=1875 #0 [682589ms] -> setsockopt$inet_int(0x3, 0x0, 0x13, 0x20000140, 0x4) #0 [682589ms] <- setsockopt$inet_int=0x0 errno=14 cover=198 #0 [682590ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [682590ms] <- connect$inet=0x0 errno=14 cover=850 enabling collider #0 [682591ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [682592ms] <- socket$inet_udp=0x3 errno=14 cover=6390 #0 [682592ms] -> setsockopt$inet_int(0x3, 0x0, 0x13, 0x20000140, 0x4) #0 [682592ms] <- setsockopt$inet_int=0x0 errno=14 cover=198 pthread_create failed (errno 11) 2033/05/18 03:34:28 result hanged=false: 03:34:28 executing program 0: r0 = gettid() rt_sigqueueinfo(r0, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x7}) [682645ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152710 #0 [682653ms] -> gettid() #0 [682653ms] <- gettid=0x25487 errno=14 cover=48 #0 [682655ms] -> rt_sigqueueinfo(0x25487, 0x11, 0x20000180) #0 [682655ms] <- rt_sigqueueinfo=0x0 errno=14 cover=390 enabling collider #0 [682655ms] -> gettid() #0 [682655ms] <- gettid=0x25487 errno=14 cover=48 2033/05/18 03:34:28 result hanged=false: 03:34:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private}, @NLBL_MGMT_A_DOMAIN={0x24, 0x1, ',\x00\x84\x1b?\x83\xd48V\xe2\xef\xa4\x84$b^k\xcf?\x05\x96c~\x85\xc2wEh\x7f\xf12\xde'}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x48}}, 0x0) [682676ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152712 #0 [682687ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [682692ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1158 #0 [682693ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [682693ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1168 #0 [682694ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(NLBL_MGMT, -1) netlink: failed to get family id for NLBL_MGMT: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [682696ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0xffffffffffffffff errno=2 cover=7821 #0 [682697ms] -> sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x20000140, 0x0) #0 [682697ms] <- sendmsg$NLBL_MGMT_C_ADD=0xffffffffffffffff errno=9 cover=52 enabling collider #0 [682697ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [682697ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1158 #0 [682698ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [682698ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1186 pthread_create failed (errno 11) 2033/05/18 03:34:28 result hanged=false: 03:34:28 executing program 0: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000004f0200000000024f252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000140)=ANY=[]) open_by_handle_at(r0, &(0x7f0000000140)=@shmem={0xc, 0x1, {0x4}}, 0x0) [682750ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152814 #0 [682759ms] -> syz_mount_image$iso9660(0x20000000, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000140) #0 [682761ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=2 cover=5938 #0 [682762ms] -> open_by_handle_at(0xffffffffffffffff, 0x20000140, 0x0) #0 [682762ms] <- open_by_handle_at=0xffffffffffffffff errno=9 cover=319 enabling collider #0 [682762ms] -> syz_mount_image$iso9660(0x20000000, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000140) #0 [682763ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=2 cover=6269 03:34:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 2033/05/18 03:34:28 result hanged=false: [682782ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152816 #0 [682793ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [682793ms] <- syz_init_net_socket$bt_hci=0xffffffffffffffff errno=2 cover=1158 #0 [682794ms] -> ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x20000000) #0 [682794ms] <- ioctl$HCIINQUIRY=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [682796ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [682796ms] <- syz_init_net_socket$bt_hci=0xffffffffffffffff errno=2 cover=1168 #0 [682797ms] -> ioctl$HCIINQUIRY(03:34:28 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x2, 0x0, 0x0, 0x0, 0x0, "473d7fcc115d845089a8e3eefc4327c35d5f4c097347fb24dc13068cf4ada46207000062ea0b5e364eee2b1dc94c1742ea96765c683f90df00"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)="620cf97d001389000000261695b1028d0241c694d0153290d64aa7d0bf23896f4af5948a35d1c04c", 0x28}], 0x1}, 0x0) 2033/05/18 03:34:28 result hanged=false: [682817ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152818 #0 [682827ms] -> socket$packet(0x11, 0x3, 0x300) #0 [682827ms] <- socket$packet=0x3 errno=14 cover=1728 #0 [682828ms] -> sendmsg(0x3, 0x20000100, 0x0) #0 [682829ms] <- sendmsg=0xffffffffffffffff errno=100 cover=218 enabling collider #0 [682834ms] -> socket$packet(0x11, 0x3, 0x300) #0 [682834ms] <- socket$packet=0x3 errno=14 cover=1741 #0 [682835ms] -> sendmsg(0x3, 0x20000100, 0x0) #0 [682835ms] <- sendmsg=0xffffffffffffffff errno=9 cover=53 2033/05/18 03:34:28 result hanged=false: 03:34:28 executing program 0: clone3(&(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001380)=[0x0], 0x1}, 0x58) clone3(&(0x7f0000001480)={0x1000, &(0x7f0000000080), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [682859ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152820 #0 [682870ms] -> clone3(0x200013c0, 0x58) #0 [682887ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 #0 [682889ms] -> clone3(0x20001480, 0x58) #0 [682906ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 enabling collider #0 [682908ms] -> clone3(0x200013c0, 0x58) #0 [682925ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 03:34:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x1c00, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x100, 0x4) r2 = dup(r0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) 2033/05/18 03:34:28 result hanged=false: [682945ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152823 #0 [682954ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [682955ms] <- socket$inet6_udplite=0x3 errno=14 cover=1671 #0 [682955ms] -> dup(0x3) #0 [682955ms] <- dup=0x4 errno=14 cover=87 #0 [682955ms] -> setsockopt$inet6_udp_int(0x4, 0x11, 0x67, 0x20000040, 0x4) #0 [682956ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=106 #0 [682956ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x1, 0x20000000, 0x4) #0 [682956ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=106 #0 [682956ms] -> dup(0x3) #0 [682956ms] <- dup=0x5 errno=14 cover=87 #0 [682956ms] -> sendto$inet(0x5, 0x0, 0x0, 0x0, 0x20001180, 0x10) #0 [682956ms] <- sendto$inet=0x0 errno=14 cover=1024 enabling collider #0 [682957ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [682957ms] <- socket$inet6_udplite=0x3 errno=14 cover=1645 #0 [682957ms] -> dup(0x3) #0 [682957ms] <- dup=0x4 errno=14 cover=86 pthread_create failed (errno 11) 03:34:28 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002f00), 0x0, 0x4094) prctl$PR_GET_NO_NEW_PRIVS(0x27) syz_open_dev$sg(&(0x7f0000002f80), 0x3f, 0x0) syz_mount_image$msdos(&(0x7f0000002fc0), &(0x7f0000003000)='./file1\x00', 0x0, 0x0, &(0x7f0000003040), 0x1008002, &(0x7f0000003080)={[{@nodots}], [{@smackfstransmute={'smackfstransmute', 0x3d, '#! '}}]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 2033/05/18 03:34:28 result hanged=false: 2033/05/18 03:34:28 poll: candidates=8 inputs=0 signal=0 [683013ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 152925 #0 [683022ms] -> socket$nl_route(0x10, 0x3, 0x0) #0 [683025ms] <- socket$nl_route=0x3 errno=14 cover=1442 #0 [683027ms] -> sendmmsg$sock(0xffffffffffffffff, 0x20002f00, 0x0, 0x4094) #0 [683028ms] <- sendmmsg$sock=0xffffffffffffffff errno=9 cover=51 #0 [683029ms] -> prctl$PR_GET_NO_NEW_PRIVS(0x27) #0 [683029ms] <- prctl$PR_GET_NO_NEW_PRIVS=0x0 errno=22 cover=44 #0 [683030ms] -> syz_open_dev$sg(0x20002f80, 0x3f, 0x0) #0 [683030ms] <- syz_open_dev$sg=0xffffffffffffffff errno=2 cover=1200 #0 [683031ms] -> syz_mount_image$msdos(0x20002fc0, 0x20003000, 0x0, 0x0, 0x20003040, 0x1008002, 0x20003080) #0 [683031ms] <- syz_mount_image$msdos=0xffffffffffffffff errno=2 cover=3271 #0 [683032ms] -> ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) #0 [683033ms] <- ioctl$sock_inet_SIOCSARP=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [683034ms] -> socket$nl_route(0x10, 0x3, 0x0) #0 [683035ms] <- socket$nl_route=0x3 errno=14 cover=1459 #0 [683036ms] -> sendmmsg$sock(0xffffffffffffffff, 0x20002f00, 0x0, 0x4094) #0 [683036ms] <- sendmmsg$sock=0xffffffffffffffff errno=9 cover=51 pthread_create failed (errno 11) 03:34:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0) copy_file_range(r1, 0x0, r0, &(0x7f0000000040)=0xfffffffffffffce6, 0x0, 0x0) 2033/05/18 03:34:28 result hanged=false: [683091ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153027 #0 [683102ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [683104ms] <- openat=0x3 errno=14 cover=6886 #0 [683105ms] -> openat(0xffffffffffffff9c, 0x20000140, 0x105142, 0x0) #0 [683105ms] <- openat=0x4 errno=14 cover=6685 #0 [683106ms] -> copy_file_range(0x4, 0x0, 0x3, 0x20000040, 0x0, 0x0) #0 [683106ms] <- copy_file_range=0xffffffffffffffff errno=22 cover=173 enabling collider #0 [683107ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [683110ms] <- openat=0x3 errno=14 cover=1111 #0 [683111ms] -> openat(0xffffffffffffff9c, 0x20000140, 0x105142, 0x0) #0 [683111ms] <- openat=0x4 errno=14 cover=1146 pthread_create failed (errno 11) 2033/05/18 03:34:28 result hanged=false: 03:34:28 executing program 0: prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffd000/0x1000)=nil) [683166ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153129 #0 [683178ms] -> prctl$PR_SET_MM(0x23, 0x6, 0x20ffd000) #0 [683178ms] <- prctl$PR_SET_MM=0x0 errno=22 cover=191 enabling collider #0 [683180ms] -> prctl$PR_SET_MM(0x23, 0x6, 0x20ffd000) #0 [683180ms] <- prctl$PR_SET_MM=0x0 errno=22 cover=163 03:34:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) 2033/05/18 03:34:28 result hanged=false: [683200ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153131 #0 [683209ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [683213ms] <- socket$inet_tcp=0x3 errno=14 cover=1754 #0 [683215ms] -> sendto$inet(0x3, 0x0, 0x0, 0x20000854, 0x20000140, 0x10) #0 [683218ms] <- sendto$inet=0xffffffffffffffff errno=115 cover=3489 #0 [683218ms] -> setsockopt$sock_linger(0x3, 0x1, 0x35, 0x20000000, 0x8) #0 [683220ms] <- setsockopt$sock_linger=0x0 errno=14 cover=153 enabling collider #0 [683221ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [683221ms] <- socket$inet_tcp=0x3 errno=14 cover=1706 #0 [683221ms] -> sendto$inet(0x3, 0x0, 0x0, 0x20000854, 0x20000140, 0x10) #0 [683222ms] <- sendto$inet=0xffffffffffffffff errno=115 cover=2081 pthread_create failed (errno 11) 03:34:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000019c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x0, &(0x7f0000003c40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2033/05/18 03:34:28 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [683276ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153233 #0 [683286ms] -> openat$tun(0xffffffffffffff9c, 0x200000c0, 0x2, 0x0) #0 [683286ms] <- openat$tun=0xffffffffffffffff errno=2 cover=1221 #0 [683288ms] -> openat$procfs(0xffffffffffffff9c, 0x20000200, 0x0, 0x0) #0 [683288ms] <- openat$procfs=0xffffffffffffffff errno=2 cover=1168 #0 [683289ms] -> syz_mount_image$tmpfs(0x0, 0x200019c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [683291ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=12716 #0 [683291ms] -> mount$9p_fd(0x0, 0x20003bc0, 0x20003c00, 0x0, 0x20003c40) [ 1433.269594] 9pnet: Insufficient options for proto=fd #0 [683294ms] <- mount$9p_fd=0xffffffffffffffff errno=92 cover=5344 enabling collider #0 [683295ms] -> openat$tun(0xffffffffffffff9c, 0x200000c0, 0x2, 0x0) #0 [683297ms] <- openat$tun=0xffffffffffffffff errno=2 cover=1266 #0 [683297ms] -> openat$procfs(0xffffffffffffff9c, 0x20000200, 0x0, 0x0) #0 [683298ms] <- openat$procfs=0xffffffffffffffff errno=2 cover=1214 pthread_create failed (errno 11) 03:34:28 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x80) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) ioctl$sock_ifreq(r1, 0x8931, &(0x7f00000003c0)={'gretap0\x00', @ifru_map}) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) socketpair(0x18, 0x0, 0x0, 0x0) 2033/05/18 03:34:28 result hanged=false: [683347ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153335 #0 [683356ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [683357ms] <- syz_init_net_socket$bt_sco=0xffffffffffffffff errno=2 cover=1201 #0 [683357ms] -> getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) #0 [683357ms] <- getsockopt$IP_VS_SO_GET_SERVICE=0xffffffffffffffff errno=9 cover=49 #0 [683357ms] -> socket$inet6(0xa, 0x0, 0x80) #0 [683383ms] <- socket$inet6=0xffffffffffffffff errno=94 cover=2677 #0 [683383ms] -> ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) #0 [683384ms] <- ioctl$BTRFS_IOC_QUOTA_CTL=0xffffffffffffffff errno=9 cover=45 #0 [683385ms] -> ioctl$sock_ifreq(0xffffffffffffffff, 0x8931, 0x200003c0) #0 [683385ms] <- ioctl$sock_ifreq=0xffffffffffffffff errno=9 cover=45 #0 [683385ms] -> ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) #0 [683385ms] <- ioctl$sock_SIOCOUTQNSD=0xffffffffffffffff errno=9 cover=45 #0 [683385ms] -> open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) #0 [683386ms] <- open_by_handle_at=0xffffffffffffffff errno=14 cover=453 #0 [683386ms] -> socketpair(0x18, 0x0, 0x0, 0x0) #0 [683386ms] <- socketpair=0xffffffffffffffff errno=14 cover=298 enabling collider #0 [683387ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [683387ms] <- syz_init_net_socket$bt_sco=0xffffffffffffffff errno=2 cover=1179 #0 [683388ms] -> getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) #0 [683388ms] <- getsockopt$IP_VS_SO_GET_SERVICE=0xffffffffffffffff errno=9 cover=49 pthread_create failed (errno 11) 03:34:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000580)=@updsa={0xf0, 0x1a, 0x9, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in, 0x0, 0x6c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 2033/05/18 03:34:28 result hanged=false: [683434ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153437 #0 [683444ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [683447ms] <- socket$nl_xfrm=0x3 errno=14 cover=1419 #0 [683449ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) #0 [683450ms] <- sendmsg$nl_xfrm=0xf0 errno=14 cover=1531 enabling collider #0 [683451ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [683451ms] <- socket$nl_xfrm=0x3 errno=14 cover=1407 03:34:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000041c0)={&(0x7f00000040c0), 0xc, &(0x7f0000004180)={0x0}}, 0x0) 2033/05/18 03:34:28 result hanged=false: [683468ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153439 #0 [683478ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [683478ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1169 #0 [683479ms] -> sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, 0x200041c0, 0x0) #0 [683479ms] <- sendmsg$IEEE802154_LLSEC_ADD_DEV=0xffffffffffffffff errno=9 cover=52 enabling collider #0 [683479ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [683479ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1180 03:34:28 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknodat$loop(r0, &(0x7f0000000240)='./mnt\x00', 0x0, 0x0) 2033/05/18 03:34:28 result hanged=false: 2033/05/18 03:34:28 poll: candidates=8 inputs=0 signal=0 [683501ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153441 #0 [683509ms] -> syz_mount_image$tmpfs(0x20000080, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x20001740) syz_mount_image: size=0 segs=0 loop='' dir='./mnt' fs='tmpfs' flags=0 opts='mpol=prefer,' #0 [683518ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=14963 #0 [683519ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [683529ms] <- perf_event_open=0x4 errno=14 cover=10632 #0 [683530ms] -> mknodat$loop(0x3, 0x20000240, 0x0, 0x700) #0 [683533ms] <- mknodat$loop=0x0 errno=14 cover=11823 enabling collider #0 [683543ms] -> syz_mount_image$tmpfs(0x20000080, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x20001740) syz_mount_image: size=0 segs=0 loop='' dir='./mnt' fs='tmpfs' flags=0 opts='mpol=prefer,' #0 [683546ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=15039 #0 [683546ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [683547ms] <- perf_event_open=0x4 errno=14 cover=10011 pthread_create failed (errno 11) 03:34:29 executing program 0: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) 2033/05/18 03:34:29 result hanged=false: umount(./5216/mnt) umount(./5216/mnt) [683623ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153543 #0 [683631ms] -> openat$tcp_congestion(0xffffffffffffff9c, 0x20000400, 0x1, 0x0) #0 [683635ms] <- openat$tcp_congestion=0xffffffffffffffff errno=2 cover=1214 enabling collider #0 [683637ms] -> openat$tcp_congestion(0xffffffffffffff9c, 0x20000400, 0x1, 0x0) #0 [683638ms] <- openat$tcp_congestion=0xffffffffffffffff errno=2 cover=1188 2033/05/18 03:34:29 result hanged=false: 03:34:29 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='(:]\'cK\x1c\x04\x0f\xf2 oP\xa7\xb9\xcf@\'.\x00@\x90p\xd6\xf9+\xac]^\xd5\xde@\x1a\xa4\xef2\x18\xd4\xdd\x99\xa4\xdf3\xa6\x99\xe3ym\xe8-\xc7z\x06r\xe5\x87\xe9\x93\xb9W\x1de\xc6\xca\xc88\xfc\xea\f\xb6\xdb\xa6\xda\x13g\xec6\xdcd\x19\x84\xe0\xd0\x04\\[\xfe\x94\x13\xec\x10\xa7\x86\xde\xdc\x92\xdew\xfcy\x7f\xea(\xee\xb8\xd9\x8f\xadV\xc0k\xfe\xd0\xa9\xd0!`B\x15Z\x1a\x97\xd1a\xdc\xa48\xb9F\x1fr\xdd\xcb1\xa6T8\xea\xe8\xd8\x1d2\x8b\xd2\xf7\xd8\xf7j\xd7ny\xf2l\x98\xc8\xb4J\xf9C\xe92`\x9b\xa7$+n[\xc3\x0f\xef\xa0Ey\xf9\xf7\xd6%c\xe9') [683660ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153545 #0 [683669ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [683674ms] <- perf_event_open=0x3 errno=14 cover=9391 #0 [683676ms] -> ioctl$PERF_EVENT_IOC_SET_FILTER(0x3, 0x40082406, 0x20000000) #0 [683678ms] <- ioctl$PERF_EVENT_IOC_SET_FILTER=0xffffffffffffffff errno=2 cover=9013 enabling collider #0 [683690ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [683692ms] <- perf_event_open=0x3 errno=14 cover=9474 #0 [683692ms] -> ioctl$PERF_EVENT_IOC_SET_FILTER(0x3, 0x40082406, 0x20000000) #0 [683692ms] <- ioctl$PERF_EVENT_IOC_SET_FILTER=0xffffffffffffffff errno=9 cover=46 2033/05/18 03:34:29 result hanged=false: 03:34:29 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='(:]\'cK\x1c\x04\x0f\xf2 oP\xa7\xb9\xcf@\'.\x00@\x90p\xd6\xf9+\xac]^\xd5\xde@\x1a\xa4\xef2\x18\xd4\xdd\x99\xa4\xdf3\xa6\x99\xe3ym\xe8-\xc7z\x06r\xe5\x87\xe9\x93\xb9W\x1de\xc6\xca\xc88\xfc\xea\f\xb6\xdb\xa6\xda\x13g\xec6\xdcd\x19\x84\xe0\xd0\x04\\[\xfe\x94\x13\xec\x10\xa7\x86\xde\xdc\x92\xdew\xfcy\x7f\xea(\xee\xb8\xd9\x8f\xadV\xc0k\xfe\xd0\xa9\xd0!`B\x15Z\x1a\x97\xd1a\xdc\xa48\xb9F\x1fr\xdd\xcb1\xa6T8\xea\xe8\xd8\x1d2\x8b\xd2\xf7\xd8\xf7j\xd7ny\xf2l\x98\xc8\xb4J\xf9C\xe92`\x9b\xa7$+n[\xc3\x0f\xef\xa0Ey\xf9\xf7\xd6%c\xe9') 2033/05/18 03:34:29 #0: triaging type=7 2033/05/18 03:34:29 triaging input for call #1 ioctl$PERF_EVENT_IOC_SET_FILTER (new signal=2) [683715ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153547 #0 [683723ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [683724ms] <- perf_event_open=0x3 errno=14 cover=9597 #0 [683725ms] -> ioctl$PERF_EVENT_IOC_SET_FILTER(0x3, 0x40082406, 0x20000000) #0 [683725ms] <- ioctl$PERF_EVENT_IOC_SET_FILTER=0xffffffffffffffff errno=2 cover=848 03:34:29 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='(:]\'cK\x1c\x04\x0f\xf2 oP\xa7\xb9\xcf@\'.\x00@\x90p\xd6\xf9+\xac]^\xd5\xde@\x1a\xa4\xef2\x18\xd4\xdd\x99\xa4\xdf3\xa6\x99\xe3ym\xe8-\xc7z\x06r\xe5\x87\xe9\x93\xb9W\x1de\xc6\xca\xc88\xfc\xea\f\xb6\xdb\xa6\xda\x13g\xec6\xdcd\x19\x84\xe0\xd0\x04\\[\xfe\x94\x13\xec\x10\xa7\x86\xde\xdc\x92\xdew\xfcy\x7f\xea(\xee\xb8\xd9\x8f\xadV\xc0k\xfe\xd0\xa9\xd0!`B\x15Z\x1a\x97\xd1a\xdc\xa48\xb9F\x1fr\xdd\xcb1\xa6T8\xea\xe8\xd8\x1d2\x8b\xd2\xf7\xd8\xf7j\xd7ny\xf2l\x98\xc8\xb4J\xf9C\xe92`\x9b\xa7$+n[\xc3\x0f\xef\xa0Ey\xf9\xf7\xd6%c\xe9') 2033/05/18 03:34:29 result hanged=false: [683758ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153549 #0 [683768ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [683772ms] <- perf_event_open=0x3 errno=14 cover=10182 #0 [683773ms] -> ioctl$PERF_EVENT_IOC_SET_FILTER(0x3, 0x40082406, 0x20000000) #0 [683773ms] <- ioctl$PERF_EVENT_IOC_SET_FILTER=0xffffffffffffffff errno=2 cover=837 03:34:29 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='(:]\'cK\x1c\x04\x0f\xf2 oP\xa7\xb9\xcf@\'.\x00@\x90p\xd6\xf9+\xac]^\xd5\xde@\x1a\xa4\xef2\x18\xd4\xdd\x99\xa4\xdf3\xa6\x99\xe3ym\xe8-\xc7z\x06r\xe5\x87\xe9\x93\xb9W\x1de\xc6\xca\xc88\xfc\xea\f\xb6\xdb\xa6\xda\x13g\xec6\xdcd\x19\x84\xe0\xd0\x04\\[\xfe\x94\x13\xec\x10\xa7\x86\xde\xdc\x92\xdew\xfcy\x7f\xea(\xee\xb8\xd9\x8f\xadV\xc0k\xfe\xd0\xa9\xd0!`B\x15Z\x1a\x97\xd1a\xdc\xa48\xb9F\x1fr\xdd\xcb1\xa6T8\xea\xe8\xd8\x1d2\x8b\xd2\xf7\xd8\xf7j\xd7ny\xf2l\x98\xc8\xb4J\xf9C\xe92`\x9b\xa7$+n[\xc3\x0f\xef\xa0Ey\xf9\xf7\xd6%c\xe9') 2033/05/18 03:34:29 result hanged=false: [683807ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153551 #0 [683815ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [683820ms] <- perf_event_open=0x3 errno=14 cover=9562 #0 [683822ms] -> ioctl$PERF_EVENT_IOC_SET_FILTER(0x3, 0x40082406, 0x20000000) #0 [683822ms] <- ioctl$PERF_EVENT_IOC_SET_FILTER=0xffffffffffffffff errno=2 cover=866 2033/05/18 03:34:29 result hanged=false: 2033/05/18 03:34:29 added new input for call #1 ioctl$PERF_EVENT_IOC_SET_FILTER to corpus: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='(:]\'cK\x1c\x04\x0f\xf2 oP\xa7\xb9\xcf@\'.\x00@\x90p\xd6\xf9+\xac]^\xd5\xde@\x1a\xa4\xef2\x18\xd4\xdd\x99\xa4\xdf3\xa6\x99\xe3ym\xe8-\xc7z\x06r\xe5\x87\xe9\x93\xb9W\x1de\xc6\xca\xc88\xfc\xea\f\xb6\xdb\xa6\xda\x13g\xec6\xdcd\x19\x84\xe0\xd0\x04\\[\xfe\x94\x13\xec\x10\xa7\x86\xde\xdc\x92\xdew\xfcy\x7f\xea(\xee\xb8\xd9\x8f\xadV\xc0k\xfe\xd0\xa9\xd0!`B\x15Z\x1a\x97\xd1a\xdc\xa48\xb9F\x1fr\xdd\xcb1\xa6T8\xea\xe8\xd8\x1d2\x8b\xd2\xf7\xd8\xf7j\xd7ny\xf2l\x98\xc8\xb4J\xf9C\xe92`\x9b\xa7$+n[\xc3\x0f\xef\xa0Ey\xf9\xf7\xd6%c\xe9') 03:34:29 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000000)={0x7}, 0x7) fallocate(r0, 0x10, 0x0, 0x8800000) write$P9_RRENAME(r0, &(0x7f0000000300)={0x7}, 0x7) [683855ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153553 #0 [683864ms] -> creat(0x20000040, 0x0) #0 [683865ms] <- creat=0x3 errno=14 cover=6820 #0 [683866ms] -> creat(0x200000c0, 0x0) #0 [683867ms] <- creat=0x4 errno=14 cover=4959 #0 [683867ms] -> write$P9_RFLUSH(0x4, 0x20000000, 0x7) #0 [683869ms] <- write$P9_RFLUSH=0x7 errno=14 cover=2841 #0 [683869ms] -> fallocate(0x3, 0x10, 0x0, 0x8800000) #0 [683877ms] <- fallocate=0x0 errno=14 cover=96437 #0 [683878ms] -> write$P9_RRENAME(0x3, 0x20000300, 0x7) #0 [683878ms] <- write$P9_RRENAME=0x7 errno=14 cover=1803 enabling collider #0 [683879ms] -> creat(0x20000040, 0x0) #0 [683881ms] <- creat=0x3 errno=14 cover=18499 #0 [683882ms] -> creat(0x200000c0, 0x0) #0 [683882ms] <- creat=0x4 errno=14 cover=4784 pthread_create failed (errno 11) 03:34:29 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000000)={0x7}, 0x7) fallocate(r0, 0x10, 0x0, 0x8800000) write$P9_RRENAME(r0, &(0x7f0000000300)={0x7}, 0x7) 2033/05/18 03:34:29 result hanged=false: 2033/05/18 03:34:29 #0: triaging type=7 2033/05/18 03:34:29 triaging input for call #4 write$P9_RRENAME (new signal=2) [683937ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153655 #0 [683948ms] -> creat(0x20000040, 0x0) #0 [683949ms] <- creat=0x3 errno=14 cover=6780 #0 [683950ms] -> creat(0x200000c0, 0x0) #0 [683950ms] <- creat=0x4 errno=14 cover=4937 #0 [683951ms] -> write$P9_RFLUSH(0x4, 0x20000000, 0x7) #0 [683951ms] <- write$P9_RFLUSH=0x7 errno=14 cover=2828 #0 [683951ms] -> fallocate(0x3, 0x10, 0x0, 0x8800000) #0 [683958ms] <- fallocate=0x0 errno=14 cover=95898 #0 [683964ms] -> write$P9_RRENAME(0x3, 0x20000300, 0x7) #0 [683964ms] <- write$P9_RRENAME=0x7 errno=14 cover=1803 03:34:29 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000000)={0x7}, 0x7) fallocate(r0, 0x10, 0x0, 0x8800000) write$P9_RRENAME(r0, &(0x7f0000000300)={0x7}, 0x7) 2033/05/18 03:34:29 result hanged=false: [683985ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153657 #0 [683995ms] -> creat(0x20000040, 0x0) #0 [683998ms] <- creat=0x3 errno=14 cover=6688 #0 [684000ms] -> creat(0x200000c0, 0x0) #0 [684002ms] <- creat=0x4 errno=14 cover=4917 #0 [684004ms] -> write$P9_RFLUSH(0x4, 0x20000000, 0x7) #0 [684006ms] <- write$P9_RFLUSH=0x7 errno=14 cover=2828 #0 [684007ms] -> fallocate(0x3, 0x10, 0x0, 0x8800000) #0 [684012ms] <- fallocate=0x0 errno=14 cover=90377 #0 [684020ms] -> write$P9_RRENAME(0x3, 0x20000300, 0x7) #0 [684020ms] <- write$P9_RRENAME=0x7 errno=14 cover=1836 03:34:29 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000000)={0x7}, 0x7) fallocate(r0, 0x10, 0x0, 0x8800000) write$P9_RRENAME(r0, &(0x7f0000000300)={0x7}, 0x7) 2033/05/18 03:34:29 result hanged=false: [684039ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153659 #0 [684048ms] -> creat(0x20000040, 0x0) #0 [684049ms] <- creat=0x3 errno=14 cover=6708 #0 [684050ms] -> creat(0x200000c0, 0x0) #0 [684051ms] <- creat=0x4 errno=14 cover=4958 #0 [684051ms] -> write$P9_RFLUSH(0x4, 0x20000000, 0x7) #0 [684051ms] <- write$P9_RFLUSH=0x7 errno=14 cover=2817 #0 [684052ms] -> fallocate(0x3, 0x10, 0x0, 0x8800000) #0 [684057ms] <- fallocate=0x0 errno=14 cover=96826 #0 [684063ms] -> write$P9_RRENAME(0x3, 0x20000300, 0x7) #0 [684064ms] <- write$P9_RRENAME=0x7 errno=14 cover=1814 2033/05/18 03:34:29 result hanged=false: 2033/05/18 03:34:29 added new input for call #4 write$P9_RRENAME to corpus: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000000)={0x7}, 0x7) fallocate(r0, 0x10, 0x0, 0x8800000) write$P9_RRENAME(r0, &(0x7f0000000300)={0x7}, 0x7) 03:34:29 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000000)={0x7}, 0x7) fallocate(r0, 0x10, 0x0, 0x8800000) write$P9_RRENAME(r0, &(0x7f0000000300)={0x7}, 0x7) 2033/05/18 03:34:29 #0: triaging type=7 2033/05/18 03:34:29 triaging input for call #1 creat (new signal=2) [684088ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153661 #0 [684096ms] -> creat(0x20000040, 0x0) #0 [684099ms] <- creat=0x3 errno=14 cover=6692 #0 [684102ms] -> creat(0x200000c0, 0x0) #0 [684104ms] <- creat=0x4 errno=14 cover=4939 #0 [684106ms] -> write$P9_RFLUSH(0x4, 0x20000000, 0x7) #0 [684107ms] <- write$P9_RFLUSH=0x7 errno=14 cover=2814 #0 [684108ms] -> fallocate(0x3, 0x10, 0x0, 0x8800000) #0 [684116ms] <- fallocate=0x0 errno=14 cover=95827 #0 [684123ms] -> write$P9_RRENAME(0x3, 0x20000300, 0x7) #0 [684123ms] <- write$P9_RRENAME=0x7 errno=14 cover=1868 2033/05/18 03:34:29 result hanged=false: 03:34:29 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000000)={0x7}, 0x7) fallocate(r0, 0x10, 0x0, 0x8800000) write$P9_RRENAME(r0, &(0x7f0000000300)={0x7}, 0x7) [684144ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153663 #0 [684154ms] -> creat(0x20000040, 0x0) #0 [684155ms] <- creat=0x3 errno=14 cover=6677 #0 [684156ms] -> creat(0x200000c0, 0x0) #0 [684157ms] <- creat=0x4 errno=14 cover=4974 #0 [684158ms] -> write$P9_RFLUSH(0x4, 0x20000000, 0x7) #0 [684158ms] <- write$P9_RFLUSH=0x7 errno=14 cover=2864 #0 [684159ms] -> fallocate(0x3, 0x10, 0x0, 0x8800000) #0 [684164ms] <- fallocate=0x0 errno=14 cover=95191 #0 [684171ms] -> write$P9_RRENAME(0x3, 0x20000300, 0x7) #0 [684171ms] <- write$P9_RRENAME=0x7 errno=14 cover=1814 03:34:29 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000000)={0x7}, 0x7) fallocate(r0, 0x10, 0x0, 0x8800000) write$P9_RRENAME(r0, &(0x7f0000000300)={0x7}, 0x7) 2033/05/18 03:34:29 result hanged=false: [684194ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153665 #0 [684204ms] -> creat(0x20000040, 0x0) #0 [684206ms] <- creat=0x3 errno=14 cover=6688 #0 [684209ms] -> creat(0x200000c0, 0x0) #0 [684211ms] <- creat=0x4 errno=14 cover=4918 #0 [684213ms] -> write$P9_RFLUSH(0x4, 0x20000000, 0x7) #0 [684215ms] <- write$P9_RFLUSH=0x7 errno=14 cover=2861 #0 [684215ms] -> fallocate(0x3, 0x10, 0x0, 0x8800000) #0 [684221ms] <- fallocate=0x0 errno=14 cover=94192 #0 [684228ms] -> write$P9_RRENAME(0x3, 0x20000300, 0x7) #0 [684228ms] <- write$P9_RRENAME=0x7 errno=14 cover=1825 2033/05/18 03:34:29 result hanged=false: 2033/05/18 03:34:29 added new input for call #1 creat to corpus: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RFLUSH(r1, &(0x7f0000000000)={0x7}, 0x7) fallocate(r0, 0x10, 0x0, 0x8800000) write$P9_RRENAME(r0, &(0x7f0000000300)={0x7}, 0x7) 03:34:29 executing program 0: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000380)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@check_strict}]}) openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) [684260ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153667 #0 [684268ms] -> syz_mount_image$iso9660(0x20000000, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000040) #0 [684272ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=2 cover=6355 #0 [684273ms] -> openat(0xffffffffffffffff, 0x20000080, 0x0, 0x0) #0 [684274ms] <- openat=0xffffffffffffffff errno=9 cover=700 enabling collider #0 [684275ms] -> syz_mount_image$iso9660(0x20000000, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000040) #0 [684277ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=2 cover=6177 03:34:29 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) 2033/05/18 03:34:29 result hanged=false: [684297ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153669 #0 [684307ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [684308ms] <- perf_event_open=0x3 errno=14 cover=9719 #0 [684309ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [684309ms] <- socket$inet_tcp=0x4 errno=14 cover=1729 #0 [684309ms] -> setsockopt$inet_tcp_TCP_ULP(0x4, 0x6, 0x1f, 0x20000100, 0x4) #0 [684326ms] <- setsockopt$inet_tcp_TCP_ULP=0xffffffffffffffff errno=2 cover=10097 enabling collider #0 [684334ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [684335ms] <- perf_event_open=0x3 errno=14 cover=9284 #0 [684335ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [684336ms] <- socket$inet_tcp=0x4 errno=14 cover=1753 pthread_create failed (errno 11) 03:34:29 executing program 0: clock_gettime(0x2, 0x0) 2033/05/18 03:34:29 result hanged=false: [684405ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153771 #0 [684414ms] -> clock_gettime(0x2, 0x0) #0 [684414ms] <- clock_gettime=0xffffffffffffffff errno=14 cover=461 enabling collider #0 [684415ms] -> clock_gettime(0x2, 0x0) #0 [684415ms] <- clock_gettime=0xffffffffffffffff errno=14 cover=462 03:34:29 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x24, @short}, 0x14, &(0x7f0000000a40)={0x0}}, 0x0) 2033/05/18 03:34:29 result hanged=false: [684436ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153773 #0 [684446ms] -> perf_event_open(0x20000140, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [684454ms] <- perf_event_open=0x3 errno=14 cover=9603 #0 [684455ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [684455ms] <- syz_init_net_socket$802154_dgram=0xffffffffffffffff errno=2 cover=1181 #0 [684455ms] -> sendmsg$802154_dgram(0xffffffffffffffff, 0x20000a80, 0x0) #0 [684455ms] <- sendmsg$802154_dgram=0xffffffffffffffff errno=9 cover=52 enabling collider #0 [684470ms] -> perf_event_open(0x20000140, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [684471ms] <- perf_event_open=0x3 errno=14 cover=9686 #0 [684471ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [684472ms] <- syz_init_net_socket$802154_dgram=0xffffffffffffffff errno=2 cover=1227 pthread_create failed (errno 11) 03:34:29 executing program 0: r0 = syz_io_uring_setup(0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$inet(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0, 0x12001}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002a80)=""/102400, 0x19000}], 0x1) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 2033/05/18 03:34:29 result hanged=false: 2033/05/18 03:34:29 poll: candidates=8 inputs=0 signal=0 [684536ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153875 #0 [684547ms] -> syz_io_uring_setup(0x22, 0x20000080, 0x200a0000, 0x200b0000, 0x20000180, 0x20002a40) #0 [684554ms] <- syz_io_uring_setup=0x3 errno=14 cover=8072 #0 [684555ms] -> socket$inet(0x2, 0x1, 0x0) #0 [684555ms] <- socket$inet=0x4 errno=14 cover=1768 #0 [684556ms] -> syz_io_uring_submit(0x200a0000, 0x200b0000, 0x20000240, 0x0) #0 [684556ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [684556ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [684557ms] <- io_uring_enter=0x1 errno=14 cover=634 #0 [684557ms] -> io_uring_register$IORING_REGISTER_BUFFERS(0x3, 0x0, 0x20000400, 0x1) pthread_create failed (errno 11) 03:34:31 executing program 0: r0 = syz_io_uring_setup(0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$inet(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0, 0x12001}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002a80)=""/102400, 0x19000}], 0x1) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 2033/05/18 03:34:31 result hanged=false: 2033/05/18 03:34:31 #0: triaging type=7 2033/05/18 03:34:31 triaging input for call #1 socket$inet (new signal=2) [685610ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 153977 #0 [685622ms] -> syz_io_uring_setup(0x22, 0x20000080, 0x200a0000, 0x200b0000, 0x20000180, 0x20002a40) #0 [685624ms] <- syz_io_uring_setup=0x3 errno=14 cover=7925 #0 [685626ms] -> socket$inet(0x2, 0x1, 0x0) #0 [685626ms] <- socket$inet=0x4 errno=14 cover=1729 #0 [685627ms] -> syz_io_uring_submit(0x200a0000, 0x200b0000, 0x20000240, 0x0) #0 [685628ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [685629ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [685629ms] <- io_uring_enter=0x1 errno=14 cover=631 #0 [685630ms] -> io_uring_register$IORING_REGISTER_BUFFERS(0x3, 0x0, 0x20000400, 0x1) pthread_create failed (errno 11) 03:34:32 executing program 0: r0 = syz_io_uring_setup(0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$inet(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0, 0x12001}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002a80)=""/102400, 0x19000}], 0x1) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 2033/05/18 03:34:32 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [686691ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154079 #0 [686700ms] -> syz_io_uring_setup(0x22, 0x20000080, 0x200a0000, 0x200b0000, 0x20000180, 0x20002a40) #0 [686707ms] <- syz_io_uring_setup=0x3 errno=14 cover=8235 #0 [686709ms] -> socket$inet(0x2, 0x1, 0x0) #0 [686709ms] <- socket$inet=0x4 errno=14 cover=1732 #0 [686710ms] -> syz_io_uring_submit(0x200a0000, 0x200b0000, 0x20000240, 0x0) #0 [686710ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [686710ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [686711ms] <- io_uring_enter=0x1 errno=14 cover=642 #0 [686711ms] -> io_uring_register$IORING_REGISTER_BUFFERS(0x3, 0x0, 0x20000400, 0x1) pthread_create failed (errno 11) 2033/05/18 03:34:33 result hanged=false: 03:34:33 executing program 0: r0 = syz_io_uring_setup(0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$inet(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0, 0x12001}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002a80)=""/102400, 0x19000}], 0x1) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) [687767ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154181 #0 [687778ms] -> syz_io_uring_setup(0x22, 0x20000080, 0x200a0000, 0x200b0000, 0x20000180, 0x20002a40) #0 [687780ms] <- syz_io_uring_setup=0x3 errno=14 cover=7924 #0 [687781ms] -> socket$inet(0x2, 0x1, 0x0) #0 [687782ms] <- socket$inet=0x4 errno=14 cover=1729 #0 [687782ms] -> syz_io_uring_submit(0x200a0000, 0x200b0000, 0x20000240, 0x0) #0 [687782ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [687782ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [687782ms] <- io_uring_enter=0x1 errno=14 cover=620 #0 [687782ms] -> io_uring_register$IORING_REGISTER_BUFFERS(0x3, 0x0, 0x20000400, 0x1) pthread_create failed (errno 11) 2033/05/18 03:34:34 result hanged=false: 2033/05/18 03:34:34 added new input for call #1 socket$inet to corpus: r0 = syz_io_uring_setup(0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$inet(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0, 0x12001}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002a80)=""/102400, 0x19000}], 0x1) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 03:34:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000000)=0xfffff82a) [688839ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154283 #0 [688849ms] -> syz_open_dev$sg(0x20000400, 0x0, 0x0) #0 [688852ms] <- syz_open_dev$sg=0xffffffffffffffff errno=2 cover=1178 #0 [688854ms] -> ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, 0x20000000) #0 [688856ms] <- ioctl$SG_SET_TIMEOUT=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [688857ms] -> syz_open_dev$sg(0x20000400, 0x0, 0x0) #0 [688857ms] <- syz_open_dev$sg=0xffffffffffffffff errno=2 cover=1176 #0 [688858ms] -> ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, 0x20000000) #0 [688858ms] <- ioctl$SG_SET_TIMEOUT=0xffffffffffffffff errno=9 cover=45 2033/05/18 03:34:34 result hanged=false: 03:34:34 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "779b1e7567d62f09a2d166d436fc9990c772b9"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000080)) [688880ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154285 #0 [688889ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [688894ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [688894ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [688895ms] <- openat$tun=0xffffffffffffffff errno=2 cover=1178 #0 [688895ms] -> ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, 0x20000000) #0 [688895ms] <- ioctl$TUNSETQUEUE=0xffffffffffffffff errno=9 cover=45 #0 [688895ms] -> ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x20000080) #0 [688896ms] <- ioctl$TUNGETSNDBUF=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [688896ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [688896ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [688896ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [688896ms] <- openat$tun=0xffffffffffffffff errno=2 cover=1169 pthread_create failed (errno 11) 03:34:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) 2033/05/18 03:34:34 result hanged=false: [688950ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154387 #0 [688959ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20000580) #0 [688965ms] <- socketpair$unix=0x0 errno=14 cover=3565 enabling collider #0 [688966ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20000580) #0 [688966ms] <- socketpair$unix=0x0 errno=14 cover=2859 03:34:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x7) close(r0) 2033/05/18 03:34:34 result hanged=false: [688989ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154389 #0 [688999ms] -> socket$netlink(0x10, 0x3, 0x7) #0 [688999ms] <- socket$netlink=0x3 errno=14 cover=1428 #0 [689000ms] -> close(0x3) #0 [689000ms] <- close=0x0 errno=14 cover=715 enabling collider #0 [689002ms] -> socket$netlink(0x10, 0x3, 0x7) #0 [689002ms] <- socket$netlink=0x3 errno=14 cover=1394 #0 [689003ms] -> close(03:34:34 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000018c0), 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 2033/05/18 03:34:34 result hanged=false: [689024ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154391 #0 [689035ms] -> syz_open_dev$loop(0x200018c0, 0x0, 0x0) #0 [689035ms] <- syz_open_dev$loop=0xffffffffffffffff errno=2 cover=1156 #0 [689036ms] -> ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) #0 [689036ms] <- ioctl$BLKTRACESTART=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [689037ms] -> syz_open_dev$loop(0x200018c0, 0x0, 0x0) #0 [689037ms] <- syz_open_dev$loop=0xffffffffffffffff errno=2 cover=1247 03:34:34 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f00000000c0)=0x35) 2033/05/18 03:34:34 result hanged=false: [689056ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154393 #0 [689065ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [689069ms] <- socket$inet6_udplite=0x3 errno=14 cover=1649 #0 [689071ms] -> getsockopt$IP6T_SO_GET_ENTRIES(0x3, 0x29, 0x41, 0x0, 0x200000c0) #0 [689072ms] <- getsockopt$IP6T_SO_GET_ENTRIES=0xffffffffffffffff errno=14 cover=520 enabling collider #0 [689073ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [689074ms] <- socket$inet6_udplite=0x3 errno=14 cover=1640 03:34:34 executing program 0: syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) 2033/05/18 03:34:34 result hanged=false: [689091ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154395 #0 [689100ms] -> syz_genetlink_get_family_id$nl802154(0x20000240, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [689103ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=9111 enabling collider #0 [689104ms] -> syz_genetlink_get_family_id$nl802154(0x20000240, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [689105ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=7426 03:34:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@empty}, {@in=@local, 0x0, 0x33}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}, @coaddr={0x14, 0xe, @in=@multicast1}]}, 0x150}}, 0x0) 2033/05/18 03:34:34 result hanged=false: 2033/05/18 03:34:34 poll: candidates=8 inputs=0 signal=0 [689130ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154397 #0 [689140ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [689143ms] <- socket$nl_xfrm=0x3 errno=14 cover=1441 #0 [689145ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) #0 [689149ms] <- sendmsg$nl_xfrm=0x150 errno=14 cover=6910 enabling collider #0 [689149ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [689149ms] <- socket$nl_xfrm=0x3 errno=14 cover=1396 2033/05/18 03:34:34 result hanged=false: 2033/05/18 03:34:34 #0: triaging type=7 03:34:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@empty}, {@in=@local, 0x0, 0x33}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}, @coaddr={0x14, 0xe, @in=@multicast1}]}, 0x150}}, 0x0) 2033/05/18 03:34:34 triaging input for call #1 sendmsg$nl_xfrm (new signal=3) [689169ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154399 #0 [689178ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [689178ms] <- socket$nl_xfrm=0x3 errno=14 cover=1397 #0 [689179ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) #0 [689180ms] <- sendmsg$nl_xfrm=0x150 errno=14 cover=3142 03:34:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@empty}, {@in=@local, 0x0, 0x33}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}, @coaddr={0x14, 0xe, @in=@multicast1}]}, 0x150}}, 0x0) 2033/05/18 03:34:34 result hanged=false: [689201ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154401 #0 [689211ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [689211ms] <- socket$nl_xfrm=0x3 errno=14 cover=1419 #0 [689213ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) #0 [689214ms] <- sendmsg$nl_xfrm=0x150 errno=14 cover=3194 03:34:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@empty}, {@in=@local, 0x0, 0x33}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}, @coaddr={0x14, 0xe, @in=@multicast1}]}, 0x150}}, 0x0) 2033/05/18 03:34:34 result hanged=false: [689232ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154403 #0 [689242ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [689243ms] <- socket$nl_xfrm=0x3 errno=14 cover=1411 #0 [689243ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) #0 [689244ms] <- sendmsg$nl_xfrm=0x150 errno=14 cover=3185 2033/05/18 03:34:34 result hanged=false: 2033/05/18 03:34:34 added new input for call #1 sendmsg$nl_xfrm to corpus: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@empty}, {@in=@local, 0x0, 0x33}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}, @coaddr={0x14, 0xe, @in=@multicast1}]}, 0x150}}, 0x0) 03:34:34 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x18812, r0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) [689268ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154405 #0 [689278ms] -> syz_open_dev$usbmon(0x20000040, 0x0, 0x0) #0 [689280ms] <- syz_open_dev$usbmon=0xffffffffffffffff errno=2 cover=1243 #0 [689282ms] -> mmap$usbmon(0x20ffb000, 0x3000, 0x0, 0x18812, 0xffffffffffffffff, 0x0) #0 [689282ms] <- mmap$usbmon=0xffffffffffffffff errno=9 cover=44 #0 [689282ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20ffd000, 0x200b0000, 0x20000180, 0x20002a40) #0 [689284ms] <- syz_io_uring_setup=0x3 errno=14 cover=8285 enabling collider #0 [689285ms] -> syz_open_dev$usbmon(0x20000040, 0x0, 0x0) #0 [689285ms] <- syz_open_dev$usbmon=0xffffffffffffffff errno=2 cover=1155 #0 [689287ms] -> mmap$usbmon(0x20ffb000, 0x3000, 0x0, 0x18812, 0xffffffffffffffff, 0x0) #0 [689287ms] <- mmap$usbmon=0xffffffffffffffff errno=9 cover=44 pthread_create failed (errno 11) 03:34:34 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x18812, r0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) 2033/05/18 03:34:34 result hanged=false: 2033/05/18 03:34:34 #0: triaging type=7 2033/05/18 03:34:34 triaging input for call #2 syz_io_uring_setup (new signal=2) [689341ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154507 #0 [689351ms] -> syz_open_dev$usbmon(0x20000040, 0x0, 0x0) #0 [689354ms] <- syz_open_dev$usbmon=0xffffffffffffffff errno=2 cover=1202 #0 [689356ms] -> mmap$usbmon(0x20ffb000, 0x3000, 0x0, 0x18812, 0xffffffffffffffff, 0x0) #0 [689358ms] <- mmap$usbmon=0xffffffffffffffff errno=9 cover=44 #0 [689358ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20ffd000, 0x200b0000, 0x20000180, 0x20002a40) #0 [689360ms] <- syz_io_uring_setup=0x3 errno=14 cover=8406 03:34:34 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x18812, r0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) 2033/05/18 03:34:34 result hanged=false: [689385ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154509 #0 [689397ms] -> syz_open_dev$usbmon(0x20000040, 0x0, 0x0) #0 [689397ms] <- syz_open_dev$usbmon=0xffffffffffffffff errno=2 cover=1201 #0 [689398ms] -> mmap$usbmon(0x20ffb000, 0x3000, 0x0, 0x18812, 0xffffffffffffffff, 0x0) #0 [689398ms] <- mmap$usbmon=0xffffffffffffffff errno=9 cover=44 #0 [689399ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20ffd000, 0x200b0000, 0x20000180, 0x20002a40) #0 [689402ms] <- syz_io_uring_setup=0x3 errno=14 cover=8400 2033/05/18 03:34:34 result hanged=false: 03:34:34 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x18812, r0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) [689424ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154511 #0 [689433ms] -> syz_open_dev$usbmon(0x20000040, 0x0, 0x0) #0 [689433ms] <- syz_open_dev$usbmon=0xffffffffffffffff errno=2 cover=1177 #0 [689434ms] -> mmap$usbmon(0x20ffb000, 0x3000, 0x0, 0x18812, 0xffffffffffffffff, 0x0) #0 [689434ms] <- mmap$usbmon=0xffffffffffffffff errno=9 cover=44 #0 [689435ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20ffd000, 0x200b0000, 0x20000180, 0x20002a40) #0 [689437ms] <- syz_io_uring_setup=0x3 errno=14 cover=7862 2033/05/18 03:34:34 result hanged=false: 2033/05/18 03:34:34 added new input for call #2 syz_io_uring_setup to corpus: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x18812, r0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) 03:34:34 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000100)=""/238) [689477ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154513 #0 [689485ms] -> shmctl$SHM_INFO(0x0, 0xe, 0x20000100) #0 [689485ms] <- shmctl$SHM_INFO=0x23 errno=14 cover=1758 enabling collider #0 [689486ms] -> shmctl$SHM_INFO(0x0, 0xe, 0x20000100) #0 [689486ms] <- shmctl$SHM_INFO=0x23 errno=14 cover=1067 03:34:34 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2033/05/18 03:34:34 result hanged=false: [689507ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154515 #0 [689519ms] -> syz_genetlink_get_family_id$nl80211(0x20000100, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [689521ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=13204 #0 [689522ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [689522ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1168 enabling collider #0 [689523ms] -> syz_genetlink_get_family_id$nl80211(0x20000100, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [689524ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11549 2033/05/18 03:34:34 result hanged=false: 03:34:34 executing program 0: execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', &(0x7f0000000700)=[&(0x7f0000000540)='.pending_reads\x00'], 0x0, 0x0) [689544ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154517 #0 [689553ms] -> execveat(0xffffffffffffffff, 0x20000500, 0x20000700, 0x0, 0x0) #0 [689554ms] <- execveat=0xffffffffffffffff errno=9 cover=6244 enabling collider #0 [689555ms] -> execveat(0xffffffffffffffff, 0x20000500, 0x20000700, 0x0, 0x0) #0 [689556ms] <- execveat=0xffffffffffffffff errno=9 cover=6535 03:34:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlink(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='./file0/file0\x00') syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000080)='./file0\x00', 0x2) 2033/05/18 03:34:35 result hanged=false: [689575ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154519 #0 [689584ms] -> syz_mount_image$ext4(0x0, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [689590ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12993 #0 [689591ms] -> inotify_init1(0x0) #0 [689591ms] <- inotify_init1=0x3 errno=14 cover=582 #0 [689591ms] -> inotify_add_watch(0x3, 0x20000040, 0x2000003) #0 [689591ms] <- inotify_add_watch=0x1 errno=14 cover=1054 #0 [689592ms] -> openat$dir(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [689592ms] <- openat$dir=0x4 errno=14 cover=1031 #0 [689592ms] -> symlink(0x20000940, 0x20000980) #0 [689592ms] <- symlink=0x0 errno=14 cover=6303 #0 [689592ms] -> syz_mount_image$vfat(0x0, 0x20000280, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [689593ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=11807 #0 [689594ms] -> renameat2(0xffffffffffffff9c, 0x20000040, 0x4, 0x20000080, 0x2) #0 [689595ms] <- renameat2=0x0 errno=14 cover=26909 enabling collider #0 [689598ms] -> syz_mount_image$ext4(0x0, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [689598ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1416 #0 [689599ms] -> inotify_init1(0x0) #0 [689599ms] <- inotify_init1=0x3 errno=14 cover=625 pthread_create failed (errno 11) 03:34:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlink(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='./file0/file0\x00') syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000080)='./file0\x00', 0x2) 2033/05/18 03:34:35 result hanged=false: 2033/05/18 03:34:35 #0: triaging type=7 2033/05/18 03:34:35 triaging input for call #6 renameat2 (new signal=1) [689651ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154621 #0 [689662ms] -> syz_mount_image$ext4(0x0, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [689663ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12119 #0 [689664ms] -> inotify_init1(0x0) #0 [689665ms] <- inotify_init1=0x3 errno=14 cover=582 #0 [689665ms] -> inotify_add_watch(0x3, 0x20000040, 0x2000003) #0 [689665ms] <- inotify_add_watch=0x1 errno=14 cover=999 #0 [689665ms] -> openat$dir(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [689665ms] <- openat$dir=0x4 errno=14 cover=1086 #0 [689665ms] -> symlink(0x20000940, 0x20000980) #0 [689666ms] <- symlink=0x0 errno=14 cover=6328 #0 [689667ms] -> syz_mount_image$vfat(0x0, 0x20000280, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [689668ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=12449 #0 [689669ms] -> renameat2(0xffffffffffffff9c, 0x20000040, 0x4, 0x20000080, 0x2) #0 [689669ms] <- renameat2=0x0 errno=14 cover=6601 03:34:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlink(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='./file0/file0\x00') syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000080)='./file0\x00', 0x2) 2033/05/18 03:34:35 result hanged=false: [689691ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154623 #0 [689702ms] -> syz_mount_image$ext4(0x0, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [689704ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12755 #0 [689706ms] -> inotify_init1(0x0) #0 [689706ms] <- inotify_init1=0x3 errno=14 cover=593 #0 [689707ms] -> inotify_add_watch(0x3, 0x20000040, 0x2000003) #0 [689709ms] <- inotify_add_watch=0x1 errno=14 cover=1022 #0 [689711ms] -> openat$dir(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [689711ms] <- openat$dir=0x4 errno=14 cover=1122 #0 [689712ms] -> symlink(0x20000940, 0x20000980) #0 [689713ms] <- symlink=0x0 errno=14 cover=6342 #0 [689714ms] -> syz_mount_image$vfat(0x0, 0x20000280, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [689716ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=11952 #0 [689717ms] -> renameat2(0xffffffffffffff9c, 0x20000040, 0x4, 0x20000080, 0x2) #0 [689718ms] <- renameat2=0x0 errno=14 cover=6627 2033/05/18 03:34:35 result hanged=false: 03:34:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlink(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='./file0/file0\x00') syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000080)='./file0\x00', 0x2) [689744ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154625 #0 [689754ms] -> syz_mount_image$ext4(0x0, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [689760ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12129 #0 [689761ms] -> inotify_init1(0x0) #0 [689761ms] <- inotify_init1=0x3 errno=14 cover=604 #0 [689761ms] -> inotify_add_watch(0x3, 0x20000040, 0x2000003) #0 [689762ms] <- inotify_add_watch=0x1 errno=14 cover=989 #0 [689762ms] -> openat$dir(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [689762ms] <- openat$dir=0x4 errno=14 cover=1043 #0 [689762ms] -> symlink(0x20000940, 0x20000980) #0 [689763ms] <- symlink=0x0 errno=14 cover=6283 #0 [689763ms] -> syz_mount_image$vfat(0x0, 0x20000280, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [689764ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=12515 #0 [689765ms] -> renameat2(0xffffffffffffff9c, 0x20000040, 0x4, 0x20000080, 0x2) #0 [689766ms] <- renameat2=0x0 errno=14 cover=6600 2033/05/18 03:34:35 result hanged=false: 2033/05/18 03:34:35 added new input for call #6 renameat2 to corpus: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlink(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='./file0/file0\x00') syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000080)='./file0\x00', 0x2) 2033/05/18 03:34:35 #0: triaging type=7 2033/05/18 03:34:35 triaging input for call #4 symlink (new signal=1) 03:34:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlink(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='./file0/file0\x00') syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000080)='./file0\x00', 0x2) [689794ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154627 #0 [689802ms] -> syz_mount_image$ext4(0x0, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [689807ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13399 #0 [689810ms] -> inotify_init1(0x0) #0 [689810ms] <- inotify_init1=0x3 errno=14 cover=596 #0 [689811ms] -> inotify_add_watch(0x3, 0x20000040, 0x2000003) #0 [689811ms] <- inotify_add_watch=0x1 errno=14 cover=1013 #0 [689813ms] -> openat$dir(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [689813ms] <- openat$dir=0x4 errno=14 cover=1099 #0 [689814ms] -> symlink(0x20000940, 0x20000980) #0 [689815ms] <- symlink=0x0 errno=14 cover=6313 #0 [689816ms] -> syz_mount_image$vfat(0x0, 0x20000280, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [689817ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=11942 #0 [689819ms] -> renameat2(0xffffffffffffff9c, 0x20000040, 0x4, 0x20000080, 0x2) #0 [689820ms] <- renameat2=0x0 errno=14 cover=6595 03:34:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlink(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='./file0/file0\x00') syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000080)='./file0\x00', 0x2) 2033/05/18 03:34:35 result hanged=false: [689846ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154629 #0 [689856ms] -> syz_mount_image$ext4(0x0, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [689860ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12778 #0 [689861ms] -> inotify_init1(0x0) #0 [689861ms] <- inotify_init1=0x3 errno=14 cover=593 #0 [689861ms] -> inotify_add_watch(0x3, 0x20000040, 0x2000003) #0 [689862ms] <- inotify_add_watch=0x1 errno=14 cover=988 #0 [689862ms] -> openat$dir(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [689862ms] <- openat$dir=0x4 errno=14 cover=1054 #0 [689862ms] -> symlink(0x20000940, 0x20000980) #0 [689863ms] <- symlink=0x0 errno=14 cover=6305 #0 [689863ms] -> syz_mount_image$vfat(0x0, 0x20000280, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [689864ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=12484 #0 [689865ms] -> renameat2(0xffffffffffffff9c, 0x20000040, 0x4, 0x20000080, 0x2) #0 [689865ms] <- renameat2=0x0 errno=14 cover=6625 03:34:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlink(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='./file0/file0\x00') syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000080)='./file0\x00', 0x2) 2033/05/18 03:34:35 result hanged=false: [689887ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154631 #0 [689899ms] -> syz_mount_image$ext4(0x0, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [689901ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12829 #0 [689903ms] -> inotify_init1(0x0) #0 [689903ms] <- inotify_init1=0x3 errno=14 cover=607 #0 [689903ms] -> inotify_add_watch(0x3, 0x20000040, 0x2000003) #0 [689904ms] <- inotify_add_watch=0x1 errno=14 cover=1036 #0 [689904ms] -> openat$dir(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [689905ms] <- openat$dir=0x4 errno=14 cover=1043 #0 [689905ms] -> symlink(0x20000940, 0x20000980) #0 [689907ms] <- symlink=0x0 errno=14 cover=6300 #0 [689908ms] -> syz_mount_image$vfat(0x0, 0x20000280, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [689909ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=11923 #0 [689910ms] -> renameat2(0xffffffffffffff9c, 0x20000040, 0x4, 0x20000080, 0x2) #0 [689911ms] <- renameat2=0x0 errno=14 cover=8382 2033/05/18 03:34:35 result hanged=false: 2033/05/18 03:34:35 added new input for call #4 symlink to corpus: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlink(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='./file0/file0\x00') syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000080)='./file0\x00', 0x2) 03:34:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) [689941ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154633 #0 [689951ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [689958ms] <- perf_event_open=0x3 errno=14 cover=10696 #0 [689960ms] -> creat(0x20000000, 0x0) #0 [689960ms] <- creat=0x4 errno=14 cover=6682 #0 [689961ms] -> fcntl$setlease(0x4, 0x400, 0x0) #0 [689961ms] <- fcntl$setlease=0xffffffffffffffff errno=11 cover=553 #0 [689961ms] -> fcntl$setlease(0x4, 0x400, 0x2) #0 [689961ms] <- fcntl$setlease=0xffffffffffffffff errno=11 cover=126 enabling collider #0 [689972ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [689973ms] <- perf_event_open=0x3 errno=14 cover=8990 #0 [689974ms] -> creat(0x20000000, 0x0) #0 [689974ms] <- creat=0x4 errno=14 cover=4953 pthread_create failed (errno 11) 03:34:35 executing program 0: sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x8000) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x40040) syz_io_uring_setup(0x3153, &(0x7f0000000a40)={0x0, 0x8113, 0x8, 0x0, 0x362}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x880) 2033/05/18 03:34:35 result hanged=false: [690042ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154735 #0 [690052ms] -> sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x8000) #0 [690052ms] <- sendmsg$NLBL_CALIPSO_C_ADD=0xffffffffffffffff errno=9 cover=52 #0 [690053ms] -> sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x20000200, 0x0) #0 [690053ms] <- sendmsg$TIPC_CMD_GET_MEDIA_NAMES=0xffffffffffffffff errno=9 cover=52 #0 [690054ms] -> syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [690058ms] <- syz_genetlink_get_family_id$nbd=0xffffffffffffffff errno=14 cover=3386 #0 [690059ms] -> syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [690060ms] <- syz_genetlink_get_family_id$netlbl_calipso=0xffffffffffffffff errno=14 cover=2456 #0 [690060ms] -> sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x40040) #0 [690061ms] <- sendmsg$TIPC_CMD_SET_LINK_WINDOW=0xffffffffffffffff errno=9 cover=52 #0 [690061ms] -> syz_io_uring_setup(0x3153, 0x20000a40, 0x20ffd000, 0x20ffe000, 0x20000ac0, 0x20000b00) #0 [690063ms] <- syz_io_uring_setup=0x5 errno=14 cover=18482 #0 [690063ms] -> sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x20000d40, 0x880) #0 [690063ms] <- sendmsg$TIPC_CMD_GET_LINKS=0xffffffffffffffff errno=9 cover=52 enabling collider #0 [690064ms] -> sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x8000) #0 [690064ms] <- sendmsg$NLBL_CALIPSO_C_ADD=0xffffffffffffffff errno=9 cover=52 #0 [690064ms] -> sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x20000200, 0x0) #0 [690064ms] <- sendmsg$TIPC_CMD_GET_MEDIA_NAMES=0xffffffffffffffff errno=9 cover=52 pthread_create failed (errno 11) 2033/05/18 03:34:35 result hanged=false: 03:34:35 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000001540)="a18be128f68286f2c52ca09c6cb9ee808869e2b1344d5a838a401297e85928d6abcc24198b34ad428fc01b13d885a391b10d82a154f144bc1612653aea1ad8da4338211f4a5f18f1d93bd27e181d16b13b6ba26eeab1a7bf36c415fa5a2041adad58157add98c6355d31bc36416a0b2884af9cd436d585c4c4e641044ce37c765e09f636ede2e2701b50356cdad9a14e", 0x90) 2033/05/18 03:34:35 poll: candidates=8 inputs=0 signal=0 [690120ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154837 #0 [690128ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [690132ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1679 #0 [690133ms] -> setsockopt$inet6_buf(0x3, 0x29, 0x30, 0x20001540, 0x90) #0 [690133ms] <- setsockopt$inet6_buf=0xffffffffffffffff errno=105 cover=373 enabling collider #0 [690134ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [690135ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1707 #0 [690136ms] -> setsockopt$inet6_buf(0x3, 0x29, 0x30, 0x20001540, 0x90) #0 [690136ms] <- setsockopt$inet6_buf=0xffffffffffffffff errno=9 cover=51 03:34:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=0x0, @ANYBLOB="200006"], 0x3c}}, 0x0) 2033/05/18 03:34:35 result hanged=false: [690155ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154839 #0 [690165ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [690165ms] <- socket$nl_generic=0x3 errno=14 cover=1434 #0 [690166ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [690168ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12131 [ 1440.145860] netlink: 'syz-executor.0': attribute type 11 has an invalid length. #0 [690169ms] -> sendmsg$NL80211_CMD_SET_TID_CONFIG(0x3, 0x20000200, 0x0) #0 [690171ms] <- sendmsg$NL80211_CMD_SET_TID_CONFIG=0x3c errno=14 cover=3671 enabling collider #0 [690173ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [690173ms] <- socket$nl_generic=0x3 errno=14 cover=1476 #0 [690173ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [690175ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11556 pthread_create failed (errno 11) 2033/05/18 03:34:35 result hanged=false: 03:34:35 executing program 0: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f00000001c0)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) r1 = semget$private(0x0, 0x3, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) [690225ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 154941 #0 [690235ms] -> semget$private(0x0, 0x4, 0x0) #0 [690238ms] <- semget$private=0x1c errno=14 cover=366 #0 [690240ms] -> semtimedop(0x1c, 0x200001c0, 0x1, 0x0) #0 [690241ms] <- semtimedop=0x0 errno=14 cover=389 #0 [690242ms] -> semget$private(0x0, 0x3, 0x0) #0 [690242ms] <- semget$private=0x1d errno=14 cover=354 #0 [690242ms] -> semtimedop(0x1d, 0x20000000, 0x1, 0x0) #0 [690243ms] <- semtimedop=0x0 errno=14 cover=379 #0 [690243ms] -> semtimedop(0x0, 0x20000000, 0x1, 0x0) enabling collider pthread_create failed (errno 11) 03:34:36 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000000)=0x1, 0x4) 2033/05/18 03:34:36 result hanged=false: [691401ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 155043 #0 [691410ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [691414ms] <- socket$inet6_udplite=0x3 errno=14 cover=1624 #0 [691415ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x68, 0x20000000, 0x4) #0 [691417ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=1604 enabling collider #0 [691418ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [691418ms] <- socket$inet6_udplite=0x3 errno=14 cover=1634 #0 [691419ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x68, 0x20000000, 0x4) #0 [691419ms] <- setsockopt$inet6_udp_int=0xffffffffffffffff errno=9 cover=51 03:34:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000040)={[{@fat=@showexec}]}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 2033/05/18 03:34:36 result hanged=false: [691441ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 155045 #0 [691451ms] -> syz_open_procfs(0x0, 0x20000000) #0 [691452ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2435 #0 [691453ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000040) #0 [691454ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=4693 #0 [691454ms] -> readv(0xffffffffffffffff, 0x20001600, 0x1) #0 [691455ms] <- readv=0xffffffffffffffff errno=9 cover=47 enabling collider #0 [691455ms] -> syz_open_procfs(0x0, 0x20000000) #0 [691456ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2394 #0 [691456ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000040) #0 [691459ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=4934 pthread_create failed (errno 11) 2033/05/18 03:34:36 result hanged=false: 03:34:36 executing program 0: msgsnd(0x0, 0xfffffffffffffffe, 0x0, 0x0) [691510ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 155147 #0 [691521ms] -> msgsnd(0x0, 0x9999999999999999, 0x0, 0x0) #0 [691521ms] <- msgsnd=0xffffffffffffffff errno=14 cover=39 enabling collider #0 [691522ms] -> msgsnd(0x0, 0x9999999999999999, 0x0, 0x0) #0 [691522ms] <- msgsnd=0xffffffffffffffff errno=14 cover=39 2033/05/18 03:34:36 result hanged=false: 03:34:36 executing program 0: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fstat(r0, &(0x7f0000000080)) [691543ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 155149 #0 [691554ms] -> openat$thread_pidfd(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [691558ms] <- openat$thread_pidfd=0xffffffffffffffff errno=2 cover=1181 #0 [691558ms] -> fstat(0xffffffffffffffff, 0x20000080) #0 [691558ms] <- fstat=0xffffffffffffffff errno=9 cover=48 enabling collider #0 [691558ms] -> openat$thread_pidfd(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [691559ms] <- openat$thread_pidfd=0xffffffffffffffff errno=2 cover=1158 03:34:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() sendmsg$unix(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0) 2033/05/18 03:34:37 result hanged=false: [691578ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 155151 #0 [691589ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20001680) #0 [691594ms] <- socketpair$unix=0x0 errno=14 cover=3584 #0 [691595ms] -> gettid() #0 [691595ms] <- gettid=0x25e10 errno=14 cover=48 #0 [691596ms] -> sendmsg$unix(0x4, 0x20001d00, 0x0) #0 [691597ms] <- sendmsg$unix=0x0 errno=14 cover=805 enabling collider #0 [691597ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20001680) #0 [691597ms] <- socketpair$unix=0x0 errno=14 cover=2847 #0 [691598ms] -> gettid() #0 [691598ms] <- gettid=0x25e10 errno=14 cover=48 pthread_create failed (errno 11) 03:34:37 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "1c00000000000000000000f1ffffff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)=0x1) 2033/05/18 03:34:37 result hanged=false: 2033/05/18 03:34:37 poll: candidates=8 inputs=0 signal=0 [691654ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 155253 #0 [691662ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [691667ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [691667ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [691668ms] <- openat$tun=0xffffffffffffffff errno=2 cover=1166 #0 [691668ms] -> ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, 0x20000000) #0 [691668ms] <- ioctl$TUNSETQUEUE=0xffffffffffffffff errno=9 cover=45 #0 [691669ms] -> io_uring_setup(0x0, 0x200001c0) #0 [691669ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=53 #0 [691670ms] -> ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x20000040) #0 [691670ms] <- ioctl$TUNSETCARRIER=0xffffffffffffffff errno=9 cover=45 #0 [691670ms] -> socket$inet(0x2, 0xa, 0x0) #0 [691671ms] <- socket$inet=0x3 errno=14 cover=1745 #0 [691671ms] -> ioctl$sock_inet_SIOCGIFNETMASK(0x3, 0x8914, 0x200001c0) #0 [691699ms] <- ioctl$sock_inet_SIOCGIFNETMASK=0xffffffffffffffff errno=19 cover=2001 #0 [691699ms] -> ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x20000080) #0 [691699ms] <- ioctl$TUNSETCARRIER=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [691701ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [691702ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [691702ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [691702ms] <- openat$tun=0xffffffffffffffff errno=2 cover=1177 pthread_create failed (errno 11) 2033/05/18 03:34:37 result hanged=false: 03:34:37 executing program 0: pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x0, r1) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) [691754ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 155355 #0 [691763ms] -> pipe2(0x20000480, 0x0) #0 [691764ms] <- pipe2=0x0 errno=14 cover=1931 #0 [691764ms] -> close_range(0x4, 0xffffffffffffffff, 0x0) #0 [691765ms] <- close_range=0x0 errno=14 cover=2139 #0 [691765ms] -> fcntl$dupfd(0x3, 0x0, 0x4) #0 [691765ms] <- fcntl$dupfd=0x4 errno=14 cover=110 #0 [691765ms] -> ppoll(0x20000000, 0x1, 0x0, 0x0, 0x0) #0 [691765ms] <- ppoll=0x1 errno=14 cover=168 enabling collider #0 [691765ms] -> pipe2(0x20000480, 0x0) #0 [691765ms] <- pipe2=0x0 errno=14 cover=1135 #0 [691766ms] -> close_range(0x4, 0xffffffffffffffff, 0x0) #0 [691766ms] <- close_range=0x0 errno=14 cover=1849 pthread_create failed (errno 11) 03:34:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x0) 2033/05/18 03:34:37 result hanged=false: [691818ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 155457 #0 [691827ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [691831ms] <- perf_event_open=0x3 errno=14 cover=10539 #0 [691831ms] -> ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) #0 [691831ms] <- ioctl$sock_SIOCETHTOOL=0xffffffffffffffff errno=9 cover=74 #0 [691832ms] -> openat(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [691832ms] <- openat=0xffffffffffffffff errno=2 cover=1218 #0 [691832ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [691832ms] <- socket$inet6_tcp=0x4 errno=14 cover=1737 #0 [691833ms] -> bind$inet6(0x4, 0x200000c0, 0x1c) #0 [691833ms] <- bind$inet6=0x0 errno=14 cover=481 #0 [691833ms] -> connect$inet6(0x4, 0x20000000, 0x1c) #0 [691834ms] <- connect$inet6=0x0 errno=14 cover=5862 #0 [691834ms] -> sendfile(0x4, 0xffffffffffffffff, 0x0, 0x0) #0 [691834ms] <- sendfile=0xffffffffffffffff errno=9 cover=77 enabling collider #0 [691848ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [691848ms] <- perf_event_open=0x3 errno=14 cover=9527 #0 [691849ms] -> ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) #0 [691849ms] <- ioctl$sock_SIOCETHTOOL=0xffffffffffffffff errno=9 cover=74 pthread_create failed (errno 11) 2033/05/18 03:34:37 result hanged=false: 03:34:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x2c}}, 0x0) iptable filter/10: resetting iptable mangle/10: resetting [691918ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 155559 #0 [691928ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [691928ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1215 #0 [691929ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [691929ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1226 #0 [691929ms] -> syz_genetlink_get_family_id$netlbl_cipso(0x200000c0, 0xffffffffffffffff) syz_genetlink_get_family_id(NLBL_CIPSOv4, -1) netlink: failed to get family id for NLBL_CIPSOv4: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [691930ms] <- syz_genetlink_get_family_id$netlbl_cipso=0xffffffffffffffff errno=2 cover=7688 #0 [691930ms] -> sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x20000480, 0x0) #0 [691930ms] <- sendmsg$NLBL_CIPSOV4_C_ADD=0xffffffffffffffff errno=9 cover=52 enabling collider #0 [691930ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [691931ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1179 #0 [691931ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [691931ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1171 pthread_create failed (errno 11) 03:34:37 executing program 0: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000003c0)='b', 0x1, r0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000380)=@chain) keyctl$link(0x8, r1, r2) 2033/05/18 03:34:37 result hanged=false: [691983ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 155661 #0 [691992ms] -> add_key$keyring(0x20000080, 0x200000c0, 0x0, 0x0, 0xfffffffffffffffc) #0 [691994ms] <- add_key$keyring=0x3bfbc5fc errno=14 cover=1889 #0 [691995ms] -> add_key$user(0x20000200, 0x20000240, 0x200003c0, 0x1, 0x3bfbc5fc) #0 [691995ms] <- add_key$user=0x200c883 errno=14 cover=1983 #0 [691995ms] -> add_key$keyring(0x20000040, 0x200002c0, 0x0, 0x0, 0xfffffffffffffffd) #0 [691995ms] <- add_key$keyring=0x2214ecd errno=14 cover=1131 #0 [691995ms] -> keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x2214ecd, 0x20000000, 0x20000380) #0 [691996ms] <- keyctl$KEYCTL_RESTRICT_KEYRING=0x0 errno=14 cover=1033 #0 [691996ms] -> keyctl$link(0x8, 0x200c883, 0x2214ecd) #0 [691996ms] <- keyctl$link=0xffffffffffffffff errno=95 cover=1614 enabling collider #0 [691996ms] -> add_key$keyring(0x20000080, 0x200000c0, 0x0, 0x0, 0xfffffffffffffffc) #0 [691996ms] <- add_key$keyring=0x35747f77 errno=14 cover=1718 #0 [691997ms] -> add_key$user(0x20000200, 0x20000240, 0x200003c0, 0x1, 0x35747f77) #0 [691997ms] <- add_key$user=0xb3a1abf errno=14 cover=1902 pthread_create failed (errno 11) 03:34:37 executing program 0: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000003c0)='b', 0x1, r0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000380)=@chain) keyctl$link(0x8, r1, r2) 2033/05/18 03:34:37 result hanged=false: 2033/05/18 03:34:37 #0: triaging type=7 2033/05/18 03:34:37 triaging input for call #3 keyctl$KEYCTL_RESTRICT_KEYRING (new signal=1) [692049ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 155763 #0 [692059ms] -> add_key$keyring(0x20000080, 0x200000c0, 0x0, 0x0, 0xfffffffffffffffc) #0 [692060ms] <- add_key$keyring=0x29a7f26a errno=14 cover=2305 #0 [692061ms] -> add_key$user(0x20000200, 0x20000240, 0x200003c0, 0x1, 0x29a7f26a) #0 [692061ms] <- add_key$user=0x913a740 errno=14 cover=1963 #0 [692062ms] -> add_key$keyring(0x20000040, 0x200002c0, 0x0, 0x0, 0xfffffffffffffffd) #0 [692063ms] <- add_key$keyring=0x33cc7a0 errno=14 cover=1218 #0 [692063ms] -> keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x33cc7a0, 0x20000000, 0x20000380) #0 [692064ms] <- keyctl$KEYCTL_RESTRICT_KEYRING=0x0 errno=14 cover=1065 #0 [692065ms] -> keyctl$link(0x8, 0x913a740, 0x33cc7a0) #0 [692066ms] <- keyctl$link=0xffffffffffffffff errno=95 cover=1618 03:34:37 executing program 0: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000003c0)='b', 0x1, r0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000380)=@chain) keyctl$link(0x8, r1, r2) 2033/05/18 03:34:37 result hanged=false: [692084ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 155765 #0 [692096ms] -> add_key$keyring(0x20000080, 0x200000c0, 0x0, 0x0, 0xfffffffffffffffc) #0 [692100ms] <- add_key$keyring=0x39394f17 errno=14 cover=1729 #0 [692102ms] -> add_key$user(0x20000200, 0x20000240, 0x200003c0, 0x1, 0x39394f17) #0 [692104ms] <- add_key$user=0x1c80783d errno=14 cover=1883 #0 [692104ms] -> add_key$keyring(0x20000040, 0x200002c0, 0x0, 0x0, 0xfffffffffffffffd) #0 [692105ms] <- add_key$keyring=0x1c382c7a errno=14 cover=1135 #0 [692105ms] -> keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x1c382c7a, 0x20000000, 0x20000380) #0 [692106ms] <- keyctl$KEYCTL_RESTRICT_KEYRING=0x0 errno=14 cover=1045 #0 [692107ms] -> keyctl$link(0x8, 0x1c80783d, 0x1c382c7a) #0 [692107ms] <- keyctl$link=0xffffffffffffffff errno=95 cover=1624 2033/05/18 03:34:37 result hanged=false: 03:34:37 executing program 0: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000003c0)='b', 0x1, r0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000380)=@chain) keyctl$link(0x8, r1, r2) [692128ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 155767 #0 [692137ms] -> add_key$keyring(0x20000080, 0x200000c0, 0x0, 0x0, 0xfffffffffffffffc) #0 [692137ms] <- add_key$keyring=0x1a3955f1 errno=14 cover=2102 #0 [692139ms] -> add_key$user(0x20000200, 0x20000240, 0x200003c0, 0x1, 0x1a3955f1) #0 [692139ms] <- add_key$user=0x3e07a3d errno=14 cover=2009 #0 [692140ms] -> add_key$keyring(0x20000040, 0x200002c0, 0x0, 0x0, 0xfffffffffffffffd) #0 [692140ms] <- add_key$keyring=0xecc3e8c errno=14 cover=1127 #0 [692140ms] -> keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0xecc3e8c, 0x20000000, 0x20000380) #0 [692140ms] <- keyctl$KEYCTL_RESTRICT_KEYRING=0x0 errno=14 cover=1045 #0 [692140ms] -> keyctl$link(0x8, 0x3e07a3d, 0xecc3e8c) #0 [692141ms] <- keyctl$link=0xffffffffffffffff errno=95 cover=1596 2033/05/18 03:34:37 result hanged=false: 2033/05/18 03:34:37 added new input for call #3 keyctl$KEYCTL_RESTRICT_KEYRING to corpus: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000003c0)='b', 0x1, r0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000380)=@chain) keyctl$link(0x8, r1, r2) 03:34:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a00010077706181b48f"], 0x20}}, 0x0) [692164ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 155769 #0 [692172ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [692176ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1169 #0 [692178ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [692179ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1168 #0 [692179ms] -> syz_genetlink_get_family_id$ieee802154(0x200002c0, 0xffffffffffffffff) syz_genetlink_get_family_id(802.15.4 MAC, -1) netlink: failed to get family id for 802.15.4 MAC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [692180ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=2 cover=7807 #0 [692180ms] -> sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, 0x20000200, 0x0) #0 [692180ms] <- sendmsg$IEEE802154_LLSEC_DEL_KEY=0xffffffffffffffff errno=9 cover=52 enabling collider #0 [692180ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [692181ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1190 #0 [692181ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [692181ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1168 pthread_create failed (errno 11) 03:34:37 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) listen(r0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 2033/05/18 03:34:37 result hanged=false: [692235ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 155871 #0 [692246ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [692248ms] <- syz_init_net_socket$bt_sco=0xffffffffffffffff errno=2 cover=1170 #0 [692248ms] -> bind$bt_sco(0xffffffffffffffff, 0x20000040, 0x8) #0 [692248ms] <- bind$bt_sco=0xffffffffffffffff errno=9 cover=48 #0 [692249ms] -> listen(0xffffffffffffffff, 0x0) #0 [692249ms] <- listen=0xffffffffffffffff errno=9 cover=48 #0 [692249ms] -> ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) #0 [692249ms] <- ioctl$sock_TIOCINQ=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [692249ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [692249ms] <- syz_init_net_socket$bt_sco=0xffffffffffffffff errno=2 cover=1158 #0 [692250ms] -> bind$bt_sco(0xffffffffffffffff, 0x20000040, 0x8) #0 [692250ms] <- bind$bt_sco=0xffffffffffffffff errno=9 cover=48 pthread_create failed (errno 11) 03:34:37 executing program 0: pwritev2(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000040)="85ac7b310e63365ee9c41960ed6f1b84e9ade9f4ce8fde4398c8486249ff029336eb7e4b2ff729cf641b11877afc564e2d69732388f53a8b67d3e0fbff8d630b73f98a92b00e59515a35f7a69b2faef4661afa4e7b5b90b8c013300b242bd4879317db63084ba69c1e0494e8fa1bacb39f2a3da28c672573e856fe9e4ff3fbffd9cee987c269bf579d4e4c0d56578f3bb2", 0x91}], 0x1, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f00000000c0)={'erspan0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x1, 0x1, [@link_local]}) 2033/05/18 03:34:37 result hanged=false: [692302ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 155973 #0 [692312ms] -> pwritev2(0xffffffffffffffff, 0x20000400, 0x1, 0x0, 0x0, 0x0) #0 [692314ms] <- pwritev2=0xffffffffffffffff errno=9 cover=50 #0 [692314ms] -> openat$tun(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [692314ms] <- openat$tun=0xffffffffffffffff errno=2 cover=1155 #0 [692314ms] -> ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, 0x200000c0) #0 [692314ms] <- ioctl$TUNSETQUEUE=0xffffffffffffffff errno=9 cover=45 #0 [692314ms] -> ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x20000000) #0 [692314ms] <- ioctl$TUNSETTXFILTER=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [692315ms] -> pwritev2(0xffffffffffffffff, 0x20000400, 0x1, 0x0, 0x0, 0x0) #0 [692315ms] <- pwritev2=0xffffffffffffffff errno=9 cover=50 #0 [692315ms] -> openat$tun(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [692315ms] <- openat$tun=0xffffffffffffffff errno=2 cover=1169 pthread_create failed (errno 11) 2033/05/18 03:34:37 result hanged=false: 03:34:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x30, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xc2000258) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2033/05/18 03:34:37 poll: candidates=8 inputs=0 signal=0 [692366ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 156075 #0 [692375ms] -> syz_mount_image$ext4(0x0, 0x200002c0, 0x0, 0x30, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [692381ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12348 #0 [692382ms] -> mount(0x0, 0x20000100, 0x200000c0, 0x0, 0x0) #0 [692387ms] <- mount=0x0 errno=14 cover=13359 #0 [692388ms] -> inotify_init1(0x0) #0 [692388ms] <- inotify_init1=0x3 errno=14 cover=582 #0 [692390ms] -> inotify_add_watch(0x3, 0x20000080, 0xc2000258) #0 [692390ms] <- inotify_add_watch=0x1 errno=14 cover=1112 #0 [692391ms] -> umount2(0x20000040, 0x0) #0 [692393ms] <- umount2=0x0 errno=14 cover=12024 enabling collider #0 [692394ms] -> syz_mount_image$ext4(0x0, 0x200002c0, 0x0, 0x30, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [692394ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1364 #0 [692395ms] -> mount(0x0, 0x20000100, 0x200000c0, 0x0, 0x0) #0 [692397ms] <- mount=0x0 errno=14 cover=13647 pthread_create failed (errno 11) 03:34:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x30, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xc2000258) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2033/05/18 03:34:37 result hanged=false: 2033/05/18 03:34:37 #0: triaging type=7 2033/05/18 03:34:37 triaging input for call #0 syz_mount_image$ext4 (new signal=1) umount(./5283/file0) [692452ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 156177 #0 [692461ms] -> syz_mount_image$ext4(0x0, 0x200002c0, 0x0, 0x30, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [692467ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12299 #0 [692469ms] -> mount(0x0, 0x20000100, 0x200000c0, 0x0, 0x0) #0 [692473ms] <- mount=0x0 errno=14 cover=13410 #0 [692474ms] -> inotify_init1(0x0) #0 [692474ms] <- inotify_init1=0x3 errno=14 cover=593 #0 [692474ms] -> inotify_add_watch(0x3, 0x20000080, 0xc2000258) #0 [692475ms] <- inotify_add_watch=0x1 errno=14 cover=1137 #0 [692475ms] -> umount2(0x20000040, 0x0) #0 [692478ms] <- umount2=0x0 errno=14 cover=12967 03:34:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x30, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xc2000258) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2033/05/18 03:34:37 result hanged=false: [692500ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 156179 #0 [692511ms] -> syz_mount_image$ext4(0x0, 0x200002c0, 0x0, 0x30, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [692513ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12028 #0 [692514ms] -> mount(0x0, 0x20000100, 0x200000c0, 0x0, 0x0) #0 [692517ms] <- mount=0x0 errno=14 cover=13320 #0 [692518ms] -> inotify_init1(0x0) #0 [692518ms] <- inotify_init1=0x3 errno=14 cover=604 #0 [692518ms] -> inotify_add_watch(0x3, 0x20000080, 0xc2000258) #0 [692518ms] <- inotify_add_watch=0x1 errno=14 cover=1135 #0 [692518ms] -> umount2(0x20000040, 0x0) #0 [692520ms] <- umount2=0x0 errno=14 cover=12039 03:34:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x30, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xc2000258) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2033/05/18 03:34:37 result hanged=false: [692541ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 156181 #0 [692550ms] -> syz_mount_image$ext4(0x0, 0x200002c0, 0x0, 0x30, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [692553ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12127 #0 [692554ms] -> mount(0x0, 0x20000100, 0x200000c0, 0x0, 0x0) #0 [692557ms] <- mount=0x0 errno=14 cover=13439 #0 [692558ms] -> inotify_init1(0x0) #0 [692558ms] <- inotify_init1=0x3 errno=14 cover=615 #0 [692558ms] -> inotify_add_watch(0x3, 0x20000080, 0xc2000258) #0 [692558ms] <- inotify_add_watch=0x1 errno=14 cover=1135 #0 [692558ms] -> umount2(0x20000040, 0x0) #0 [692560ms] <- umount2=0x0 errno=14 cover=12108 2033/05/18 03:34:38 result hanged=false: 2033/05/18 03:34:38 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x30, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xc2000258) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 03:34:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000004880), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f00000048c0)) [692600ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 156183 #0 [692608ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [692608ms] <- perf_event_open=0x3 errno=14 cover=9690 #0 [692609ms] -> openat$ptp0(0xffffffffffffff9c, 0x20004880, 0x0, 0x0) #0 [692610ms] <- openat$ptp0=0xffffffffffffffff errno=2 cover=3775 #0 [692610ms] -> ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, 0x200048c0) #0 [692611ms] <- ioctl$PTP_SYS_OFFSET=0xffffffffffffffff errno=9 cover=74 enabling collider #0 [692619ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [692620ms] <- perf_event_open=0x3 errno=14 cover=9484 #0 [692620ms] -> openat$ptp0(0xffffffffffffff9c, 0x20004880, 0x0, 0x0) #0 [692621ms] <- openat$ptp0=0xffffffffffffffff errno=2 cover=3746 pthread_create failed (errno 11) 2033/05/18 03:34:38 result hanged=false: 03:34:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x6d, 0x14, {{'cmac(aes)\x00'}, 0x108, 0x0, "7e09fa46d39b80e9af051ee514b610594ec721a5a6ddff6c4f88d02956ae753d38"}}]}, 0x160}}, 0x0) [692687ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 156285 #0 [692695ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [692696ms] <- socket$nl_xfrm=0x3 errno=14 cover=1400 #0 [692697ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) #0 [692697ms] <- sendmsg$nl_xfrm=0x160 errno=14 cover=2806 enabling collider #0 [692698ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [692698ms] <- socket$nl_xfrm=0x3 errno=14 cover=1407 03:34:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000a80)={'raw\x00', 0x4, "78505fec"}, &(0x7f0000000b00)=0x28) 2033/05/18 03:34:38 result hanged=false: [692720ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 156287 #0 [692729ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [692730ms] <- socket$inet6_udp=0x3 errno=14 cover=1684 #0 [692731ms] -> getsockopt$IP6T_SO_GET_ENTRIES(0x3, 0x29, 0x41, 0x20000a80, 0x20000b00) #0 [692731ms] <- getsockopt$IP6T_SO_GET_ENTRIES=0xffffffffffffffff errno=22 cover=176 enabling collider #0 [692731ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [692732ms] <- socket$inet6_udp=0x3 errno=14 cover=1719 03:34:38 executing program 0: stat(&(0x7f00000000c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2033/05/18 03:34:38 result hanged=false: [692755ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 156289 #0 [692764ms] -> stat(0x200000c0, 0x20001c00) #0 [692768ms] <- stat=0x0 errno=14 cover=804 #0 [692770ms] -> setresuid(0xffffffffffffffff, 0x41ed, 0x0) #0 [692771ms] <- setresuid=0x0 errno=14 cover=401 #0 [692772ms] -> perf_event_open$cgroup(0x20000140, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [692772ms] <- perf_event_open$cgroup=0xffffffffffffffff errno=13 cover=1232 enabling collider #0 [692774ms] -> stat(0x200000c0, 0x20001c00) #0 [692774ms] <- stat=0x0 errno=14 cover=542 #0 [692774ms] -> setresuid(0xffffffffffffffff, 0x41ed, 0x0) #0 [692774ms] <- setresuid=0x0 errno=14 cover=436 2033/05/18 03:34:38 poll: candidates=0 inputs=0 signal=0 pthread_create failed (errno 11) 03:34:38 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)=0x1000) 2033/05/18 03:34:38 result hanged=false: [692826ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 156391 #0 [692837ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [692841ms] <- mknod$loop=0x0 errno=14 cover=5817 #0 [692842ms] -> creat(0x20000080, 0x0) #0 [692842ms] <- creat=0x3 errno=14 cover=1278 #0 [692843ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [692848ms] <- perf_event_open=0x4 errno=14 cover=11926 #0 [692848ms] -> ioctl$BLKBSZSET(0x3, 0x40081271, 0x20000100) #0 [692848ms] <- ioctl$BLKBSZSET=0x0 errno=14 cover=329 enabling collider #0 [692862ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [692862ms] <- mknod$loop=0xffffffffffffffff errno=17 cover=574 #0 [692863ms] -> creat(0x20000080, 0x0) #0 [692863ms] <- creat=0xffffffffffffffff errno=2 cover=287 pthread_create failed (errno 11) 03:34:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000180)) 2033/05/18 03:34:38 result hanged=false: [692916ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 156493 #0 [692925ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [692928ms] <- perf_event_open=0x3 errno=14 cover=9683 #0 [692929ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [692930ms] <- socket$nl_generic=0x4 errno=14 cover=4293 #0 [692930ms] -> getsockopt$netlink(0x4, 0x10e, 0x9, 0x0, 0x20000180) #0 [692931ms] <- getsockopt$netlink=0x0 errno=14 cover=259 enabling collider #0 [692942ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [692944ms] <- perf_event_open=0x3 errno=14 cover=9485 #0 [692945ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [692945ms] <- socket$nl_generic=0x4 errno=14 cover=1378 pthread_create failed (errno 11) 2033/05/18 03:34:38 result hanged=false: 03:34:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000180)) 2033/05/18 03:34:38 #0: triaging type=7 2033/05/18 03:34:38 triaging input for call #2 getsockopt$netlink (new signal=1) [693018ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 156595 #0 [693029ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [693030ms] <- perf_event_open=0x3 errno=14 cover=9690 #0 [693032ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [693032ms] <- socket$nl_generic=0x4 errno=14 cover=1412 #0 [693032ms] -> getsockopt$netlink(0x4, 0x10e, 0x9, 0x0, 0x20000180) #0 [693032ms] <- getsockopt$netlink=0x0 errno=14 cover=114 2033/05/18 03:34:38 result hanged=false: 03:34:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000180)) [693064ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 156597 #0 [693075ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [693078ms] <- perf_event_open=0x3 errno=14 cover=9539 #0 [693079ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [693080ms] <- socket$nl_generic=0x4 errno=14 cover=1470 #0 [693080ms] -> getsockopt$netlink(0x4, 0x10e, 0x9, 0x0, 0x20000180) #0 [693080ms] <- getsockopt$netlink=0x0 errno=14 cover=114 03:34:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000180)) 2033/05/18 03:34:38 result hanged=false: [693110ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 156599 #0 [693120ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [693122ms] <- perf_event_open=0x3 errno=14 cover=9740 #0 [693123ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [693124ms] <- socket$nl_generic=0x4 errno=14 cover=4202 #0 [693125ms] -> getsockopt$netlink(0x4, 0x10e, 0x9, 0x0, 0x20000180) #0 [693126ms] <- getsockopt$netlink=0x0 errno=14 cover=259 2033/05/18 03:34:38 result hanged=false: 2033/05/18 03:34:38 added new input for call #2 getsockopt$netlink to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000180)) 03:34:38 executing program 0: syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) [693162ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 156601 #0 [693172ms] -> syz_genetlink_get_family_id$smc(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(SMC_PNETID, -1) netlink: failed to get family id for SMC_PNETID: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [693189ms] <- syz_genetlink_get_family_id$smc=0xffffffffffffffff errno=2 cover=11152 #0 [693189ms] -> syz_genetlink_get_family_id$nl80211(0x20000200, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [693191ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11489 enabling collider #0 [693191ms] -> syz_genetlink_get_family_id$smc(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(SMC_PNETID, -1) netlink: failed to get family id for SMC_PNETID: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [693205ms] <- syz_genetlink_get_family_id$smc=0xffffffffffffffff errno=2 cover=8297 2033/05/18 03:34:38 result hanged=false: 03:34:38 executing program 0: syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 2033/05/18 03:34:38 #0: triaging type=7 2033/05/18 03:34:38 triaging input for call #1 syz_genetlink_get_family_id$nl80211 (new signal=2) [693227ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 156603 #0 [693236ms] -> syz_genetlink_get_family_id$smc(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(SMC_PNETID, -1) netlink: failed to get family id for SMC_PNETID: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [693252ms] <- syz_genetlink_get_family_id$smc=0xffffffffffffffff errno=2 cover=11068 #0 [693254ms] -> syz_genetlink_get_family_id$nl80211(0x20000200, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [693254ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11533 03:34:38 executing program 0: syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 2033/05/18 03:34:38 result hanged=false: [693278ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 156605 #0 [693288ms] -> syz_genetlink_get_family_id$smc(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(SMC_PNETID, -1) netlink: failed to get family id for SMC_PNETID: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [693304ms] <- syz_genetlink_get_family_id$smc=0xffffffffffffffff errno=2 cover=10967 #0 [693306ms] -> syz_genetlink_get_family_id$nl80211(0x20000200, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [693308ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11555 2033/05/18 03:34:38 result hanged=false: 03:34:38 executing program 0: syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) [693330ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 156607 #0 [693339ms] -> syz_genetlink_get_family_id$smc(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(SMC_PNETID, -1) netlink: failed to get family id for SMC_PNETID: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [693356ms] <- syz_genetlink_get_family_id$smc=0xffffffffffffffff errno=2 cover=11175 #0 [693359ms] -> syz_genetlink_get_family_id$nl80211(0x20000200, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [693361ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11557 2033/05/18 03:34:38 result hanged=false: 2033/05/18 03:34:38 added new input for call #1 syz_genetlink_get_family_id$nl80211 to corpus: syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 03:34:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x0, 0x0, 0xffffff95}) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)={0x0, 0x0, 0xffffff95}) [693387ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2033/05/18 03:34:38 poll: candidates=8 inputs=0 signal=0 spawned worker pid 156609 #0 [693396ms] -> syz_open_dev$sg(0x20000400, 0x0, 0x0) #0 [693399ms] <- syz_open_dev$sg=0xffffffffffffffff errno=2 cover=1235 #0 [693399ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x20000000) #0 [693399ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0xffffffffffffffff errno=9 cover=45 #0 [693399ms] -> syz_open_dev$sg(0x20000400, 0x0, 0x0) #0 [693400ms] <- syz_open_dev$sg=0xffffffffffffffff errno=2 cover=1187 #0 [693400ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x20000000) #0 [693400ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [693400ms] -> syz_open_dev$sg(0x20000400, 0x0, 0x0) #0 [693400ms] <- syz_open_dev$sg=0xffffffffffffffff errno=2 cover=1200 #0 [693401ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x20000000) #0 [693401ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0xffffffffffffffff errno=9 cover=45 pthread_create failed (errno 11) 03:34:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/18) 2033/05/18 03:34:38 result hanged=false: [693453ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 156711 #0 [693464ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [693465ms] <- perf_event_open=0x3 errno=14 cover=9634 #0 [693466ms] -> msgctl$IPC_INFO(0x0, 0x3, 0x20000000) #0 [693466ms] <- msgctl$IPC_INFO=0x7 errno=14 cover=182 enabling collider #0 [693478ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [693480ms] <- perf_event_open=0x3 errno=14 cover=9667 #0 [693480ms] -> msgctl$IPC_INFO(0x0, 0x3, 0x20000000) #0 [693480ms] <- msgctl$IPC_INFO=0x7 errno=14 cover=95 03:34:38 executing program 0: add_key$keyring(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 2033/05/18 03:34:38 result hanged=false: [693509ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 156713 #0 [693519ms] -> add_key$keyring(0x200003c0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) #0 [693523ms] <- add_key$keyring=0xffffffffffffffff errno=22 cover=925 enabling collider #0 [693525ms] -> add_key$keyring(0x200003c0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) #0 [693526ms] <- add_key$keyring=0xffffffffffffffff errno=22 cover=191 03:34:38 executing program 0: waitid(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={0x0}}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x14, 0x453, 0x0, 0x0, 0x0, "ed"}, 0x14}}, 0x0) 2033/05/18 03:34:38 result hanged=false: [693546ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 156715 #0 [693556ms] -> waitid(0x0, 0x0, 0x20000000, 0x0, 0x0) #0 [693556ms] <- waitid=0xffffffffffffffff errno=22 cover=730 #0 [693557ms] -> wait4(0x0, 0x0, 0x0, 0x0) #0 [693561ms] <- wait4=0xffffffffffffffff errno=10 cover=106 #0 [693562ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [693563ms] <- socket$nl_audit=0x3 errno=14 cover=1408 #0 [693563ms] -> sendmsg$AUDIT_ADD_RULE(0x3, 0x20000800, 0x0) #0 [693564ms] <- sendmsg$AUDIT_ADD_RULE=0x0 errno=14 cover=1099 #0 [693565ms] -> openat$rfkill(0xffffffffffffff9c, 0x20000b00, 0x0, 0x0) #0 [693565ms] <- openat$rfkill=0xffffffffffffffff errno=2 cover=1199 #0 [693566ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [693566ms] <- socket$nl_audit=0x4 errno=14 cover=1418 [ 1443.544641] audit: type=1107 audit(2000000079.017:913): pid=286301 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='í' #0 [693567ms] -> sendmsg$AUDIT_USER_AVC(0x4, 0x20000e00, 0x0) #0 [693569ms] <- sendmsg$AUDIT_USER_AVC=0x14 errno=14 cover=3032 enabling collider #0 [693569ms] -> waitid(0x0, 0x0, 0x20000000, 0x0, 0x0) #0 [693569ms] <- waitid=0xffffffffffffffff errno=22 cover=50 #0 [693570ms] -> wait4(0x0, 0x0, 0x0, 0x0) #0 [693570ms] <- wait4=0xffffffffffffffff errno=10 cover=106 pthread_create failed (errno 11) 03:34:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev}]}, 0x3c}}, 0x0) 2033/05/18 03:34:39 result hanged=false: [693623ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 156817 #0 [693633ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [693634ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1169 #0 [693635ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [693635ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1191 #0 [693636ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(NLBL_UNLBL, -1) netlink: failed to get family id for NLBL_UNLBL: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [693638ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0xffffffffffffffff errno=2 cover=7874 #0 [693639ms] -> sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x20000140, 0x0) #0 [693639ms] <- sendmsg$NLBL_UNLABEL_C_STATICREMOVE=0xffffffffffffffff errno=9 cover=52 enabling collider #0 [693639ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [693640ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1227 #0 [693640ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [693640ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1224 pthread_create failed (errno 11) 03:34:39 executing program 0: r0 = creat(&(0x7f0000001a00)='./file0\x00', 0x0) perf_event_open$cgroup(&(0x7f0000001b80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7}, 0xffffffffffffffff, 0x0, r0, 0x0) 2033/05/18 03:34:39 result hanged=false: [693693ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 156919 #0 [693705ms] -> creat(0x20001a00, 0x0) #0 [693706ms] <- creat=0x3 errno=14 cover=6904 #0 [693707ms] -> perf_event_open$cgroup(0x20001b80, 0xffffffffffffffff, 0x0, 0x3, 0x0) #0 [693707ms] <- perf_event_open$cgroup=0xffffffffffffffff errno=9 cover=298 enabling collider #0 [693708ms] -> creat(0x20001a00, 0x0) #0 [693709ms] <- creat=0x3 errno=14 cover=4996 2033/05/18 03:34:39 result hanged=false: 03:34:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) [693731ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 156921 #0 [693741ms] -> socket$packet(0x11, 0x3, 0x300) #0 [693745ms] <- socket$packet=0x3 errno=14 cover=1739 #0 [693746ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [693748ms] <- socket$inet_tcp=0x4 errno=14 cover=1769 #0 [693749ms] -> setsockopt$inet_tcp_TCP_CONGESTION(0x4, 0x6, 0xd, 0x20000040, 0x5) #0 [693749ms] <- setsockopt$inet_tcp_TCP_CONGESTION=0x0 errno=14 cover=232 #0 [693749ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x4, 0x6, 0x13, 0x20000080, 0x4) #0 [693750ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [693750ms] -> connect$inet(0x4, 0x20000000, 0x10) #0 [693751ms] <- connect$inet=0x0 errno=14 cover=1463 #0 [693751ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [693756ms] <- close_range=0x0 errno=14 cover=4334 enabling collider #0 [693758ms] -> socket$packet(0x11, 0x3, 0x300) #0 [693758ms] <- socket$packet=0x3 errno=14 cover=1804 #0 [693759ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [693760ms] <- socket$inet_tcp=0x4 errno=14 cover=1761 pthread_create failed (errno 11) 03:34:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2033/05/18 03:34:39 result hanged=false: 2033/05/18 03:34:39 #0: triaging type=7 2033/05/18 03:34:39 triaging input for call #5 close_range (new signal=2) [693817ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157023 #0 [693827ms] -> socket$packet(0x11, 0x3, 0x300) #0 [693828ms] <- socket$packet=0x3 errno=14 cover=1750 #0 [693829ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [693830ms] <- socket$inet_tcp=0x4 errno=14 cover=1774 #0 [693831ms] -> setsockopt$inet_tcp_TCP_CONGESTION(0x4, 0x6, 0xd, 0x20000040, 0x5) #0 [693831ms] <- setsockopt$inet_tcp_TCP_CONGESTION=0x0 errno=14 cover=232 #0 [693831ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x4, 0x6, 0x13, 0x20000080, 0x4) #0 [693831ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [693831ms] -> connect$inet(0x4, 0x20000000, 0x10) #0 [693832ms] <- connect$inet=0x0 errno=14 cover=1404 #0 [693832ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [693837ms] <- close_range=0x0 errno=14 cover=4326 2033/05/18 03:34:39 result hanged=false: 03:34:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) [693856ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157025 #0 [693867ms] -> socket$packet(0x11, 0x3, 0x300) #0 [693869ms] <- socket$packet=0x3 errno=14 cover=1742 #0 [693869ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [693870ms] <- socket$inet_tcp=0x4 errno=14 cover=1765 #0 [693870ms] -> setsockopt$inet_tcp_TCP_CONGESTION(0x4, 0x6, 0xd, 0x20000040, 0x5) #0 [693870ms] <- setsockopt$inet_tcp_TCP_CONGESTION=0x0 errno=14 cover=232 #0 [693871ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x4, 0x6, 0x13, 0x20000080, 0x4) #0 [693871ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [693872ms] -> connect$inet(0x4, 0x20000000, 0x10) #0 [693872ms] <- connect$inet=0x0 errno=14 cover=1398 #0 [693872ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [693878ms] <- close_range=0x0 errno=14 cover=4378 03:34:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2033/05/18 03:34:39 result hanged=false: [693897ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157027 #0 [693909ms] -> socket$packet(0x11, 0x3, 0x300) #0 [693909ms] <- socket$packet=0x3 errno=14 cover=1728 #0 [693910ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [693910ms] <- socket$inet_tcp=0x4 errno=14 cover=1761 #0 [693910ms] -> setsockopt$inet_tcp_TCP_CONGESTION(0x4, 0x6, 0xd, 0x20000040, 0x5) #0 [693911ms] <- setsockopt$inet_tcp_TCP_CONGESTION=0x0 errno=14 cover=232 #0 [693911ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x4, 0x6, 0x13, 0x20000080, 0x4) #0 [693911ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [693911ms] -> connect$inet(0x4, 0x20000000, 0x10) #0 [693911ms] <- connect$inet=0x0 errno=14 cover=1373 #0 [693911ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [693916ms] <- close_range=0x0 errno=14 cover=4348 2033/05/18 03:34:39 result hanged=false: 2033/05/18 03:34:39 added new input for call #5 close_range to corpus: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 03:34:39 executing program 0: mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x1b4c, &(0x7f0000000140)={0x0, 0xa840, 0x10, 0x1, 0x13d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9) get_mempolicy(&(0x7f0000000300), 0x0, 0x1ff, &(0x7f0000fff000/0x1000)=nil, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) [693937ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157029 #0 [693946ms] -> mmap$usbmon(0x20ffc000, 0x3000, 0x1000000, 0x8010, 0xffffffffffffffff, 0x1) #0 [693950ms] <- mmap$usbmon=0xffffffffffffffff errno=22 cover=32 #0 [693951ms] -> syz_io_uring_setup(0x1b4c, 0x20000140, 0x20ffd000, 0x20ffb000, 0x200001c0, 0x20000200) #0 [693953ms] <- syz_io_uring_setup=0x3 errno=14 cover=11904 #0 [693955ms] -> msync(0x20ffc000, 0x4000, 0x9) #0 [693956ms] <- msync=0xffffffffffffffff errno=22 cover=35 #0 [693957ms] -> get_mempolicy(0x20000300, 0x0, 0x1ff, 0x20fff000, 0x1) #0 [693957ms] <- get_mempolicy=0xffffffffffffffff errno=22 cover=39 #0 [693957ms] -> ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) #0 [693958ms] <- ioctl$LOOP_CHANGE_FD=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [693958ms] -> mmap$usbmon(0x20ffc000, 0x3000, 0x1000000, 0x8010, 0xffffffffffffffff, 0x1) #0 [693959ms] <- mmap$usbmon=0xffffffffffffffff errno=22 cover=32 #0 [693959ms] -> syz_io_uring_setup(0x1b4c, 0x20000140, 0x20ffd000, 0x20ffb000, 0x200001c0, 0x20000200) #0 [693961ms] <- syz_io_uring_setup=0x3 errno=14 cover=12689 pthread_create failed (errno 11) 2033/05/18 03:34:39 result hanged=false: 03:34:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000001c0)="b3", 0x1, 0x8000) sendfile(r1, r0, 0x0, 0xffff) 2033/05/18 03:34:39 poll: candidates=8 inputs=0 signal=0 [694014ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157131 #0 [694024ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [694025ms] <- openat=0x3 errno=14 cover=6724 #0 [694026ms] -> creat(0x20000040, 0x0) #0 [694026ms] <- creat=0x4 errno=14 cover=4931 #0 [694027ms] -> pwrite64(0x4, 0x200001c0, 0x1, 0x8000) #0 [694028ms] <- pwrite64=0x1 errno=14 cover=3054 #0 [694028ms] -> sendfile(0x4, 0x3, 0x0, 0xffff) #0 [694033ms] <- sendfile=0xffffffffffffffff errno=22 cover=44842 enabling collider #0 [694034ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [694034ms] <- openat=0xffffffffffffffff errno=17 cover=1004 #0 [694035ms] -> creat(0x20000040, 0x0) #0 [694038ms] <- creat=0x3 errno=14 cover=9093 pthread_create failed (errno 11) 03:34:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000001c0)="b3", 0x1, 0x8000) sendfile(r1, r0, 0x0, 0xffff) 2033/05/18 03:34:39 result hanged=false: 2033/05/18 03:34:39 #0: triaging type=7 2033/05/18 03:34:39 triaging input for call #3 sendfile (new signal=9) [694089ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157233 #0 [694099ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [694100ms] <- openat=0x3 errno=14 cover=6842 #0 [694102ms] -> creat(0x20000040, 0x0) #0 [694102ms] <- creat=0x4 errno=14 cover=4934 #0 [694103ms] -> pwrite64(0x4, 0x200001c0, 0x1, 0x8000) #0 [694104ms] <- pwrite64=0x1 errno=14 cover=3076 #0 [694105ms] -> sendfile(0x4, 0x3, 0x0, 0xffff) #0 [694108ms] <- sendfile=0xffffffffffffffff errno=22 cover=9691 2033/05/18 03:34:39 result hanged=false: 03:34:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000001c0)="b3", 0x1, 0x8000) sendfile(r1, r0, 0x0, 0xffff) [694130ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157235 #0 [694139ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [694141ms] <- openat=0x3 errno=14 cover=6689 #0 [694143ms] -> creat(0x20000040, 0x0) #0 [694143ms] <- creat=0x4 errno=14 cover=4926 #0 [694144ms] -> pwrite64(0x4, 0x200001c0, 0x1, 0x8000) #0 [694144ms] <- pwrite64=0x1 errno=14 cover=2364 #0 [694144ms] -> sendfile(0x4, 0x3, 0x0, 0xffff) #0 [694146ms] <- sendfile=0xffffffffffffffff errno=22 cover=10057 03:34:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000001c0)="b3", 0x1, 0x8000) sendfile(r1, r0, 0x0, 0xffff) 2033/05/18 03:34:39 result hanged=false: [694167ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157237 #0 [694180ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [694181ms] <- openat=0x3 errno=14 cover=6728 #0 [694183ms] -> creat(0x20000040, 0x0) #0 [694184ms] <- creat=0x4 errno=14 cover=4947 #0 [694185ms] -> pwrite64(0x4, 0x200001c0, 0x1, 0x8000) #0 [694186ms] <- pwrite64=0x1 errno=14 cover=3017 #0 [694186ms] -> sendfile(0x4, 0x3, 0x0, 0xffff) #0 [694189ms] <- sendfile=0xffffffffffffffff errno=22 cover=8840 2033/05/18 03:34:39 result hanged=false: 2033/05/18 03:34:39 added new input for call #3 sendfile to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000001c0)="b3", 0x1, 0x8000) sendfile(r1, r0, 0x0, 0xffff) 2033/05/18 03:34:39 #0: triaging type=7 2033/05/18 03:34:39 triaging input for call #2 pwrite64 (new signal=2) 03:34:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000001c0)="b3", 0x1, 0x8000) sendfile(r1, r0, 0x0, 0xffff) [694218ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157239 #0 [694227ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [694228ms] <- openat=0x3 errno=14 cover=6835 #0 [694229ms] -> creat(0x20000040, 0x0) #0 [694229ms] <- creat=0x4 errno=14 cover=4956 #0 [694230ms] -> pwrite64(0x4, 0x200001c0, 0x1, 0x8000) #0 [694230ms] <- pwrite64=0x1 errno=14 cover=3007 #0 [694231ms] -> sendfile(0x4, 0x3, 0x0, 0xffff) #0 [694232ms] <- sendfile=0xffffffffffffffff errno=22 cover=8306 2033/05/18 03:34:39 result hanged=false: 03:34:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000001c0)="b3", 0x1, 0x8000) sendfile(r1, r0, 0x0, 0xffff) [694254ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157241 #0 [694264ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [694265ms] <- openat=0x3 errno=14 cover=6692 #0 [694266ms] -> creat(0x20000040, 0x0) #0 [694267ms] <- creat=0x4 errno=14 cover=4992 #0 [694267ms] -> pwrite64(0x4, 0x200001c0, 0x1, 0x8000) #0 [694268ms] <- pwrite64=0x1 errno=14 cover=3003 #0 [694268ms] -> sendfile(0x4, 0x3, 0x0, 0xffff) #0 [694270ms] <- sendfile=0xffffffffffffffff errno=22 cover=8136 2033/05/18 03:34:39 result hanged=false: 03:34:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000001c0)="b3", 0x1, 0x8000) sendfile(r1, r0, 0x0, 0xffff) [694291ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157243 #0 [694300ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [694301ms] <- openat=0x3 errno=14 cover=6773 #0 [694303ms] -> creat(0x20000040, 0x0) #0 [694304ms] <- creat=0x4 errno=14 cover=4936 #0 [694306ms] -> pwrite64(0x4, 0x200001c0, 0x1, 0x8000) #0 [694307ms] <- pwrite64=0x1 errno=14 cover=3057 #0 [694308ms] -> sendfile(0x4, 0x3, 0x0, 0xffff) #0 [694310ms] <- sendfile=0xffffffffffffffff errno=22 cover=7965 2033/05/18 03:34:39 result hanged=false: 2033/05/18 03:34:39 added new input for call #2 pwrite64 to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000001c0)="b3", 0x1, 0x8000) sendfile(r1, r0, 0x0, 0xffff) 2033/05/18 03:34:39 #0: triaging type=7 03:34:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000001c0)="b3", 0x1, 0x8000) sendfile(r1, r0, 0x0, 0xffff) [694349ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2033/05/18 03:34:39 triaging input for call #0 openat (new signal=1) spawned worker pid 157245 #0 [694357ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [694358ms] <- openat=0x3 errno=14 cover=6802 #0 [694360ms] -> creat(0x20000040, 0x0) #0 [694360ms] <- creat=0x4 errno=14 cover=4988 #0 [694362ms] -> pwrite64(0x4, 0x200001c0, 0x1, 0x8000) #0 [694362ms] <- pwrite64=0x1 errno=14 cover=3008 #0 [694363ms] -> sendfile(0x4, 0x3, 0x0, 0xffff) #0 [694365ms] <- sendfile=0xffffffffffffffff errno=22 cover=9107 2033/05/18 03:34:39 result hanged=false: 03:34:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000001c0)="b3", 0x1, 0x8000) sendfile(r1, r0, 0x0, 0xffff) [694392ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157247 #0 [694405ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [694406ms] <- openat=0x3 errno=14 cover=6814 #0 [694407ms] -> creat(0x20000040, 0x0) #0 [694408ms] <- creat=0x4 errno=14 cover=4994 #0 [694409ms] -> pwrite64(0x4, 0x200001c0, 0x1, 0x8000) #0 [694409ms] <- pwrite64=0x1 errno=14 cover=3087 #0 [694412ms] -> sendfile(0x4, 0x3, 0x0, 0xffff) #0 [694413ms] <- sendfile=0xffffffffffffffff errno=22 cover=8117 03:34:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000001c0)="b3", 0x1, 0x8000) sendfile(r1, r0, 0x0, 0xffff) 2033/05/18 03:34:39 result hanged=false: [694438ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157249 #0 [694448ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [694450ms] <- openat=0x3 errno=14 cover=6757 #0 [694451ms] -> creat(0x20000040, 0x0) #0 [694452ms] <- creat=0x4 errno=14 cover=4957 #0 [694453ms] -> pwrite64(0x4, 0x200001c0, 0x1, 0x8000) #0 [694454ms] <- pwrite64=0x1 errno=14 cover=3029 #0 [694454ms] -> sendfile(0x4, 0x3, 0x0, 0xffff) #0 [694457ms] <- sendfile=0xffffffffffffffff errno=22 cover=8441 2033/05/18 03:34:39 result hanged=false: 2033/05/18 03:34:39 added new input for call #0 openat to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000001c0)="b3", 0x1, 0x8000) sendfile(r1, r0, 0x0, 0xffff) 03:34:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x12, 0x0, 0x0) [694496ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157251 #0 [694504ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [694504ms] <- socket$inet6_tcp=0x3 errno=14 cover=1709 #0 [694505ms] -> setsockopt$inet6_mreq(0x3, 0x29, 0x12, 0x0, 0x0) #0 [694505ms] <- setsockopt$inet6_mreq=0xffffffffffffffff errno=92 cover=157 enabling collider #0 [694506ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [694507ms] <- socket$inet6_tcp=0x3 errno=14 cover=1766 03:34:39 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) 2033/05/18 03:34:39 result hanged=false: [694526ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157253 #0 [694535ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [694536ms] <- socket$inet6_udplite=0x3 errno=14 cover=1835 #0 [694537ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [694537ms] <- socket$nl_generic=0x4 errno=14 cover=1437 #0 [694538ms] -> syz_genetlink_get_family_id$nl80211(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [694539ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12048 #0 [694540ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x20000000) #0 [694540ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=193 #0 [694542ms] -> sendmsg$NL80211_CMD_SET_INTERFACE(0x4, 0x20000280, 0x0) #0 [694542ms] <- sendmsg$NL80211_CMD_SET_INTERFACE=0x24 errno=14 cover=2531 enabling collider #0 [694544ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [694544ms] <- socket$inet6_udplite=0x3 errno=14 cover=1663 #0 [694545ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [694545ms] <- socket$nl_generic=0x4 errno=14 cover=1433 pthread_create failed (errno 11) 03:34:40 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) 2033/05/18 03:34:40 result hanged=false: 2033/05/18 03:34:40 #0: triaging type=7 2033/05/18 03:34:40 triaging input for call #1 socket$nl_generic (new signal=1) [694596ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157355 #0 [694606ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [694607ms] <- socket$inet6_udplite=0x3 errno=14 cover=1638 #0 [694608ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [694608ms] <- socket$nl_generic=0x4 errno=14 cover=1434 #0 [694609ms] -> syz_genetlink_get_family_id$nl80211(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [694610ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12077 #0 [694612ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x20000000) #0 [694612ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=193 #0 [694612ms] -> sendmsg$NL80211_CMD_SET_INTERFACE(0x4, 0x20000280, 0x0) #0 [694614ms] <- sendmsg$NL80211_CMD_SET_INTERFACE=0x24 errno=14 cover=2554 2033/05/18 03:34:40 result hanged=false: 03:34:40 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) [694635ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157357 #0 [694644ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [694648ms] <- socket$inet6_udplite=0x3 errno=14 cover=1602 #0 [694649ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [694649ms] <- socket$nl_generic=0x4 errno=14 cover=1426 #0 [694651ms] -> syz_genetlink_get_family_id$nl80211(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [694652ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12107 #0 [694654ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x20000000) #0 [694654ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=193 #0 [694654ms] -> sendmsg$NL80211_CMD_SET_INTERFACE(0x4, 0x20000280, 0x0) #0 [694655ms] <- sendmsg$NL80211_CMD_SET_INTERFACE=0x24 errno=14 cover=2571 03:34:40 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) 2033/05/18 03:34:40 result hanged=false: [694677ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157359 #0 [694686ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [694687ms] <- socket$inet6_udplite=0x3 errno=14 cover=1670 #0 [694688ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [694688ms] <- socket$nl_generic=0x4 errno=14 cover=1412 #0 [694688ms] -> syz_genetlink_get_family_id$nl80211(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [694689ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12091 #0 [694690ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x20000000) #0 [694690ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=193 #0 [694690ms] -> sendmsg$NL80211_CMD_SET_INTERFACE(0x4, 0x20000280, 0x0) #0 [694691ms] <- sendmsg$NL80211_CMD_SET_INTERFACE=0x24 errno=14 cover=2579 2033/05/18 03:34:40 result hanged=false: 2033/05/18 03:34:40 added new input for call #1 socket$nl_generic to corpus: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) 03:34:40 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) [694715ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157361 #0 [694724ms] -> mlock2(0x20ffd000, 0x3000, 0x0) #0 [694727ms] <- mlock2=0x0 errno=14 cover=2272 #0 [694729ms] -> munlock(0x20ffd000, 0x3000) #0 [694731ms] <- munlock=0x0 errno=14 cover=509 #0 [694731ms] -> pkey_mprotect(0x20ffe000, 0x1000, 0x0, 0xffffffffffffffff) #0 [694731ms] <- pkey_mprotect=0x0 errno=14 cover=908 #0 [694732ms] -> madvise(0x20ffd000, 0x3000, 0x8) #0 [694732ms] <- madvise=0x0 errno=14 cover=1277 #0 [694732ms] -> madvise(0x20ffc000, 0x4000, 0x15) #0 [694733ms] <- madvise=0x0 errno=14 cover=3327 enabling collider #0 [694734ms] -> mlock2(0x20ffd000, 0x3000, 0x0) #0 [694734ms] <- mlock2=0xffffffffffffffff errno=12 cover=741 #0 [694735ms] -> munlock(0x20ffd000, 0x3000) #0 [694735ms] <- munlock=0x0 errno=14 cover=503 pthread_create failed (errno 11) 03:34:40 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) 2033/05/18 03:34:40 result hanged=false: 2033/05/18 03:34:40 #0: triaging type=7 2033/05/18 03:34:40 triaging input for call #4 madvise (new signal=2) [694787ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157463 #0 [694796ms] -> mlock2(0x20ffd000, 0x3000, 0x0) #0 [694797ms] <- mlock2=0x0 errno=14 cover=2417 #0 [694798ms] -> munlock(0x20ffd000, 0x3000) #0 [694798ms] <- munlock=0x0 errno=14 cover=509 #0 [694798ms] -> pkey_mprotect(0x20ffe000, 0x1000, 0x0, 0xffffffffffffffff) #0 [694799ms] <- pkey_mprotect=0x0 errno=14 cover=831 #0 [694801ms] -> madvise(0x20ffd000, 0x3000, 0x8) #0 [694801ms] <- madvise=0x0 errno=14 cover=1317 #0 [694802ms] -> madvise(0x20ffc000, 0x4000, 0x15) #0 [694804ms] <- madvise=0x0 errno=14 cover=3054 2033/05/18 03:34:40 result hanged=false: 03:34:40 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) [694825ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157465 #0 [694835ms] -> mlock2(0x20ffd000, 0x3000, 0x0) #0 [694837ms] <- mlock2=0x0 errno=14 cover=2265 #0 [694839ms] -> munlock(0x20ffd000, 0x3000) #0 [694839ms] <- munlock=0x0 errno=14 cover=509 #0 [694839ms] -> pkey_mprotect(0x20ffe000, 0x1000, 0x0, 0xffffffffffffffff) #0 [694839ms] <- pkey_mprotect=0x0 errno=14 cover=845 #0 [694840ms] -> madvise(0x20ffd000, 0x3000, 0x8) #0 [694840ms] <- madvise=0x0 errno=14 cover=1317 #0 [694840ms] -> madvise(0x20ffc000, 0x4000, 0x15) #0 [694841ms] <- madvise=0x0 errno=14 cover=2505 2033/05/18 03:34:40 result hanged=false: 03:34:40 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) [694862ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157467 #0 [694872ms] -> mlock2(0x20ffd000, 0x3000, 0x0) #0 [694875ms] <- mlock2=0x0 errno=14 cover=1941 #0 [694877ms] -> munlock(0x20ffd000, 0x3000) #0 [694878ms] <- munlock=0x0 errno=14 cover=509 #0 [694878ms] -> pkey_mprotect(0x20ffe000, 0x1000, 0x0, 0xffffffffffffffff) #0 [694878ms] <- pkey_mprotect=0x0 errno=14 cover=834 #0 [694879ms] -> madvise(0x20ffd000, 0x3000, 0x8) #0 [694880ms] <- madvise=0x0 errno=14 cover=1197 #0 [694880ms] -> madvise(0x20ffc000, 0x4000, 0x15) #0 [694881ms] <- madvise=0x0 errno=14 cover=2487 2033/05/18 03:34:40 result hanged=false: 2033/05/18 03:34:40 added new input for call #4 madvise to corpus: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) 03:34:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x5392, &(0x7f0000000180)=0x2000d) [694904ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157469 #0 [694914ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [694918ms] <- openat=0x3 errno=14 cover=6896 #0 [694920ms] -> mount(0x20000080, 0x200000c0, 0x0, 0x209000, 0x0) #0 [694920ms] <- mount=0xffffffffffffffff errno=2 cover=1547 #0 [694921ms] -> openat(0xffffffffffffff9c, 0x20004c40, 0x84e00, 0x0) #0 [694922ms] <- openat=0x4 errno=14 cover=5075 #0 [694922ms] -> ioctl$SG_SET_TIMEOUT(0x4, 0x5392, 0x20000180) #0 [694922ms] <- ioctl$SG_SET_TIMEOUT=0xffffffffffffffff errno=25 cover=121 enabling collider #0 [694923ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [694923ms] <- openat=0x3 errno=14 cover=1122 #0 [694924ms] -> mount(0x20000080, 0x200000c0, 0x0, 0x209000, 0x0) #0 [694924ms] <- mount=0xffffffffffffffff errno=2 cover=1536 pthread_create failed (errno 11) 2033/05/18 03:34:40 result hanged=false: 2033/05/18 03:34:40 #0: triaging type=7 2033/05/18 03:34:40 triaging input for call #2 openat (new signal=3) 03:34:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x5392, &(0x7f0000000180)=0x2000d) [694978ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157571 #0 [694989ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [694990ms] <- openat=0x3 errno=14 cover=6787 #0 [694992ms] -> mount(0x20000080, 0x200000c0, 0x0, 0x209000, 0x0) #0 [694993ms] <- mount=0xffffffffffffffff errno=2 cover=1536 #0 [694994ms] -> openat(0xffffffffffffff9c, 0x20004c40, 0x84e00, 0x0) #0 [694996ms] <- openat=0x4 errno=14 cover=4866 #0 [694997ms] -> ioctl$SG_SET_TIMEOUT(0x4, 0x5392, 0x20000180) #0 [694998ms] <- ioctl$SG_SET_TIMEOUT=0xffffffffffffffff errno=25 cover=107 2033/05/18 03:34:40 result hanged=false: 03:34:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x5392, &(0x7f0000000180)=0x2000d) [695019ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157573 #0 [695030ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [695034ms] <- openat=0x3 errno=14 cover=6719 #0 [695036ms] -> mount(0x20000080, 0x200000c0, 0x0, 0x209000, 0x0) #0 [695038ms] <- mount=0xffffffffffffffff errno=2 cover=1547 #0 [695038ms] -> openat(0xffffffffffffff9c, 0x20004c40, 0x84e00, 0x0) #0 [695039ms] <- openat=0x4 errno=14 cover=4905 #0 [695041ms] -> ioctl$SG_SET_TIMEOUT(0x4, 0x5392, 0x20000180) #0 [695041ms] <- ioctl$SG_SET_TIMEOUT=0xffffffffffffffff errno=25 cover=107 2033/05/18 03:34:40 result hanged=false: 03:34:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x5392, &(0x7f0000000180)=0x2000d) [695060ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157575 #0 [695070ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [695074ms] <- openat=0x3 errno=14 cover=6683 #0 [695077ms] -> mount(0x20000080, 0x200000c0, 0x0, 0x209000, 0x0) #0 [695079ms] <- mount=0xffffffffffffffff errno=2 cover=1536 #0 [695079ms] -> openat(0xffffffffffffff9c, 0x20004c40, 0x84e00, 0x0) #0 [695080ms] <- openat=0x4 errno=14 cover=4827 #0 [695082ms] -> ioctl$SG_SET_TIMEOUT(0x4, 0x5392, 0x20000180) #0 [695082ms] <- ioctl$SG_SET_TIMEOUT=0xffffffffffffffff errno=25 cover=107 2033/05/18 03:34:40 result hanged=false: 2033/05/18 03:34:40 added new input for call #2 openat to corpus: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x5392, &(0x7f0000000180)=0x2000d) 03:34:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r1}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) [695110ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157577 #0 [695118ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [695122ms] <- socket$inet6_tcp=0x3 errno=14 cover=1731 #0 [695123ms] -> gettid() #0 [695123ms] <- gettid=0x2678a errno=14 cover=48 #0 [695124ms] -> fcntl$setownex(0x3, 0xf, 0x20000040) #0 [695124ms] <- fcntl$setownex=0x0 errno=14 cover=137 #0 [695124ms] -> ioctl$sock_SIOCGPGRP(0x3, 0x8904, 0x20000000) #0 [695124ms] <- ioctl$sock_SIOCGPGRP=0x0 errno=14 cover=130 enabling collider #0 [695125ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [695125ms] <- socket$inet6_tcp=0x3 errno=14 cover=1733 #0 [695126ms] -> gettid() #0 [695126ms] <- gettid=0x2678a errno=14 cover=48 pthread_create failed (errno 11) 2033/05/18 03:34:40 result hanged=false: 03:34:40 executing program 0: r0 = syz_io_uring_setup(0x3d32, &(0x7f0000001c00), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001c80), 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) [695176ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157679 #0 [695185ms] -> syz_io_uring_setup(0x3d32, 0x20001c00, 0x20ffd000, 0x20ffd000, 0x20001c80, 0x0) SIGSEGV on (nil), skipping #0 [695193ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=15500 #0 [695195ms] -> io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) #0 [695196ms] <- io_uring_register$IORING_UNREGISTER_EVENTFD=0xffffffffffffffff errno=9 cover=46 enabling collider #0 [695197ms] -> syz_io_uring_setup(0x3d32, 0x20001c00, 0x20ffd000, 0x20ffd000, 0x20001c80, 0x0) SIGSEGV on (nil), skipping #0 [695200ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=18654 #0 [695202ms] -> io_uring_register$IORING_UNREGISTER_EVENTFD(03:34:40 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000065c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000001040)={0xa, 0x4e22, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=[@dontfrag={{0x15}}], 0x18}}], 0x2, 0x0) 2033/05/18 03:34:40 result hanged=false: [695221ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157681 #0 [695233ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [695233ms] <- socket$inet6_udplite=0x3 errno=14 cover=1613 #0 [695235ms] -> sendmmsg$inet6(0x3, 0x200065c0, 0x2, 0x0) #0 [695237ms] <- sendmmsg$inet6=0x1 errno=14 cover=1981 enabling collider #0 [695237ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [695238ms] <- socket$inet6_udplite=0x3 errno=14 cover=1670 03:34:40 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="94a36045c978", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "afb6a5", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2033/05/18 03:34:40 result hanged=false: 2033/05/18 03:34:40 poll: candidates=8 inputs=0 signal=0 iptable filter/10: resetting iptable mangle/10: resetting [695263ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157683 #0 [695272ms] -> syz_emit_ethernet(0x4a, 0x20000000, 0x0) aa aa aa aa aa aa 94 a3 60 45 c9 78 86 dd 60 af b6 a5 00 14 06 00 fe 88 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 44 43 42 41 44 43 42 41 50 00 00 00 a5 4e 00 00 #0 [695275ms] <- syz_emit_ethernet=0x4a errno=14 cover=22625 enabling collider #0 [695276ms] -> syz_emit_ethernet(0x4a, 0x20000000, 0x0) aa aa aa aa aa aa 94 a3 60 45 c9 78 86 dd 60 af b6 a5 00 14 06 00 fe 88 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 44 43 42 41 44 43 42 41 50 00 00 00 a5 4e 00 00 #0 [695277ms] <- syz_emit_ethernet=0x4a errno=14 cover=22571 03:34:40 executing program 0: syz_open_dev$usbmon(&(0x7f0000000440), 0x81, 0x284600) 2033/05/18 03:34:40 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [695297ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157685 #0 [695307ms] -> syz_open_dev$usbmon(0x20000440, 0x81, 0x284600) #0 [695307ms] <- syz_open_dev$usbmon=0xffffffffffffffff errno=2 cover=1166 enabling collider #0 [695308ms] -> syz_open_dev$usbmon(0x20000440, 0x81, 0x284600) #0 [695309ms] <- syz_open_dev$usbmon=0xffffffffffffffff errno=2 cover=1166 03:34:40 executing program 0: unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') 2033/05/18 03:34:40 result hanged=false: [695329ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157687 #0 [695340ms] -> unlink(0x20000080) #0 [695342ms] <- unlink=0xffffffffffffffff errno=2 cover=1884 enabling collider #0 [695344ms] -> unlink(0x20000080) #0 [695345ms] <- unlink=0xffffffffffffffff errno=2 cover=1109 03:34:40 executing program 0: unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') 2033/05/18 03:34:40 result hanged=false: 2033/05/18 03:34:40 #0: triaging type=7 2033/05/18 03:34:40 triaging input for call #0 unlink (new signal=2) [695367ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157689 #0 [695377ms] -> unlink(0x20000080) #0 [695378ms] <- unlink=0xffffffffffffffff errno=2 cover=1915 03:34:40 executing program 0: unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') 2033/05/18 03:34:40 result hanged=false: [695399ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157691 #0 [695409ms] -> unlink(0x20000080) #0 [695410ms] <- unlink=0xffffffffffffffff errno=2 cover=1872 03:34:40 executing program 0: unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') 2033/05/18 03:34:40 result hanged=false: [695430ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157693 #0 [695440ms] -> unlink(0x20000080) #0 [695440ms] <- unlink=0xffffffffffffffff errno=2 cover=1838 2033/05/18 03:34:40 result hanged=false: 2033/05/18 03:34:40 added new input for call #0 unlink to corpus: unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') 03:34:40 executing program 0: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f00000012c0)=[{&(0x7f0000000040)="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", 0xfffffe90}], 0x1, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r1, &(0x7f00000012c0)=[{&(0x7f0000000040)="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", 0xfffffe90}], 0x1, 0x0) [695466ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157695 #0 [695476ms] -> pipe2(0x20000000, 0x0) #0 [695480ms] <- pipe2=0x0 errno=14 cover=2069 #0 [695481ms] -> vmsplice(0x4, 0x200012c0, 0x1, 0x0) #0 [695481ms] <- vmsplice=0xffc0 errno=14 cover=6722 #0 [695482ms] -> pipe2(0x20000000, 0x0) #0 [695482ms] <- pipe2=0x0 errno=14 cover=1355 #0 [695482ms] -> vmsplice(0x6, 0x200012c0, 0x1, 0x0) #0 [695482ms] <- vmsplice=0xffc0 errno=14 cover=3489 enabling collider #0 [695483ms] -> pipe2(0x20000000, 0x0) #0 [695483ms] <- pipe2=0x0 errno=14 cover=1113 #0 [695484ms] -> vmsplice(0x4, 0x200012c0, 0x1, 0x0) #0 [695484ms] <- vmsplice=0xffc0 errno=14 cover=3549 pthread_create failed (errno 11) 2033/05/18 03:34:40 result hanged=false: 03:34:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000001c0)="b3", 0x1, 0x8000) sendfile(r1, r0, 0x0, 0xffffffff000) [695537ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157797 #0 [695546ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [695549ms] <- openat=0x3 errno=14 cover=12466 #0 [695550ms] -> creat(0x20000040, 0x0) #0 [695551ms] <- creat=0x4 errno=14 cover=4955 #0 [695551ms] -> pwrite64(0x4, 0x200001c0, 0x1, 0x8000) #0 [695552ms] <- pwrite64=0x1 errno=14 cover=3057 #0 [695553ms] -> sendfile(0x4, 0x3, 0x0, 0xffffffff000) #0 [695557ms] <- sendfile=0x8001 errno=14 cover=20475 enabling collider #0 [695559ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [695560ms] <- openat=0xffffffffffffffff errno=17 cover=1015 #0 [695560ms] -> creat(0x20000040, 0x0) #0 [695562ms] <- creat=0x3 errno=14 cover=13801 pthread_create failed (errno 11) 2033/05/18 03:34:41 result hanged=false: 03:34:41 executing program 0: socketpair(0x11, 0xa, 0x0, &(0x7f0000002300)) [695613ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157899 #0 [695623ms] -> socketpair(0x11, 0xa, 0x0, 0x20002300) #0 [695637ms] <- socketpair=0xffffffffffffffff errno=95 cover=4920 enabling collider #0 [695639ms] -> socketpair(0x11, 0xa, 0x0, 0x20002300) #0 [695651ms] <- socketpair=0xffffffffffffffff errno=95 cover=4354 2033/05/18 03:34:41 result hanged=false: 03:34:41 executing program 0: io_setup(0x5, &(0x7f0000000080)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) [695673ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157901 #0 [695684ms] -> io_setup(0x5, 0x20000080) #0 [695685ms] <- io_setup=0x0 errno=14 cover=3526 #0 [695686ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [695686ms] <- socket$inet6_tcp=0x3 errno=14 cover=1795 #0 [695686ms] -> openat$autofs(0xffffffffffffff9c, 0x20000140, 0x0, 0x0) #0 [695687ms] <- openat$autofs=0xffffffffffffffff errno=2 cover=1167 #0 [695687ms] -> io_submit(0x7fe19e216000, 0x2, 0x200001c0) #0 [695687ms] <- io_submit=0x1 errno=14 cover=1020 enabling collider #0 [695688ms] -> io_setup(0x5, 0x20000080) #0 [695688ms] <- io_setup=0xffffffffffffffff errno=22 cover=40 #0 [695689ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [695690ms] <- socket$inet6_tcp=0x3 errno=14 cover=1744 pthread_create failed (errno 11) 03:34:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x33, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001d00210c00ebffffffffffff04"], 0x14}}, 0x0) 2033/05/18 03:34:41 result hanged=false: [695755ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158003 #0 [695765ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [695765ms] <- socket$nl_generic=0x3 errno=14 cover=1434 #0 [695766ms] -> sendmsg$nl_generic(0x3, 0x20000080, 0x0) #0 [695803ms] <- sendmsg$nl_generic=0x14 errno=14 cover=262143 enabling collider #0 [695806ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [695806ms] <- socket$nl_generic=0x3 errno=14 cover=1478 2033/05/18 03:34:41 result hanged=false: 03:34:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x33, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001d00210c00ebffffffffffff04"], 0x14}}, 0x0) 2033/05/18 03:34:41 #0: triaging type=7 2033/05/18 03:34:41 triaging input for call #1 sendmsg$nl_generic (new signal=4) [695832ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158005 #0 [695842ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [695843ms] <- socket$nl_generic=0x3 errno=14 cover=1434 #0 [695844ms] -> sendmsg$nl_generic(0x3, 0x20000080, 0x0) #0 [695878ms] <- sendmsg$nl_generic=0x14 errno=14 cover=262143 03:34:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x33, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001d00210c00ebffffffffffff04"], 0x14}}, 0x0) 2033/05/18 03:34:41 result hanged=false: [695920ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158007 #0 [695930ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [695931ms] <- socket$nl_generic=0x3 errno=14 cover=1390 #0 [695932ms] -> sendmsg$nl_generic(0x3, 0x20000080, 0x0) #0 [695955ms] <- sendmsg$nl_generic=0x14 errno=14 cover=262143 03:34:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x33, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001d00210c00ebffffffffffff04"], 0x14}}, 0x0) 2033/05/18 03:34:41 result hanged=false: [695990ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158009 #0 [695999ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [696000ms] <- socket$nl_generic=0x3 errno=14 cover=1426 #0 [696001ms] -> sendmsg$nl_generic(0x3, 0x20000080, 0x0) #0 [696022ms] <- sendmsg$nl_generic=0x14 errno=14 cover=262143 2033/05/18 03:34:41 result hanged=false: 2033/05/18 03:34:41 added new input for call #1 sendmsg$nl_generic to corpus: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x33, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001d00210c00ebffffffffffff04"], 0x14}}, 0x0) 03:34:41 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x42000) r2 = fork() lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r2}) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14}, 0x14) [696092ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2033/05/18 03:34:41 poll: candidates=8 inputs=0 signal=0 spawned worker pid 158011 #0 [696102ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [696103ms] <- open=0x3 errno=14 cover=6853 #0 [696104ms] -> pipe(0x20000080) #0 [696104ms] <- pipe=0x0 errno=14 cover=1273 #0 [696104ms] -> fcntl$setstatus(0x4, 0x4, 0x42000) #0 [696104ms] <- fcntl$setstatus=0x0 errno=14 cover=152 #0 [696105ms] -> fork() #0 [696125ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [696131ms] -> lstat(0x20000180, 0x200001c0) #0 [696131ms] <- lstat=0x0 errno=14 cover=637 #0 [696131ms] -> setresuid(0x0, 0x8000, 0x0) #0 [696132ms] <- setresuid=0x0 errno=14 cover=437 #0 [696132ms] -> fcntl$setownex(0x4, 0xf, 0x20000000) #0 [696133ms] <- fcntl$setownex=0x0 errno=14 cover=133 #0 [696133ms] -> write$P9_RATTACH(0x5, 0x200000c0, 0x14) #0 [696133ms] <- write$P9_RATTACH=0x14 errno=14 cover=384 enabling collider #0 [696134ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [696135ms] <- open=0xffffffffffffffff errno=17 cover=1025 #0 [696136ms] -> pipe(0x20000080) #0 [696137ms] <- pipe=0x0 errno=14 cover=1463 pthread_create failed (errno 11) 2033/05/18 03:34:41 result hanged=false: 03:34:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000300)=@updsa={0x168, 0x1a, 0x1, 0x0, 0x0, {{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@local, 0x0, 0x33}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}, @lifetime_val={0x24}, @replay_thresh={0x8}]}, 0x168}}, 0x0) [696193ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158114 #0 [696203ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [696206ms] <- socket$nl_xfrm=0x3 errno=14 cover=1441 #0 [696208ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) #0 [696211ms] <- sendmsg$nl_xfrm=0x168 errno=14 cover=2792 enabling collider #0 [696212ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [696213ms] <- socket$nl_xfrm=0x3 errno=14 cover=1432 2033/05/18 03:34:41 result hanged=false: 03:34:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000300)=@updsa={0x168, 0x1a, 0x1, 0x0, 0x0, {{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@local, 0x0, 0x33}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}, @lifetime_val={0x24}, @replay_thresh={0x8}]}, 0x168}}, 0x0) 2033/05/18 03:34:41 #0: triaging type=7 2033/05/18 03:34:41 triaging input for call #1 sendmsg$nl_xfrm (new signal=1) [696233ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158116 #0 [696244ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [696244ms] <- socket$nl_xfrm=0x3 errno=14 cover=1451 #0 [696245ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) #0 [696246ms] <- sendmsg$nl_xfrm=0x168 errno=14 cover=2726 2033/05/18 03:34:41 result hanged=false: 03:34:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000300)=@updsa={0x168, 0x1a, 0x1, 0x0, 0x0, {{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@local, 0x0, 0x33}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}, @lifetime_val={0x24}, @replay_thresh={0x8}]}, 0x168}}, 0x0) [696267ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158118 #0 [696276ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [696279ms] <- socket$nl_xfrm=0x3 errno=14 cover=1397 #0 [696281ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) #0 [696283ms] <- sendmsg$nl_xfrm=0x168 errno=14 cover=2773 2033/05/18 03:34:41 result hanged=false: 03:34:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000300)=@updsa={0x168, 0x1a, 0x1, 0x0, 0x0, {{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@local, 0x0, 0x33}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}, @lifetime_val={0x24}, @replay_thresh={0x8}]}, 0x168}}, 0x0) [696306ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158120 #0 [696315ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [696319ms] <- socket$nl_xfrm=0x3 errno=14 cover=1430 #0 [696320ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) #0 [696321ms] <- sendmsg$nl_xfrm=0x168 errno=14 cover=2737 2033/05/18 03:34:41 result hanged=false: 2033/05/18 03:34:41 added new input for call #1 sendmsg$nl_xfrm to corpus: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000300)=@updsa={0x168, 0x1a, 0x1, 0x0, 0x0, {{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@local, 0x0, 0x33}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}, @lifetime_val={0x24}, @replay_thresh={0x8}]}, 0x168}}, 0x0) 03:34:41 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "779b1e7567d62f09a2d166d436fc9990c772b9"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/116, 0x74}], 0x1) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) dup3(r1, r0, 0x0) [696350ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158122 #0 [696358ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [696358ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [696359ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [696360ms] <- openat$tun=0xffffffffffffffff errno=2 cover=1155 #0 [696360ms] -> ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, 0x20000000) #0 [696360ms] <- ioctl$TUNSETQUEUE=0xffffffffffffffff errno=9 cover=45 #0 [696361ms] -> readv(0xffffffffffffffff, 0x20000140, 0x1) #0 [696361ms] <- readv=0xffffffffffffffff errno=9 cover=47 #0 [696361ms] -> io_uring_setup(0x0, 0x200001c0) #0 [696361ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=53 #0 [696361ms] -> socket$inet(0x2, 0xa, 0x0) #0 [696362ms] <- socket$inet=0x3 errno=14 cover=1794 #0 [696363ms] -> ioctl$sock_inet_SIOCGIFNETMASK(0x3, 0x8914, 0x200001c0) #0 [696390ms] <- ioctl$sock_inet_SIOCGIFNETMASK=0xffffffffffffffff errno=19 cover=2091 #0 [696392ms] -> dup3(0x3, 0xffffffffffffffff, 0x0) #0 [696394ms] <- dup3=0xffffffffffffffff errno=9 cover=37 enabling collider #0 [696398ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [696398ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [696399ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [696399ms] <- openat$tun=0xffffffffffffffff errno=2 cover=1246 pthread_create failed (errno 11) 2033/05/18 03:34:41 result hanged=false: 03:34:41 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000004540)={0x24, @short}, 0x14) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40060}}], 0x324, 0x0) [696456ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158224 #0 [696466ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [696467ms] <- syz_init_net_socket$802154_dgram=0xffffffffffffffff errno=2 cover=1169 #0 [696468ms] -> bind$802154_dgram(0xffffffffffffffff, 0x20000000, 0x14) #0 [696468ms] <- bind$802154_dgram=0xffffffffffffffff errno=9 cover=48 #0 [696468ms] -> connect$802154_dgram(0xffffffffffffffff, 0x20004540, 0x14) #0 [696468ms] <- connect$802154_dgram=0xffffffffffffffff errno=9 cover=46 #0 [696468ms] -> sendmmsg$sock(0xffffffffffffffff, 0x200021c0, 0x324, 0x0) #0 [696468ms] <- sendmmsg$sock=0xffffffffffffffff errno=9 cover=51 enabling collider #0 [696468ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [696468ms] <- syz_init_net_socket$802154_dgram=0xffffffffffffffff errno=2 cover=1167 #0 [696469ms] -> bind$802154_dgram(0xffffffffffffffff, 0x20000000, 0x14) #0 [696469ms] <- bind$802154_dgram=0xffffffffffffffff errno=9 cover=48 pthread_create failed (errno 11) 2033/05/18 03:34:41 result hanged=false: 03:34:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000a00), 0x4) [696519ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158326 #0 [696529ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [696533ms] <- socket$netlink=0x3 errno=14 cover=1443 #0 [696535ms] -> setsockopt$netlink_NETLINK_PKTINFO(0x3, 0x10e, 0x3, 0x20000a00, 0x4) #0 [696535ms] <- setsockopt$netlink_NETLINK_PKTINFO=0x0 errno=14 cover=103 enabling collider #0 [696536ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [696537ms] <- socket$netlink=0x3 errno=14 cover=1398 03:34:42 executing program 0: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 2033/05/18 03:34:42 result hanged=false: [696555ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158328 #0 [696565ms] -> setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) #0 [696565ms] <- setsockopt$inet6_udp_int=0xffffffffffffffff errno=9 cover=50 enabling collider #0 [696567ms] -> setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) #0 [696567ms] <- setsockopt$inet6_udp_int=0xffffffffffffffff errno=9 cover=50 03:34:42 executing program 0: r0 = fork() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x3, 0xffffffffffffffff, 0x0, 0xee00, 0xffffffffffffffff, 0x100, 0x7}, 0x0, 0x6, 0x9, 0xfffffffffffeffff, r0, 0x0, 0x81}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600), 0x42200, 0x0) 2033/05/18 03:34:42 result hanged=false: [696587ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158330 #0 [696597ms] -> fork() #0 [696613ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [696616ms] -> shmctl$IPC_SET(0x0, 0x1, 0x20000000) #0 [696616ms] <- shmctl$IPC_SET=0xffffffffffffffff errno=22 cover=75 #0 [696616ms] -> openat$vcsu(0xffffffffffffff9c, 0x20000600, 0x42200, 0x0) #0 [696616ms] <- openat$vcsu=0xffffffffffffffff errno=2 cover=1178 enabling collider #0 [696616ms] -> fork() #0 [696633ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [696634ms] -> shmctl$IPC_SET(0x0, 0x1, 0x20000000) #0 [696634ms] <- shmctl$IPC_SET=0xffffffffffffffff errno=22 cover=75 pthread_create failed (errno 11) 03:34:42 executing program 0: setitimer(0x1000000, 0x0, 0x0) 2033/05/18 03:34:42 result hanged=false: [696688ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158434 #0 [696698ms] -> setitimer(0x1000000, 0x0, 0x0) #0 [696698ms] <- setitimer=0xffffffffffffffff errno=22 cover=40 enabling collider #0 [696700ms] -> setitimer(0x1000000, 0x0, 0x0) #0 [696700ms] <- setitimer=0xffffffffffffffff errno=22 cover=40 2033/05/18 03:34:42 result hanged=false: 03:34:42 executing program 0: r0 = syz_io_uring_setup(0x158d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x379}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x319, &(0x7f0000000180)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 2033/05/18 03:34:42 poll: candidates=8 inputs=0 signal=0 [696720ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158436 #0 [696730ms] -> syz_io_uring_setup(0x158d, 0x20000080, 0x20ffe000, 0x20ffc000, 0x20000100, 0x20000140) #0 [696733ms] <- syz_io_uring_setup=0x3 errno=14 cover=11658 #0 [696733ms] -> syz_io_uring_setup(0x319, 0x20000180, 0x20ffc000, 0x20ffb000, 0x20000200, 0x20000240) #0 [696734ms] <- syz_io_uring_setup=0x4 errno=14 cover=7273 enabling collider #0 [696734ms] -> syz_io_uring_setup(0x158d, 0x20000080, 0x20ffe000, 0x20ffc000, 0x20000100, 0x20000140) #0 [696736ms] <- syz_io_uring_setup=0x3 errno=14 cover=13160 03:34:42 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000140)={[{@uid={'uid', 0x3d, 0xee00}}]}) 2033/05/18 03:34:42 result hanged=false: [696758ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158438 #0 [696767ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [696769ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12556 #0 [696770ms] -> mount(0x0, 0x20000000, 0x20000080, 0x0, 0x0) #0 [696774ms] <- mount=0x0 errno=14 cover=3223 #0 [696775ms] -> syz_mount_image$tmpfs(0x20000040, 0x200000c0, 0x0, 0x0, 0x0, 0x20, 0x20000140) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=32 opts='uid=0x000000000000ee00,' #0 [696776ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=4325 enabling collider #0 [696777ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [696777ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1384 #0 [696778ms] -> mount(0x0, 0x20000000, 0x20000080, 0x0, 0x0) #0 [696779ms] <- mount=0xffffffffffffffff errno=16 cover=3337 pthread_create failed (errno 11) 2033/05/18 03:34:42 result hanged=false: 2033/05/18 03:34:42 #0: triaging type=7 03:34:42 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000140)={[{@uid={'uid', 0x3d, 0xee00}}]}) 2033/05/18 03:34:42 triaging input for call #2 syz_mount_image$tmpfs (new signal=2) umount(./5363/file0) [696833ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158540 #0 [696843ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [696845ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12330 #0 [696846ms] -> mount(0x0, 0x20000000, 0x20000080, 0x0, 0x0) #0 [696847ms] <- mount=0x0 errno=14 cover=3259 #0 [696848ms] -> syz_mount_image$tmpfs(0x20000040, 0x200000c0, 0x0, 0x0, 0x0, 0x20, 0x20000140) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=32 opts='uid=0x000000000000ee00,' #0 [696848ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=4182 03:34:42 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000140)={[{@uid={'uid', 0x3d, 0xee00}}]}) 2033/05/18 03:34:42 result hanged=false: umount(./5364/file0) [696868ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158542 #0 [696878ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [696880ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13070 #0 [696882ms] -> mount(0x0, 0x20000000, 0x20000080, 0x0, 0x0) #0 [696883ms] <- mount=0x0 errno=14 cover=3232 #0 [696884ms] -> syz_mount_image$tmpfs(0x20000040, 0x200000c0, 0x0, 0x0, 0x0, 0x20, 0x20000140) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=32 opts='uid=0x000000000000ee00,' #0 [696886ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=10069 03:34:42 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000140)={[{@uid={'uid', 0x3d, 0xee00}}]}) 2033/05/18 03:34:42 result hanged=false: umount(./5365/file0) [696909ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158544 #0 [696919ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [696927ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12329 #0 [696930ms] -> mount(0x0, 0x20000000, 0x20000080, 0x0, 0x0) #0 [696931ms] <- mount=0x0 errno=14 cover=3217 #0 [696931ms] -> syz_mount_image$tmpfs(0x20000040, 0x200000c0, 0x0, 0x0, 0x0, 0x20, 0x20000140) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=32 opts='uid=0x000000000000ee00,' #0 [696932ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=4199 2033/05/18 03:34:42 result hanged=false: 2033/05/18 03:34:42 added new input for call #2 syz_mount_image$tmpfs to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000140)={[{@uid={'uid', 0x3d, 0xee00}}]}) umount(./5366/file0) 03:34:42 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x3, 0x4) bind(r0, &(0x7f0000000180)=@l2tp={0x2, 0x0, @multicast2}, 0x80) close(r0) [696960ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158546 #0 [696968ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [696976ms] <- perf_event_open=0x3 errno=14 cover=11541 #0 [696978ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [696978ms] <- socket$inet_udplite=0x4 errno=14 cover=1624 #0 [696979ms] -> setsockopt$sock_int(0x4, 0x1, 0xf, 0x20000040, 0x4) #0 [696980ms] <- setsockopt$sock_int=0x0 errno=14 cover=133 #0 [696980ms] -> bind(0x4, 0x20000180, 0x80) #0 [696980ms] <- bind=0x0 errno=14 cover=8788 #0 [696981ms] -> close(0x4) #0 [696982ms] <- close=0x0 errno=14 cover=2337 enabling collider #0 [696994ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [696995ms] <- perf_event_open=0x3 errno=14 cover=10421 #0 [696996ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [696997ms] <- socket$inet_udplite=0x4 errno=14 cover=1656 pthread_create failed (errno 11) 2033/05/18 03:34:42 result hanged=false: 2033/05/18 03:34:42 #0: triaging type=7 2033/05/18 03:34:42 triaging input for call #3 bind (new signal=1) 03:34:42 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x3, 0x4) bind(r0, &(0x7f0000000180)=@l2tp={0x2, 0x0, @multicast2}, 0x80) close(r0) [697067ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158648 #0 [697077ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [697078ms] <- perf_event_open=0x3 errno=14 cover=10895 #0 [697080ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [697081ms] <- socket$inet_udplite=0x4 errno=14 cover=5100 #0 [697082ms] -> setsockopt$sock_int(0x4, 0x1, 0xf, 0x20000040, 0x4) #0 [697082ms] <- setsockopt$sock_int=0x0 errno=14 cover=278 #0 [697083ms] -> bind(0x4, 0x20000180, 0x80) #0 [697084ms] <- bind=0x0 errno=14 cover=3394 #0 [697085ms] -> close(0x4) #0 [697085ms] <- close=0x0 errno=14 cover=1873 2033/05/18 03:34:42 result hanged=false: 03:34:42 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x3, 0x4) bind(r0, &(0x7f0000000180)=@l2tp={0x2, 0x0, @multicast2}, 0x80) close(r0) [697119ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158650 #0 [697129ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [697134ms] <- perf_event_open=0x3 errno=14 cover=10567 #0 [697136ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [697137ms] <- socket$inet_udplite=0x4 errno=14 cover=1624 #0 [697138ms] -> setsockopt$sock_int(0x4, 0x1, 0xf, 0x20000040, 0x4) #0 [697138ms] <- setsockopt$sock_int=0x0 errno=14 cover=133 #0 [697139ms] -> bind(0x4, 0x20000180, 0x80) #0 [697139ms] <- bind=0x0 errno=14 cover=489 #0 [697140ms] -> close(0x4) #0 [697140ms] <- close=0x0 errno=14 cover=1873 2033/05/18 03:34:42 result hanged=false: 03:34:42 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x3, 0x4) bind(r0, &(0x7f0000000180)=@l2tp={0x2, 0x0, @multicast2}, 0x80) close(r0) [697176ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158652 #0 [697187ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [697192ms] <- perf_event_open=0x3 errno=14 cover=10382 #0 [697194ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [697197ms] <- socket$inet_udplite=0x4 errno=14 cover=5125 #0 [697198ms] -> setsockopt$sock_int(0x4, 0x1, 0xf, 0x20000040, 0x4) #0 [697198ms] <- setsockopt$sock_int=0x0 errno=14 cover=278 #0 [697199ms] -> bind(0x4, 0x20000180, 0x80) #0 [697199ms] <- bind=0x0 errno=14 cover=1185 #0 [697200ms] -> close(0x4) #0 [697200ms] <- close=0x0 errno=14 cover=1873 2033/05/18 03:34:42 result hanged=false: 2033/05/18 03:34:42 added new input for call #3 bind to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x3, 0x4) bind(r0, &(0x7f0000000180)=@l2tp={0x2, 0x0, @multicast2}, 0x80) close(r0) 03:34:42 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}, {0x0}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x4}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) fcntl$dupfd(r1, 0x406, r1) r2 = fork() ptrace(0x10, r2) migrate_pages(r2, 0x4, &(0x7f0000000200)=0x7a52b9a7, &(0x7f0000000240)=0x1) r3 = getegid() setresgid(r3, r3, 0x0) r4 = fork() r5 = getpgid(r2) ptrace(0x4207, r5) ptrace(0x10, r4) ptrace$peeksig(0x4209, r4, &(0x7f00000007c0)={0x5, 0x1, 0x2}, &(0x7f0000000800)=[{}, {}]) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r0, 0x0, 0x200f5ef, 0x0) [697233ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158654 #0 [697243ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [697247ms] <- perf_event_open=0x3 errno=14 cover=10428 #0 [697249ms] -> syz_mount_image$vfat(0x20000000, 0x200000c0, 0x0, 0x3, 0x20000200, 0x0, 0x20011300) #0 [697251ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=12395 #0 [697251ms] -> chdir(0x20000040) #0 [697252ms] <- chdir=0xffffffffffffffff errno=2 cover=2316 #0 [697252ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [697254ms] <- openat=0x4 errno=14 cover=12428 #0 [697254ms] -> socket$unix(0x1, 0x1, 0x0) #0 [697255ms] <- socket$unix=0x5 errno=14 cover=4326 #0 [697255ms] -> ioctl$sock_SIOCETHTOOL(0x5, 0x8946, 0x20000080) #0 [697257ms] <- ioctl$sock_SIOCETHTOOL=0x0 errno=14 cover=3532 #0 [697257ms] -> socketpair$unix(0x1, 0x1, 0x0, 0x20000040) #0 [697258ms] <- socketpair$unix=0x0 errno=14 cover=8858 #0 [697259ms] -> fcntl$dupfd(0x5, 0x406, 0x5) #0 [697259ms] <- fcntl$dupfd=0x8 errno=14 cover=211 #0 [697259ms] -> fork() #0 [697283ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [697285ms] -> ptrace(0x10, 0x0) #0 [697285ms] <- ptrace=0xffffffffffffffff errno=3 cover=93 #0 [697286ms] -> migrate_pages(0x0, 0x4, 0x20000200, 0x20000240) #0 [697291ms] <- migrate_pages=0x0 errno=14 cover=223286 #0 [697293ms] -> getegid() #0 [697293ms] <- getegid=0x0 errno=14 cover=43 #0 [697293ms] -> setresgid(0x0, 0x0, 0x0) #0 [697293ms] <- setresgid=0x0 errno=14 cover=1787 #0 [697294ms] -> fork() #0 [697316ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [697318ms] -> getpgid(0x0) #0 [697319ms] <- getpgid=0x26bbe errno=14 cover=77 #0 [697319ms] -> ptrace(0x4207, 0x26bbe) #0 [697319ms] <- ptrace=0xffffffffffffffff errno=3 cover=141 #0 [697319ms] -> ptrace(0x10, 0x0) #0 [697319ms] <- ptrace=0xffffffffffffffff errno=3 cover=93 #0 [697319ms] -> ptrace$peeksig(0x4209, 0x0, 0x200007c0, 0x20000800) #0 [697320ms] <- ptrace$peeksig=0xffffffffffffffff errno=3 cover=93 #0 [697320ms] -> openat(0xffffffffffffffff, 0x20000000, 0x0, 0x0) #0 [697322ms] <- openat=0xffffffffffffffff errno=2 cover=3772 #0 [697322ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x200f5ef, 0x0) #0 [697323ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=75 enabling collider #0 [697334ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [697336ms] <- perf_event_open=0x3 errno=14 cover=10710 #0 [697337ms] -> syz_mount_image$vfat(0x20000000, 0x200000c0, 0x0, 0x3, 0x20000200, 0x0, 0x20011300) #0 [697338ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=4751 pthread_create failed (errno 11) 2033/05/18 03:34:42 result hanged=false: 03:34:42 executing program 0: r0 = syz_io_uring_setup(0x1081, &(0x7f00000000c0), &(0x7f0000db9000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @mcast1, 0xf0}}, 0x0) io_uring_enter(r0, 0x56aa, 0x0, 0x0, 0x0, 0x0) [697401ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158758 #0 [697412ms] -> syz_io_uring_setup(0x1081, 0x200000c0, 0x20db9000, 0x20800000, 0x20000000, 0x20000080) #0 [697413ms] <- syz_io_uring_setup=0x3 errno=14 cover=10386 #0 [697414ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [697414ms] <- socket$inet6_udp=0x4 errno=14 cover=1695 #0 [697414ms] -> connect$inet6(0x4, 0x20000040, 0x1c) #0 [697415ms] <- connect$inet6=0xffffffffffffffff errno=101 cover=2583 #0 [697415ms] -> syz_io_uring_submit(0x20db9000, 0x20800000, 0x20000580, 0x0) #0 [697415ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [697415ms] -> io_uring_enter(0x3, 0x56aa, 0x0, 0x0, 0x0, 0x0) #0 [697415ms] <- io_uring_enter=0x1 errno=14 cover=554 enabling collider #0 [697415ms] -> syz_io_uring_setup(0x1081, 0x200000c0, 0x20db9000, 0x20800000, 0x20000000, 0x20000080) #0 [697417ms] <- syz_io_uring_setup=0x3 errno=14 cover=11380 #0 [697417ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [697417ms] <- socket$inet6_udp=0x4 errno=14 cover=1705 pthread_create failed (errno 11) 03:34:42 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@random="bb2dcc1d9820", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0x1, "cc24000005dc"}]}}}}}}, 0x0) 2033/05/18 03:34:42 result hanged=false: [697471ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158860 #0 [697480ms] -> syz_emit_ethernet(0x4e, 0x20000080, 0x0) bb 2d cc 1d 98 20 aa aa aa aa aa 00 86 dd 60 96 15 3f 00 18 3a ff fe 88 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 86 00 a5 1d 00 00 00 00 00 00 00 00 00 00 00 00 05 01 cc 24 00 00 05 dc #0 [697482ms] <- syz_emit_ethernet=0x4e errno=14 cover=23790 enabling collider #0 [697482ms] -> syz_emit_ethernet(0x4e, 0x20000080, 0x0) bb 2d cc 1d 98 20 aa aa aa aa aa 00 86 dd 60 96 15 3f 00 18 3a ff fe 88 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 86 00 a5 1d 00 00 00 00 00 00 00 00 00 00 00 00 05 01 cc 24 00 00 05 dc #0 [697483ms] <- syz_emit_ethernet=0x4e errno=14 cover=23791 2033/05/18 03:34:42 result hanged=false: 03:34:42 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@random="bb2dcc1d9820", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0x1, "cc24000005dc"}]}}}}}}, 0x0) 2033/05/18 03:34:42 #0: triaging type=7 2033/05/18 03:34:42 triaging input for call #0 syz_emit_ethernet (new signal=2) iptable filter/10: resetting iptable mangle/10: resetting [697504ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158862 #0 [697514ms] -> syz_emit_ethernet(0x4e, 0x20000080, 0x0) bb 2d cc 1d 98 20 aa aa aa aa aa 00 86 dd 60 96 15 3f 00 18 3a ff fe 88 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 86 00 a5 1d 00 00 00 00 00 00 00 00 00 00 00 00 05 01 cc 24 00 00 05 dc #0 [697520ms] <- syz_emit_ethernet=0x4e errno=14 cover=24688 2033/05/18 03:34:42 result hanged=false: 03:34:42 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@random="bb2dcc1d9820", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0x1, "cc24000005dc"}]}}}}}}, 0x0) iptable filter/10: resetting iptable mangle/10: resetting [697543ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158864 #0 [697553ms] -> syz_emit_ethernet(0x4e, 0x20000080, 0x0) bb 2d cc 1d 98 20 aa aa aa aa aa 00 86 dd 60 96 15 3f 00 18 3a ff fe 88 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 86 00 a5 1d 00 00 00 00 00 00 00 00 00 00 00 00 05 01 cc 24 00 00 05 dc #0 [697559ms] <- syz_emit_ethernet=0x4e errno=14 cover=23891 03:34:43 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@random="bb2dcc1d9820", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0x1, "cc24000005dc"}]}}}}}}, 0x0) 2033/05/18 03:34:43 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [697582ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158866 #0 [697592ms] -> syz_emit_ethernet(0x4e, 0x20000080, 0x0) bb 2d cc 1d 98 20 aa aa aa aa aa 00 86 dd 60 96 15 3f 00 18 3a ff fe 88 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 86 00 a5 1d 00 00 00 00 00 00 00 00 00 00 00 00 05 01 cc 24 00 00 05 dc #0 [697595ms] <- syz_emit_ethernet=0x4e errno=14 cover=24012 2033/05/18 03:34:43 result hanged=false: 2033/05/18 03:34:43 added new input for call #0 syz_emit_ethernet to corpus: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@random="bb2dcc1d9820", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0x1, "cc24000005dc"}]}}}}}}, 0x0) iptable filter/10: resetting 03:34:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x1, 0x0, 0x4000000) iptable mangle/10: resetting [697627ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158868 #0 [697636ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [697640ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1666 #0 [697640ms] -> setsockopt(0x3, 0xff, 0x1, 0x0, 0x4000000) #0 [697640ms] <- setsockopt=0xffffffffffffffff errno=14 cover=494 enabling collider #0 [697641ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [697641ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1698 03:34:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x4) 2033/05/18 03:34:43 result hanged=false: [697660ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158870 #0 [697669ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [697670ms] <- socket$inet6_tcp=0x3 errno=14 cover=1734 #0 [697671ms] -> shutdown(0x3, 0x4) #0 [697671ms] <- shutdown=0xffffffffffffffff errno=22 cover=71 enabling collider #0 [697673ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [697673ms] <- socket$inet6_tcp=0x3 errno=14 cover=1763 #0 [697674ms] -> shutdown(03:34:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, 0x0, &(0x7f0000003980)) 2033/05/18 03:34:43 result hanged=false: 2033/05/18 03:34:43 poll: candidates=8 inputs=0 signal=0 [697696ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158872 #0 [697706ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [697706ms] <- socket$nl_generic=0x3 errno=14 cover=1390 #0 [697708ms] -> getsockname(0x3, 0x0, 0x20003980) #0 [697708ms] <- getsockname=0x0 errno=14 cover=108 enabling collider #0 [697708ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [697709ms] <- socket$nl_generic=0x3 errno=14 cover=1428 03:34:43 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x12, &(0x7f00000010c0)={@empty}, 0x14) 2033/05/18 03:34:43 result hanged=false: [697730ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158874 #0 [697742ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [697745ms] <- socket$inet6_udplite=0x3 errno=14 cover=1660 #0 [697747ms] -> setsockopt$inet6_IPV6_PKTINFO(0x3, 0x29, 0x12, 0x200010c0, 0x14) #0 [697749ms] <- setsockopt$inet6_IPV6_PKTINFO=0x0 errno=14 cover=154 enabling collider #0 [697750ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [697750ms] <- socket$inet6_udplite=0x3 errno=14 cover=1634 03:34:43 executing program 0: request_key(&(0x7f00000024c0)='logon\x00', &(0x7f0000002500)={'syz', 0x3}, &(0x7f0000002540)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0xfffffffffffffffe) 2033/05/18 03:34:43 result hanged=false: [697769ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158876 #0 [697779ms] -> request_key(0x200024c0, 0x20002500, 0x20002540, 0xfffffffffffffffe) #0 [697780ms] <- request_key=0xffffffffffffffff errno=22 cover=2539 enabling collider #0 [697781ms] -> request_key(0x200024c0, 0x20002500, 0x20002540, 0xfffffffffffffffe) #0 [697781ms] <- request_key=0xffffffffffffffff errno=22 cover=1837 03:34:43 executing program 0: request_key(&(0x7f00000024c0)='logon\x00', &(0x7f0000002500)={'syz', 0x3}, &(0x7f0000002540)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0xfffffffffffffffe) 2033/05/18 03:34:43 result hanged=false: 2033/05/18 03:34:43 #0: triaging type=7 2033/05/18 03:34:43 triaging input for call #0 request_key (new signal=2) [697801ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158878 #0 [697811ms] -> request_key(0x200024c0, 0x20002500, 0x20002540, 0xfffffffffffffffe) #0 [697815ms] <- request_key=0xffffffffffffffff errno=22 cover=2562 03:34:43 executing program 0: request_key(&(0x7f00000024c0)='logon\x00', &(0x7f0000002500)={'syz', 0x3}, &(0x7f0000002540)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0xfffffffffffffffe) 2033/05/18 03:34:43 result hanged=false: [697835ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158880 #0 [697845ms] -> request_key(0x200024c0, 0x20002500, 0x20002540, 0xfffffffffffffffe) #0 [697846ms] <- request_key=0xffffffffffffffff errno=22 cover=2488 03:34:43 executing program 0: request_key(&(0x7f00000024c0)='logon\x00', &(0x7f0000002500)={'syz', 0x3}, &(0x7f0000002540)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0xfffffffffffffffe) 2033/05/18 03:34:43 result hanged=false: [697865ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158882 #0 [697875ms] -> request_key(0x200024c0, 0x20002500, 0x20002540, 0xfffffffffffffffe) #0 [697879ms] <- request_key=0xffffffffffffffff errno=22 cover=2561 2033/05/18 03:34:43 result hanged=false: 2033/05/18 03:34:43 added new input for call #0 request_key to corpus: request_key(&(0x7f00000024c0)='logon\x00', &(0x7f0000002500)={'syz', 0x3}, &(0x7f0000002540)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0xfffffffffffffffe) 03:34:43 executing program 0: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [697905ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158884 #0 [697913ms] -> syz_mount_image$vfat(0x0, 0x200002c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [697920ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=12359 #0 [697922ms] -> openat$dir(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [697922ms] <- openat$dir=0x3 errno=14 cover=961 #0 [697922ms] -> rmdir(0x200000c0) #0 [697923ms] <- rmdir=0x0 errno=14 cover=3423 #0 [697924ms] -> openat(0x3, 0x20000040, 0x0, 0x0) #0 [697924ms] <- openat=0xffffffffffffffff errno=2 cover=940 enabling collider #0 [697925ms] -> syz_mount_image$vfat(0x0, 0x200002c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [697927ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=12466 #0 [697927ms] -> openat$dir(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [697928ms] <- openat$dir=0x3 errno=14 cover=1007 pthread_create failed (errno 11) 03:34:43 executing program 0: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2033/05/18 03:34:43 result hanged=false: 2033/05/18 03:34:43 #0: triaging type=7 2033/05/18 03:34:43 triaging input for call #2 rmdir (new signal=1) [697982ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158986 #0 [697991ms] -> syz_mount_image$vfat(0x0, 0x200002c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [697994ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=12748 #0 [697995ms] -> openat$dir(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [697996ms] <- openat$dir=0x3 errno=14 cover=971 #0 [697996ms] -> rmdir(0x200000c0) #0 [697996ms] <- rmdir=0x0 errno=14 cover=3393 #0 [697996ms] -> openat(0x3, 0x20000040, 0x0, 0x0) #0 [697997ms] <- openat=0xffffffffffffffff errno=2 cover=962 03:34:43 executing program 0: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2033/05/18 03:34:43 result hanged=false: [698016ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158988 #0 [698026ms] -> syz_mount_image$vfat(0x0, 0x200002c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [698027ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=12715 #0 [698030ms] -> openat$dir(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [698030ms] <- openat$dir=0x3 errno=14 cover=975 #0 [698030ms] -> rmdir(0x200000c0) #0 [698031ms] <- rmdir=0x0 errno=14 cover=3389 #0 [698032ms] -> openat(0x3, 0x20000040, 0x0, 0x0) #0 [698032ms] <- openat=0xffffffffffffffff errno=2 cover=973 03:34:43 executing program 0: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2033/05/18 03:34:43 result hanged=false: [698053ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158990 #0 [698063ms] -> syz_mount_image$vfat(0x0, 0x200002c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [698071ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=12734 #0 [698073ms] -> openat$dir(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [698074ms] <- openat$dir=0x3 errno=14 cover=8647 #0 [698075ms] -> rmdir(0x200000c0) #0 [698076ms] <- rmdir=0x0 errno=14 cover=3371 #0 [698076ms] -> openat(0x3, 0x20000040, 0x0, 0x0) #0 [698077ms] <- openat=0xffffffffffffffff errno=2 cover=928 2033/05/18 03:34:43 result hanged=false: 2033/05/18 03:34:43 added new input for call #2 rmdir to corpus: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 03:34:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000440)) [698101ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158992 #0 [698110ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [698113ms] <- syz_init_net_socket$bt_hci=0xffffffffffffffff errno=2 cover=1224 #0 [698114ms] -> ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x20000440) #0 [698114ms] <- ioctl$sock_bt_hci=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [698114ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [698114ms] <- syz_init_net_socket$bt_hci=0xffffffffffffffff errno=2 cover=1202 03:34:43 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000005740), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 2033/05/18 03:34:43 result hanged=false: [698134ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158994 #0 [698145ms] -> syz_genetlink_get_family_id$ethtool(0x20005740, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [698146ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=9563 #0 [698147ms] -> syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [698148ms] <- syz_genetlink_get_family_id$ethtool=0xffffffffffffffff errno=14 cover=2840 enabling collider #0 [698149ms] -> syz_genetlink_get_family_id$ethtool(0x20005740, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [698151ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=7956 03:34:43 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000005740), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 2033/05/18 03:34:43 result hanged=false: 2033/05/18 03:34:43 #0: triaging type=7 2033/05/18 03:34:43 triaging input for call #0 syz_genetlink_get_family_id$ethtool (new signal=2) [698171ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158996 #0 [698180ms] -> syz_genetlink_get_family_id$ethtool(0x20005740, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [698182ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=9675 #0 [698184ms] -> syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [698184ms] <- syz_genetlink_get_family_id$ethtool=0xffffffffffffffff errno=14 cover=2786 2033/05/18 03:34:43 result hanged=false: 03:34:43 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000005740), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) [698203ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 158998 #0 [698215ms] -> syz_genetlink_get_family_id$ethtool(0x20005740, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [698216ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=9553 #0 [698218ms] -> syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [698218ms] <- syz_genetlink_get_family_id$ethtool=0xffffffffffffffff errno=14 cover=3408 03:34:43 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000005740), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 2033/05/18 03:34:43 result hanged=false: [698238ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159000 #0 [698247ms] -> syz_genetlink_get_family_id$ethtool(0x20005740, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [698248ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=9579 #0 [698250ms] -> syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [698250ms] <- syz_genetlink_get_family_id$ethtool=0xffffffffffffffff errno=14 cover=2830 2033/05/18 03:34:43 result hanged=false: 2033/05/18 03:34:43 added new input for call #0 syz_genetlink_get_family_id$ethtool to corpus: syz_genetlink_get_family_id$ethtool(&(0x7f0000005740), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 03:34:43 executing program 0: clock_settime(0x5, 0x0) io_setup(0xa5ba, &(0x7f0000000180)) io_getevents(0x0, 0xd8, 0x0, 0x0, 0x0) io_setup(0x0, &(0x7f0000000480)) [698295ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159002 #0 [698304ms] -> clock_settime(0x5, 0x0) #0 [698304ms] <- clock_settime=0xffffffffffffffff errno=22 cover=38 #0 [698305ms] -> io_setup(0xa5ba, 0x20000180) #0 [698313ms] <- io_setup=0x0 errno=14 cover=186162 #0 [698317ms] -> io_getevents(0x0, 0xd8, 0x0, 0x0, 0x0) #0 [698318ms] <- io_getevents=0xffffffffffffffff errno=22 cover=224 #0 [698319ms] -> io_setup(0x0, 0x20000480) #0 [698319ms] <- io_setup=0xffffffffffffffff errno=22 cover=41 enabling collider #0 [698320ms] -> clock_settime(0x5, 0x0) #0 [698320ms] <- clock_settime=0xffffffffffffffff errno=22 cover=38 #0 [698321ms] -> io_setup(0xa5ba, 0x20000180) #0 [698321ms] <- io_setup=0xffffffffffffffff errno=22 cover=40 pthread_create failed (errno 11) 03:34:43 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='debugfs\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0xc020, &(0x7f0000000140)={[{@fat=@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) 2033/05/18 03:34:43 result hanged=false: [698387ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159104 #0 [698396ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [698399ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13553 #0 [698400ms] -> mount(0x0, 0x20000740, 0x20000780, 0x0, 0x0) #0 [698401ms] <- mount=0x0 errno=14 cover=3264 #0 [698402ms] -> syz_mount_image$msdos(0x20000200, 0x20000240, 0x0, 0x0, 0x0, 0xc020, 0x20000140) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='msdos' flags=49184 opts='uid=0xffffffffffffffff,' syz_mount_image > mount error: 22 #0 [698402ms] <- syz_mount_image$msdos=0xffffffffffffffff errno=22 cover=3340 enabling collider #0 [698403ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [698403ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1374 #0 [698404ms] -> mount(0x0, 0x20000740, 0x20000780, 0x0, 0x0) #0 [698404ms] <- mount=0xffffffffffffffff errno=16 cover=3366 pthread_create failed (errno 11) 2033/05/18 03:34:43 result hanged=false: 2033/05/18 03:34:43 #0: triaging type=7 umount(./5395/file0) 03:34:43 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='debugfs\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0xc020, &(0x7f0000000140)={[{@fat=@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) 2033/05/18 03:34:43 triaging input for call #0 syz_mount_image$ext4 (new signal=3) [698460ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159206 #0 [698470ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [698479ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13560 #0 [698481ms] -> mount(0x0, 0x20000740, 0x20000780, 0x0, 0x0) #0 [698482ms] <- mount=0x0 errno=14 cover=3234 #0 [698482ms] -> syz_mount_image$msdos(0x20000200, 0x20000240, 0x0, 0x0, 0x0, 0xc020, 0x20000140) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='msdos' flags=49184 opts='uid=0xffffffffffffffff,' syz_mount_image > mount error: 22 #0 [698483ms] <- syz_mount_image$msdos=0xffffffffffffffff errno=22 cover=3384 2033/05/18 03:34:43 result hanged=false: 03:34:43 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='debugfs\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0xc020, &(0x7f0000000140)={[{@fat=@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) umount(./5396/file0) [698505ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159208 #0 [698514ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [698519ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13495 #0 [698521ms] -> mount(0x0, 0x20000740, 0x20000780, 0x0, 0x0) #0 [698522ms] <- mount=0x0 errno=14 cover=3214 #0 [698523ms] -> syz_mount_image$msdos(0x20000200, 0x20000240, 0x0, 0x0, 0x0, 0xc020, 0x20000140) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='msdos' flags=49184 opts='uid=0xffffffffffffffff,' syz_mount_image > mount error: 22 #0 [698524ms] <- syz_mount_image$msdos=0xffffffffffffffff errno=22 cover=3400 03:34:43 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='debugfs\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0xc020, &(0x7f0000000140)={[{@fat=@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) 2033/05/18 03:34:43 result hanged=false: umount(./5397/file0) [698546ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159210 #0 [698557ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [698563ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13499 #0 [698565ms] -> mount(0x0, 0x20000740, 0x20000780, 0x0, 0x0) #0 [698566ms] <- mount=0x0 errno=14 cover=3257 #0 [698566ms] -> syz_mount_image$msdos(0x20000200, 0x20000240, 0x0, 0x0, 0x0, 0xc020, 0x20000140) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='msdos' flags=49184 opts='uid=0xffffffffffffffff,' syz_mount_image > mount error: 22 #0 [698567ms] <- syz_mount_image$msdos=0xffffffffffffffff errno=22 cover=3411 2033/05/18 03:34:44 result hanged=false: umount(./5398/file0) 2033/05/18 03:34:44 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='debugfs\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0xc020, &(0x7f0000000140)={[{@fat=@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) 03:34:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2(&(0x7f0000001080)={0x0, 0x0}, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) [698641ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2033/05/18 03:34:44 poll: candidates=8 inputs=0 signal=0 spawned worker pid 159212 #0 [698649ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000080) #0 [698679ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=215236 #0 [698685ms] -> pipe2(0x20001080, 0x0) #0 [698688ms] <- pipe2=0x0 errno=14 cover=1696 #0 [698690ms] -> vmsplice(0x4, 0x0, 0x0, 0x0) #0 [698691ms] <- vmsplice=0x0 errno=14 cover=94 enabling collider #0 [698692ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000080) #0 [698693ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=2430 #0 [698693ms] -> pipe2(0x20001080, 0x0) #0 [698694ms] <- pipe2=0x0 errno=14 cover=1273 pthread_create failed (errno 11) 03:34:44 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001200)=""/4081, 0x742) getdents(r0, &(0x7f00000001c0)=""/173, 0xad) 2033/05/18 03:34:44 result hanged=false: [698748ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159314 #0 [698758ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [698762ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13044 #0 [698764ms] -> mount(0x0, 0x20000180, 0x20000040, 0x0, 0x0) #0 [698768ms] <- mount=0x0 errno=14 cover=13420 #0 [698769ms] -> openat$dir(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [698769ms] <- openat$dir=0x3 errno=14 cover=992 #0 [698770ms] -> getdents64(0x3, 0x20001200, 0x742) #0 [698770ms] <- getdents64=0x730 errno=14 cover=2730 #0 [698771ms] -> getdents(0x3, 0x200001c0, 0xad) #0 [698773ms] <- getdents=0x98 errno=14 cover=4408 enabling collider #0 [698773ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [698774ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1414 #0 [698775ms] -> mount(0x0, 0x20000180, 0x20000040, 0x0, 0x0) #0 [698778ms] <- mount=0x0 errno=14 cover=13570 pthread_create failed (errno 11) 03:34:44 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001200)=""/4081, 0x742) getdents(r0, &(0x7f00000001c0)=""/173, 0xad) umount(./5400/file0) 2033/05/18 03:34:44 result hanged=false: 2033/05/18 03:34:44 #0: triaging type=7 2033/05/18 03:34:44 triaging input for call #4 getdents (new signal=1) umount(./5400/file0) [698833ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159416 #0 [698844ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [698850ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12910 #0 [698852ms] -> mount(0x0, 0x20000180, 0x20000040, 0x0, 0x0) #0 [698855ms] <- mount=0x0 errno=14 cover=13434 #0 [698856ms] -> openat$dir(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [698856ms] <- openat$dir=0x3 errno=14 cover=1013 #0 [698856ms] -> getdents64(0x3, 0x20001200, 0x742) #0 [698856ms] <- getdents64=0x730 errno=14 cover=2687 #0 [698857ms] -> getdents(0x3, 0x200001c0, 0xad) #0 [698857ms] <- getdents=0x98 errno=14 cover=4330 03:34:44 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001200)=""/4081, 0x742) getdents(r0, &(0x7f00000001c0)=""/173, 0xad) 2033/05/18 03:34:44 result hanged=false: umount(./5401/file0) [698879ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159418 #0 [698887ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [698891ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12862 #0 [698893ms] -> mount(0x0, 0x20000180, 0x20000040, 0x0, 0x0) #0 [698896ms] <- mount=0x0 errno=14 cover=13528 #0 [698898ms] -> openat$dir(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [698898ms] <- openat$dir=0x3 errno=14 cover=994 #0 [698899ms] -> getdents64(0x3, 0x20001200, 0x742) #0 [698899ms] <- getdents64=0x730 errno=14 cover=3318 #0 [698900ms] -> getdents(0x3, 0x200001c0, 0xad) #0 [698901ms] <- getdents=0x98 errno=14 cover=4391 03:34:44 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001200)=""/4081, 0x742) getdents(r0, &(0x7f00000001c0)=""/173, 0xad) 2033/05/18 03:34:44 result hanged=false: umount(./5402/file0) [698924ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159420 #0 [698934ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [698940ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12866 #0 [698942ms] -> mount(0x0, 0x20000180, 0x20000040, 0x0, 0x0) #0 [698944ms] <- mount=0x0 errno=14 cover=13432 #0 [698945ms] -> openat$dir(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [698945ms] <- openat$dir=0x3 errno=14 cover=993 #0 [698946ms] -> getdents64(0x3, 0x20001200, 0x742) #0 [698946ms] <- getdents64=0x730 errno=14 cover=3318 #0 [698946ms] -> getdents(0x3, 0x200001c0, 0xad) #0 [698947ms] <- getdents=0x98 errno=14 cover=4352 2033/05/18 03:34:44 result hanged=false: 2033/05/18 03:34:44 added new input for call #4 getdents to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001200)=""/4081, 0x742) getdents(r0, &(0x7f00000001c0)=""/173, 0xad) umount(./5403/file0) 03:34:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=[{0x10, 0x1, 0x2}], 0x10}}], 0x2, 0x0) [698970ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159422 #0 [698978ms] -> socket$nl_route(0x10, 0x3, 0x0) #0 [698980ms] <- socket$nl_route=0x3 errno=14 cover=1443 #0 [698981ms] -> sendmmsg(0x3, 0x20001400, 0x2, 0x0) #0 [698981ms] <- sendmmsg=0x1 errno=14 cover=1060 enabling collider #0 [698981ms] -> socket$nl_route(0x10, 0x3, 0x0) #0 [698982ms] <- socket$nl_route=0x3 errno=14 cover=1453 2033/05/18 03:34:44 result hanged=false: 03:34:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0xfffffffffffffffe}], 0x0, &(0x7f0000000040)) chdir(&(0x7f0000000b00)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x26142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) sendfile(r0, r1, 0x0, 0x8400007ffffff9) [699002ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159424 #0 [699012ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x0, 0x2, 0x20000080, 0x0, 0x20000040) #0 [699013ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=4961 #0 [699013ms] -> chdir(0x20000b00) #0 [699013ms] <- chdir=0xffffffffffffffff errno=2 cover=1059 #0 [699013ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x26142, 0x0) #0 [699014ms] <- openat=0x3 errno=14 cover=6683 #0 [699014ms] -> openat(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [699014ms] <- openat=0xffffffffffffffff errno=2 cover=1177 #0 [699014ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [699015ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [699015ms] -> sendfile(0x3, 0xffffffffffffffff, 0x0, 0x8400007ffffff9) #0 [699015ms] <- sendfile=0xffffffffffffffff errno=9 cover=48 enabling collider #0 [699015ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x0, 0x2, 0x20000080, 0x0, 0x20000040) #0 [699015ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=4910 #0 [699016ms] -> chdir(0x20000b00) #0 [699016ms] <- chdir=0xffffffffffffffff errno=2 cover=480 pthread_create failed (errno 11) 2033/05/18 03:34:44 result hanged=false: 03:34:44 executing program 0: socket(0x11, 0xa, 0x2) [699067ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159526 #0 [699076ms] -> socket(0x11, 0xa, 0x2) #0 [699079ms] <- socket=0x3 errno=14 cover=1762 enabling collider #0 [699084ms] -> socket(0x11, 0xa, 0x2) #0 [699084ms] <- socket=0x3 errno=14 cover=1778 03:34:44 executing program 0: clone3(&(0x7f00000003c0)={0xc4800400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2033/05/18 03:34:44 result hanged=false: [699108ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159528 #0 [699118ms] -> clone3(0x200003c0, 0x58) #0 [699154ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 enabling collider #0 [699159ms] -> clone3(0x200003c0, 0x58) #0 [699198ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 2033/05/18 03:34:44 result hanged=false: 03:34:44 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000840)={0x11, 0x5, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) [699219ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159532 #0 [699230ms] -> socket$packet(0x11, 0x2, 0x300) #0 [699230ms] <- socket$packet=0x3 errno=14 cover=1761 #0 [699234ms] -> bind$packet(0x3, 0x20000840, 0x14) #0 [699240ms] <- bind$packet=0x0 errno=14 cover=264 enabling collider #0 [699246ms] -> socket$packet(0x11, 0x2, 0x300) #0 [699249ms] <- socket$packet=0x3 errno=14 cover=1741 #0 [699250ms] -> bind$packet(0x3, 0x20000840, 0x14) #0 [699252ms] <- bind$packet=0xffffffffffffffff errno=9 cover=49 2033/05/18 03:34:44 result hanged=false: 03:34:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}, 0x404c008) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), 0x4) [699273ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159534 #0 [699283ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [699287ms] <- socket$inet6_udp=0x3 errno=14 cover=1684 #0 [699288ms] -> sendmsg$inet(0x3, 0x200000c0, 0x404c008) #0 [699299ms] <- sendmsg$inet=0x0 errno=14 cover=929 #0 [699299ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x1, 0x20000040, 0x4) #0 [699300ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=744 enabling collider #0 [699300ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [699300ms] <- socket$inet6_udp=0x3 errno=14 cover=1694 #0 [699301ms] -> sendmsg$inet(0x3, 0x200000c0, 0x404c008) #0 [699301ms] <- sendmsg$inet=0x0 errno=14 cover=832 pthread_create failed (errno 11) 2033/05/18 03:34:44 result hanged=false: 03:34:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xc, 0x15, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x28}}, 0x0) 2033/05/18 03:34:44 poll: candidates=8 inputs=0 signal=0 iptable filter/2: resetting iptable mangle/2: resetting [699358ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159636 #0 [699367ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [699370ms] <- socket$netlink=0x3 errno=14 cover=1454 #0 [699372ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) [ 1449.350542] netlink: 'syz-executor.0': attribute type 21 has an invalid length. #0 [699378ms] <- sendmsg$nl_generic=0x28 errno=14 cover=8099 enabling collider #0 [699379ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [699379ms] <- socket$netlink=0x3 errno=14 cover=1532 2033/05/18 03:34:44 result hanged=false: 03:34:44 executing program 0: syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) [699402ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159638 #0 [699412ms] -> syz_genetlink_get_family_id$nl802154(0x20000600, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [699413ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=9210 enabling collider #0 [699413ms] -> syz_genetlink_get_family_id$nl802154(0x20000600, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [699414ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=7593 2033/05/18 03:34:44 result hanged=false: 03:34:44 executing program 0: clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f0000000640), 0x0, {}, &(0x7f00000006c0)=""/200, 0xc8, 0x0, 0x0}, 0x58) [699434ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159640 #0 [699444ms] -> clone3(0x20001800, 0x58) #0 [699465ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 enabling collider #0 [699468ms] -> clone3(0x20001800, 0x58) #0 [699488ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 03:34:44 executing program 0: clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f0000000640), 0x0, {}, &(0x7f00000006c0)=""/200, 0xc8, 0x0, 0x0}, 0x58) 2033/05/18 03:34:44 result hanged=false: 2033/05/18 03:34:44 #0: triaging type=7 2033/05/18 03:34:44 triaging input for call #0 clone3 (new signal=2) [699508ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159644 #0 [699517ms] -> clone3(0x20001800, 0x58) #0 [699535ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 03:34:45 executing program 0: clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f0000000640), 0x0, {}, &(0x7f00000006c0)=""/200, 0xc8, 0x0, 0x0}, 0x58) 2033/05/18 03:34:45 result hanged=false: [699570ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159647 #0 [699579ms] -> clone3(0x20001800, 0x58) #0 [699596ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 2033/05/18 03:34:45 result hanged=false: 03:34:45 executing program 0: clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f0000000640), 0x0, {}, &(0x7f00000006c0)=""/200, 0xc8, 0x0, 0x0}, 0x58) [699630ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159650 #0 [699639ms] -> clone3(0x20001800, 0x58) #0 [699660ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 2033/05/18 03:34:45 result hanged=false: 2033/05/18 03:34:45 added new input for call #0 clone3 to corpus: clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f0000000640), 0x0, {}, &(0x7f00000006c0)=""/200, 0xc8, 0x0, 0x0}, 0x58) 03:34:45 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x2c932, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x2, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000040)) [699698ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159653 #0 [699707ms] -> mmap$IORING_OFF_SQES(0x20ffb000, 0x4000, 0x0, 0x2c932, 0xffffffffffffffff, 0x10000000) #0 [699707ms] <- mmap$IORING_OFF_SQES=0x20ffb000 errno=14 cover=1463 #0 [699708ms] -> syz_io_uring_setup(0x2, 0x200001c0, 0x20ffb000, 0x20ffe000, 0x20000340, 0x20000040) #0 [699710ms] <- syz_io_uring_setup=0x3 errno=14 cover=6778 enabling collider #0 [699711ms] -> mmap$IORING_OFF_SQES(0x20ffb000, 0x4000, 0x0, 0x2c932, 0xffffffffffffffff, 0x10000000) #0 [699715ms] <- mmap$IORING_OFF_SQES=0x20ffb000 errno=14 cover=1658 03:34:45 executing program 0: clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2033/05/18 03:34:45 result hanged=false: [699736ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159655 #0 [699746ms] -> clone3(0x20001280, 0x58) #0 [699766ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 enabling collider #0 [699769ms] -> clone3(0x20001280, 0x58) #0 [699787ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 03:34:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000000080)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@local}, {@in6=@remote, 0x0, 0x33}, @in=@local}, 0x4}}, 0xf8}}, 0x0) 2033/05/18 03:34:45 result hanged=false: [699808ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159659 #0 [699819ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [699822ms] <- socket$nl_xfrm=0x3 errno=14 cover=1397 #0 [699824ms] -> sendmsg$nl_xfrm(0x3, 0x200024c0, 0x0) #0 [699826ms] <- sendmsg$nl_xfrm=0xf8 errno=14 cover=1513 enabling collider #0 [699827ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [699828ms] <- socket$nl_xfrm=0x3 errno=14 cover=1446 2033/05/18 03:34:45 result hanged=false: 03:34:45 executing program 0: ioctl$sock_proto_private(0xffffffffffffffff, 0x0, &(0x7f0000000000)="51e252c23542e9c432de5065ce9357115d") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) dup3(r1, r0, 0x0) [699848ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159661 #0 [699857ms] -> ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x20000000) #0 [699858ms] <- ioctl$sock_proto_private=0xffffffffffffffff errno=9 cover=45 #0 [699858ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [699858ms] <- openat$tun=0xffffffffffffffff errno=2 cover=1191 #0 [699859ms] -> ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, 0x20000000) #0 [699859ms] <- ioctl$TUNSETQUEUE=0xffffffffffffffff errno=9 cover=45 #0 [699859ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [699865ms] <- perf_event_open=0x3 errno=14 cover=9316 #0 [699865ms] -> socket$inet(0x2, 0xa, 0x0) #0 [699867ms] <- socket$inet=0x4 errno=14 cover=5045 #0 [699867ms] -> dup3(0x4, 0xffffffffffffffff, 0x0) #0 [699868ms] <- dup3=0xffffffffffffffff errno=9 cover=37 enabling collider #0 [699887ms] -> ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x20000000) #0 [699887ms] <- ioctl$sock_proto_private=0xffffffffffffffff errno=9 cover=45 #0 [699888ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [699889ms] <- openat$tun=0xffffffffffffffff errno=2 cover=1200 pthread_create failed (errno 11) 03:34:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 2033/05/18 03:34:45 result hanged=false: [699943ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159763 #0 [699953ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [699956ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1677 #0 [699958ms] -> setsockopt$SO_ATTACH_FILTER(0x3, 0x1, 0x1a, 0x20000080, 0x10) #0 [699963ms] <- setsockopt$SO_ATTACH_FILTER=0x0 errno=14 cover=14947 enabling collider #0 [699963ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [699964ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1698 2033/05/18 03:34:45 result hanged=false: 03:34:45 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) 2033/05/18 03:34:45 poll: candidates=8 inputs=0 signal=0 [699989ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159765 #0 [699998ms] -> sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x9999999999999999, 0x0) #0 [699999ms] <- sendfile=0xffffffffffffffff errno=14 cover=50 enabling collider #0 [699999ms] -> sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x9999999999999999, 0x0) #0 [699999ms] <- sendfile=0xffffffffffffffff errno=14 cover=50 2033/05/18 03:34:45 result hanged=false: 03:34:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x121840300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}, 0x58) [700020ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159767 #0 [700031ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [700032ms] <- perf_event_open=0x3 errno=14 cover=8386 #0 [700033ms] -> clone3(0x20000380, 0x58) #0 [700034ms] <- clone3=0xffffffffffffffff errno=22 cover=13385 enabling collider #0 [700049ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [700051ms] <- perf_event_open=0x3 errno=14 cover=8216 #0 [700051ms] -> clone3(0x20000380, 0x58) #0 [700052ms] <- clone3=0xffffffffffffffff errno=22 cover=4785 2033/05/18 03:34:45 result hanged=false: 2033/05/18 03:34:45 #0: triaging type=7 03:34:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x121840300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}, 0x58) 2033/05/18 03:34:45 triaging input for call #0 perf_event_open (new signal=2) [700076ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159769 #0 [700088ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [700089ms] <- perf_event_open=0x3 errno=14 cover=8344 #0 [700090ms] -> clone3(0x20000380, 0x58) #0 [700091ms] <- clone3=0xffffffffffffffff errno=22 cover=14174 03:34:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x121840300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}, 0x58) 2033/05/18 03:34:45 result hanged=false: [700131ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159771 #0 [700144ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [700145ms] <- perf_event_open=0x3 errno=14 cover=8697 #0 [700146ms] -> clone3(0x20000380, 0x58) #0 [700147ms] <- clone3=0xffffffffffffffff errno=22 cover=14928 03:34:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x121840300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}, 0x58) 2033/05/18 03:34:45 result hanged=false: [700183ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159773 #0 [700192ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [700195ms] <- perf_event_open=0x3 errno=14 cover=9077 #0 [700196ms] -> clone3(0x20000380, 0x58) #0 [700196ms] <- clone3=0xffffffffffffffff errno=22 cover=13358 2033/05/18 03:34:45 result hanged=false: 2033/05/18 03:34:45 added new input for call #0 perf_event_open to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x121840300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}, 0x58) 03:34:45 executing program 0: r0 = fsopen(&(0x7f0000000700)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000740)='ip6_vti0\x00', &(0x7f0000000780)='batadv\x00', 0x0) [700232ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159775 #0 [700240ms] -> fsopen(0x20000700, 0x0) #0 [700243ms] <- fsopen=0x3 errno=14 cover=956 #0 [700245ms] -> fsconfig$FSCONFIG_SET_STRING(0x3, 0x1, 0x20000740, 0x20000780, 0x0) #0 [700245ms] <- fsconfig$FSCONFIG_SET_STRING=0xffffffffffffffff errno=22 cover=1343 enabling collider #0 [700246ms] -> fsopen(0x20000700, 0x0) #0 [700246ms] <- fsopen=0x3 errno=14 cover=1010 03:34:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0x56, 0x8, {0x15, 0x8, 0x0, 0x0, 0x4a, "81de627bd3176849e6ac67347b75f2f96704e2f4ba3ff34ee6f3030b90fba088222c3ff39438fc09583cf44a80ca63378a5e0337631f09bd90dc866e28212215056fb08ac5a60bbd962b4b5b474c9f68ebed033fb813b1b677780cea63fd8b44e8073f7418413d6e134bd7a253cbc544b6fb405e9f"}}, @etimer_thresh={0x16}, @replay_thresh={0x8}, @proto={0x26}, @XFRMA_IF_ID={0x8}]}, 0x138}}, 0x0) 2033/05/18 03:34:45 result hanged=false: [700264ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159777 #0 [700274ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [700277ms] <- socket$nl_xfrm=0x3 errno=14 cover=1408 #0 [700279ms] -> sendmsg$nl_xfrm(0x3, 0x20000500, 0x0) [ 1450.257406] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [700283ms] <- sendmsg$nl_xfrm=0x138 errno=14 cover=3393 enabling collider #0 [700284ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [700284ms] <- socket$nl_xfrm=0x3 errno=14 cover=1483 03:34:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) fork() syz_io_uring_complete(r1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 2033/05/18 03:34:45 result hanged=false: [700304ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159779 #0 [700315ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [700317ms] <- perf_event_open=0x3 errno=14 cover=8367 #0 [700318ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [700319ms] <- openat=0x4 errno=14 cover=12675 #0 [700320ms] -> ftruncate(0x4, 0x4) #0 [700320ms] <- ftruncate=0x0 errno=14 cover=3271 #0 [700321ms] -> mmap$IORING_OFF_SQ_RING(0x20ffd000, 0x3000, 0xa, 0x13, 0x4, 0x0) #0 [700325ms] <- mmap$IORING_OFF_SQ_RING=0x20ffd000 errno=14 cover=58861 #0 [700326ms] -> fork() #0 [700349ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [700351ms] -> syz_io_uring_complete(0x20ffd000) #0 [700352ms] <- syz_io_uring_complete=0xffffffffffffffff errno=14 cover=7234 #0 [700352ms] -> ioctl$EXT4_IOC_SWAP_BOOT(0x4, 0x6611) #0 [700356ms] <- ioctl$EXT4_IOC_SWAP_BOOT=0x0 errno=14 cover=19448 enabling collider #0 [700367ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [700368ms] <- perf_event_open=0x3 errno=14 cover=8585 #0 [700369ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [700369ms] <- openat=0xffffffffffffffff errno=17 cover=2912 pthread_create failed (errno 11) 03:34:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) fork() syz_io_uring_complete(r1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 2033/05/18 03:34:45 result hanged=false: 2033/05/18 03:34:45 #0: triaging type=7 2033/05/18 03:34:45 triaging input for call #6 ioctl$EXT4_IOC_SWAP_BOOT (new signal=3) [700438ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159882 #0 [700448ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [700449ms] <- perf_event_open=0x3 errno=14 cover=8284 #0 [700450ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [700452ms] <- openat=0x4 errno=14 cover=12480 #0 [700454ms] -> ftruncate(0x4, 0x4) #0 [700454ms] <- ftruncate=0x0 errno=14 cover=3231 #0 [700455ms] -> mmap$IORING_OFF_SQ_RING(0x20ffd000, 0x3000, 0xa, 0x13, 0x4, 0x0) #0 [700457ms] <- mmap$IORING_OFF_SQ_RING=0x20ffd000 errno=14 cover=4841 #0 [700458ms] -> fork() #0 [700482ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [700496ms] -> syz_io_uring_complete(0x20ffd000) #0 [700498ms] <- syz_io_uring_complete=0xffffffffffffffff errno=14 cover=6553 #0 [700501ms] -> ioctl$EXT4_IOC_SWAP_BOOT(0x4, 0x6611) #0 [700505ms] <- ioctl$EXT4_IOC_SWAP_BOOT=0x0 errno=14 cover=9735 03:34:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) fork() syz_io_uring_complete(r1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 2033/05/18 03:34:45 result hanged=false: [700538ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159885 #0 [700549ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [700550ms] <- perf_event_open=0x3 errno=14 cover=8347 #0 [700551ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [700553ms] <- openat=0x4 errno=14 cover=12503 #0 [700555ms] -> ftruncate(0x4, 0x4) #0 [700555ms] <- ftruncate=0x0 errno=14 cover=3231 #0 [700557ms] -> mmap$IORING_OFF_SQ_RING(0x20ffd000, 0x3000, 0xa, 0x13, 0x4, 0x0) #0 [700558ms] <- mmap$IORING_OFF_SQ_RING=0x20ffd000 errno=14 cover=5084 #0 [700559ms] -> fork() #0 [700582ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [700597ms] -> syz_io_uring_complete(0x20ffd000) #0 [700598ms] <- syz_io_uring_complete=0xffffffffffffffff errno=14 cover=7343 #0 [700600ms] -> ioctl$EXT4_IOC_SWAP_BOOT(0x4, 0x6611) #0 [700602ms] <- ioctl$EXT4_IOC_SWAP_BOOT=0x0 errno=14 cover=17452 03:34:46 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) fork() syz_io_uring_complete(r1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 2033/05/18 03:34:46 result hanged=false: [700632ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159888 #0 [700641ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [700643ms] <- perf_event_open=0x3 errno=14 cover=8478 #0 [700644ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [700646ms] <- openat=0x4 errno=14 cover=12406 #0 [700647ms] -> ftruncate(0x4, 0x4) #0 [700647ms] <- ftruncate=0x0 errno=14 cover=3231 #0 [700648ms] -> mmap$IORING_OFF_SQ_RING(0x20ffd000, 0x3000, 0xa, 0x13, 0x4, 0x0) #0 [700650ms] <- mmap$IORING_OFF_SQ_RING=0x20ffd000 errno=14 cover=4706 #0 [700651ms] -> fork() #0 [700674ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [700688ms] -> syz_io_uring_complete(0x20ffd000) #0 [700689ms] <- syz_io_uring_complete=0xffffffffffffffff errno=14 cover=7433 #0 [700691ms] -> ioctl$EXT4_IOC_SWAP_BOOT(0x4, 0x6611) #0 [700693ms] <- ioctl$EXT4_IOC_SWAP_BOOT=0x0 errno=14 cover=17190 2033/05/18 03:34:46 result hanged=false: 2033/05/18 03:34:46 added new input for call #6 ioctl$EXT4_IOC_SWAP_BOOT to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) fork() syz_io_uring_complete(r1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 03:34:46 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ac355d", 0x14, 0x33, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [700742ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159891 #0 [700751ms] -> syz_emit_ethernet(0x4a, 0x20000280, 0x0) aa aa aa aa aa aa aa aa aa aa aa bb 86 dd 60 ac 35 5d 00 14 33 00 fe 88 00 00 00 00 00 00 00 00 00 00 00 00 00 01 20 01 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 44 43 42 41 44 43 42 41 50 00 00 00 84 4f 00 00 #0 [700752ms] <- syz_emit_ethernet=0x4a errno=14 cover=23587 enabling collider #0 [700754ms] -> syz_emit_ethernet(0x4a, 0x20000280, 0x0) aa aa aa aa aa aa aa aa aa aa aa bb 86 dd 60 ac 35 5d 00 14 33 00 fe 88 00 00 00 00 00 00 00 00 00 00 00 00 00 01 20 01 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 44 43 42 41 44 43 42 41 50 00 00 00 84 4f 00 00 #0 [700756ms] <- syz_emit_ethernet=0x4a errno=14 cover=23243 03:34:46 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ac355d", 0x14, 0x33, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2033/05/18 03:34:46 result hanged=false: 2033/05/18 03:34:46 #0: triaging type=7 2033/05/18 03:34:46 triaging input for call #0 syz_emit_ethernet (new signal=4) iptable mangle/10: resetting [700777ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159893 #0 [700788ms] -> syz_emit_ethernet(0x4a, 0x20000280, 0x0) aa aa aa aa aa aa aa aa aa aa aa bb 86 dd 60 ac 35 5d 00 14 33 00 fe 88 00 00 00 00 00 00 00 00 00 00 00 00 00 01 20 01 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 44 43 42 41 44 43 42 41 50 00 00 00 84 4f 00 00 #0 [700791ms] <- syz_emit_ethernet=0x4a errno=14 cover=23620 2033/05/18 03:34:46 result hanged=false: 03:34:46 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ac355d", 0x14, 0x33, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) iptable mangle/10: resetting [700814ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159895 #0 [700824ms] -> syz_emit_ethernet(0x4a, 0x20000280, 0x0) aa aa aa aa aa aa aa aa aa aa aa bb 86 dd 60 ac 35 5d 00 14 33 00 fe 88 00 00 00 00 00 00 00 00 00 00 00 00 00 01 20 01 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 44 43 42 41 44 43 42 41 50 00 00 00 84 4f 00 00 #0 [700829ms] <- syz_emit_ethernet=0x4a errno=14 cover=23907 2033/05/18 03:34:46 result hanged=false: 03:34:46 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ac355d", 0x14, 0x33, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) iptable mangle/10: resetting [700851ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159897 #0 [700861ms] -> syz_emit_ethernet(0x4a, 0x20000280, 0x0) aa aa aa aa aa aa aa aa aa aa aa bb 86 dd 60 ac 35 5d 00 14 33 00 fe 88 00 00 00 00 00 00 00 00 00 00 00 00 00 01 20 01 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 44 43 42 41 44 43 42 41 50 00 00 00 84 4f 00 00 #0 [700864ms] <- syz_emit_ethernet=0x4a errno=14 cover=23369 iptable mangle/10: resetting 2033/05/18 03:34:46 result hanged=false: 2033/05/18 03:34:46 added new input for call #0 syz_emit_ethernet to corpus: syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ac355d", 0x14, 0x33, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:34:46 executing program 0: syz_mount_image$nfs4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000001840), 0x0, &(0x7f00000018c0)={[{'\x00'}]}) [700895ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159899 #0 [700903ms] -> syz_mount_image$nfs4(0x20000540, 0x20000580, 0x0, 0x0, 0x20001840, 0x0, 0x200018c0) #0 [700903ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=2 cover=3305 enabling collider #0 [700904ms] -> syz_mount_image$nfs4(0x20000540, 0x20000580, 0x0, 0x0, 0x20001840, 0x0, 0x200018c0) #0 [700904ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=2 cover=3247 03:34:46 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x33}, 0x0, @in=@local}}, 0xe8) 2033/05/18 03:34:46 result hanged=false: [700924ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 159901 #0 [700933ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [700934ms] <- socket$inet6_udplite=0x3 errno=14 cover=1646 #0 [700935ms] -> dup(0x3) #0 [700935ms] <- dup=0x4 errno=14 cover=87 #0 [700936ms] -> connect$inet(0x4, 0x200001c0, 0x10) #0 [700936ms] <- connect$inet=0xffffffffffffffff errno=22 cover=437 #0 [700936ms] -> setsockopt$inet6_IPV6_XFRM_POLICY(0x4, 0x29, 0x23, 0x20000140, 0xe8) #0 [700937ms] <- setsockopt$inet6_IPV6_XFRM_POLICY=0x0 errno=14 cover=2645 enabling collider #0 [700938ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [700938ms] <- socket$inet6_udplite=0x3 errno=14 cover=1612 #0 [700939ms] -> dup(0x3) #0 [700940ms] <- dup=0x4 errno=14 cover=86 pthread_create failed (errno 11) 03:34:46 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ff3000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) mbind(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x800000007, 0xe, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2033/05/18 03:34:46 result hanged=false: 2033/05/18 03:34:46 poll: candidates=8 inputs=0 signal=0 [700994ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160003 #0 [701002ms] -> shmget$private(0x0, 0x2000, 0x0, 0x20ff3000) #0 [701003ms] <- shmget$private=0x24 errno=14 cover=1064 #0 [701003ms] -> shmat(0x24, 0x20ff9000, 0x4000) #0 [701004ms] <- shmat=0x20ff9000 errno=14 cover=2103 #0 [701004ms] -> shmctl$IPC_RMID(0x24, 0x0) #0 [701004ms] <- shmctl$IPC_RMID=0x0 errno=14 cover=97 #0 [701004ms] -> mbind(0x20ffa000, 0x1000, 0x3, 0x20000000, 0xe, 0x0) #0 [701005ms] <- mbind=0x0 errno=14 cover=873 #0 [701005ms] -> munmap(0x20ff9000, 0x4000) #0 [701005ms] <- munmap=0x0 errno=14 cover=2405 enabling collider #0 [701005ms] -> shmget$private(0x0, 0x2000, 0x0, 0x20ff3000) #0 [701006ms] <- shmget$private=0x25 errno=14 cover=1064 #0 [701006ms] -> shmat(0x25, 0x20ff9000, 0x4000) #0 [701006ms] <- shmat=0x20ff9000 errno=14 cover=970 pthread_create failed (errno 11) 2033/05/18 03:34:46 result hanged=false: 03:34:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) [701059ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160105 #0 [701068ms] -> openat$tun(0xffffffffffffff9c, 0x200000c0, 0x0, 0x0) #0 [701072ms] <- openat$tun=0xffffffffffffffff errno=2 cover=1243 #0 [701073ms] -> ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) #0 [701073ms] <- ioctl$TUNDETACHFILTER=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [701074ms] -> openat$tun(0xffffffffffffff9c, 0x200000c0, 0x0, 0x0) #0 [701074ms] <- openat$tun=0xffffffffffffffff errno=2 cover=1187 03:34:46 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x785340, 0x0) 2033/05/18 03:34:46 result hanged=false: [701093ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160107 #0 [701103ms] -> openat$zero(0xffffffffffffff9c, 0x20000100, 0x785340, 0x0) #0 [701103ms] <- openat$zero=0xffffffffffffffff errno=2 cover=1178 enabling collider #0 [701105ms] -> openat$zero(0xffffffffffffff9c, 0x20000100, 0x785340, 0x0) #0 [701105ms] <- openat$zero=0xffffffffffffffff errno=2 cover=1156 03:34:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8929, &(0x7f00000006c0)={'wlan1\x00'}) 2033/05/18 03:34:46 result hanged=false: [701124ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160109 #0 [701134ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [701138ms] <- socket$nl_generic=0x3 errno=14 cover=1481 #0 [701139ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8929, 0x200006c0) #0 [701140ms] <- ioctl$sock_SIOCGIFINDEX_80211=0xffffffffffffffff errno=22 cover=171 enabling collider #0 [701141ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [701141ms] <- socket$nl_generic=0x3 errno=14 cover=1414 03:34:46 executing program 0: syz_mount_image$nfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f00000002c0)="eef004", 0x3}], 0x0, &(0x7f0000000400)) 2033/05/18 03:34:46 result hanged=false: [701161ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160111 #0 [701170ms] -> syz_mount_image$nfs(0x0, 0x20000280, 0x0, 0x1, 0x200003c0, 0x0, 0x20000400) #0 [701171ms] <- syz_mount_image$nfs=0xffffffffffffffff errno=2 cover=4956 enabling collider #0 [701172ms] -> syz_mount_image$nfs(0x0, 0x20000280, 0x0, 0x1, 0x200003c0, 0x0, 0x20000400) #0 [701173ms] <- syz_mount_image$nfs=0xffffffffffffffff errno=2 cover=4792 03:34:46 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, r0, 0x1) 2033/05/18 03:34:46 result hanged=false: [701191ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160113 #0 [701202ms] -> add_key$keyring(0x20000040, 0x20000080, 0x0, 0x0, 0xfffffffffffffffd) #0 [701207ms] <- add_key$keyring=0x39ae24a1 errno=14 cover=1136 #0 [701208ms] -> add_key$keyring(0x20000000, 0x200000c0, 0x0, 0x0, 0xfffffffffffffffc) #0 [701208ms] <- add_key$keyring=0x66d2d25 errno=14 cover=1682 #0 [701209ms] -> add_key$keyring(0x200001c0, 0x20000200, 0x0, 0x0, 0x39ae24a1) #0 [701209ms] <- add_key$keyring=0x7cbf1a2 errno=14 cover=1430 #0 [701210ms] -> keyctl$KEYCTL_MOVE(0x1e, 0x66d2d25, 0xfffffffffffffffc, 0x39ae24a1, 0x1) #0 [701210ms] <- keyctl$KEYCTL_MOVE=0xffffffffffffffff errno=17 cover=2046 enabling collider #0 [701210ms] -> add_key$keyring(0x20000040, 0x20000080, 0x0, 0x0, 0xfffffffffffffffd) #0 [701211ms] <- add_key$keyring=0x3fd3241b errno=14 cover=1225 #0 [701211ms] -> add_key$keyring(0x20000000, 0x200000c0, 0x0, 0x0, 0xfffffffffffffffc) #0 [701211ms] <- add_key$keyring=0x24ac8b3f errno=14 cover=1696 pthread_create failed (errno 11) 03:34:46 executing program 0: r0 = fork() tgkill(r0, r0, 0x19) 2033/05/18 03:34:46 result hanged=false: [701266ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160215 #0 [701276ms] -> fork() #0 [701293ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [701294ms] -> tgkill(0x0, 0x0, 0x19) #0 [701295ms] <- tgkill=0xffffffffffffffff errno=22 cover=34 enabling collider #0 [701295ms] -> fork() #0 [701312ms] <- fork=0xffffffffffffffff errno=11 cover=262143 03:34:46 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000019c0), 0x5, 0x0) read$ptp(r0, &(0x7f0000001a40)=""/186, 0xba) 2033/05/18 03:34:46 result hanged=false: [701332ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160219 #0 [701342ms] -> syz_open_dev$vcsa(0x200019c0, 0x5, 0x0) #0 [701342ms] <- syz_open_dev$vcsa=0xffffffffffffffff errno=2 cover=1156 #0 [701343ms] -> read$ptp(0xffffffffffffffff, 0x20001a40, 0xba) #0 [701343ms] <- read$ptp=0xffffffffffffffff errno=9 cover=47 enabling collider #0 [701344ms] -> syz_open_dev$vcsa(0x200019c0, 0x5, 0x0) #0 [701345ms] <- syz_open_dev$vcsa=0xffffffffffffffff errno=2 cover=1224 03:34:46 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) 2033/05/18 03:34:46 result hanged=false: 2033/05/18 03:34:46 poll: candidates=8 inputs=0 signal=0 [701367ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160221 #0 [701376ms] -> syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x20000140, 0x0) syz_usb_connect: dev: 0x20000140 syz_usb_connect: device data: 12 01 00 00 02 00 00 00 25 05 a1 a4 40 00 01 02 03 01 09 02 3b 00 01 01 00 00 00 09 04 00 00 00 02 06 00 00 05 24 06 00 00 05 24 00 00 00 0d 24 0f 01 00 00 00 00 00 00 00 00 00 09 05 82 02 00 00 00 01 00 09 05 03 02 00 00 00 00 00 syz_usb_connect: usb_raw_open failed with -1 #0 [701381ms] <- syz_usb_connect$cdc_ecm=0xffffffffffffffff errno=2 cover=26023 enabling collider #0 [701883ms] -> syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x20000140, 0x0) syz_usb_connect: dev: 0x20000140 syz_usb_connect: device data: 12 01 00 00 02 00 00 00 25 05 a1 a4 40 00 01 02 03 01 09 02 3b 00 01 01 00 00 00 09 04 00 00 00 02 06 00 00 05 24 06 00 00 05 24 00 00 00 0d 24 0f 01 00 00 00 00 00 00 00 00 00 09 05 82 02 00 00 00 01 00 09 05 03 02 00 00 00 00 00 syz_usb_connect: usb_raw_open failed with -1 #0 [701887ms] <- syz_usb_connect$cdc_ecm=0xffffffffffffffff errno=2 cover=24336 03:34:47 executing program 0: clone3(&(0x7f00000022c0)={0x100202000, 0x0, 0x0, 0x0, {}, &(0x7f0000000280)=""/4096, 0x1000, 0x0, 0x0}, 0x58) 2033/05/18 03:34:47 result hanged=false: [701908ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160223 #0 [701918ms] -> clone3(0x200022c0, 0x58) #0 [701937ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 enabling collider #0 [701941ms] -> clone3(0x200022c0, 0x58) #0 [701959ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 03:34:47 executing program 0: creat(0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000001d00), &(0x7f0000001d40)='./file0\x00', 0x0, 0x1, &(0x7f0000001e40)=[{&(0x7f0000001d80)='9', 0x1}], 0x0, &(0x7f0000001e80)={[{@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x74, 0x74]}}], [{@smackfsdef={'smackfsdef', 0x3d, 'ipvlan1\x00'}}]}) 2033/05/18 03:34:47 result hanged=false: [701980ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160227 #0 [701990ms] -> creat(0x0, 0x0) #0 [701990ms] <- creat=0xffffffffffffffff errno=14 cover=615 #0 [701992ms] -> syz_mount_image$tmpfs(0x20001d00, 0x20001d40, 0x0, 0x1, 0x20001e40, 0x0, 0x20001e80) #0 [701993ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=2 cover=4965 enabling collider #0 [701993ms] -> creat(0x0, 0x0) #0 [701993ms] <- creat=0xffffffffffffffff errno=14 cover=616 03:34:47 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=tcp,', {}, 0x2c, {[{@privport}]}}) 2033/05/18 03:34:47 result hanged=false: [702015ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160229 #0 [702025ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [702030ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=12330 #0 [702031ms] -> openat(0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [702031ms] <- openat=0xffffffffffffffff errno=14 cover=617 #0 [702031ms] -> clone3(0x200008c0, 0x58) #0 [702031ms] <- clone3=0xffffffffffffffff errno=11 cover=4421 #0 [702032ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x0, 0x200001c0) [ 1452.009682] 9pnet: p9_fd_create_tcp (289838): problem connecting socket to 127.0.0.1 #0 [702035ms] <- mount$9p_tcp=0xffffffffffffffff errno=111 cover=11279 enabling collider #0 [702035ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [702035ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=17 cover=1367 #0 [702036ms] -> openat(0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [702036ms] <- openat=0xffffffffffffffff errno=14 cover=616 pthread_create failed (errno 11) 2033/05/18 03:34:47 result hanged=false: 03:34:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newpolicy={0x13c, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@remote}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@empty}]}]}, 0x13c}}, 0x0) iptable filter/2: resetting iptable mangle/2: resetting [702094ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160332 #0 [702103ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [702104ms] <- socket$nl_xfrm=0x3 errno=14 cover=1397 #0 [702105ms] -> sendmsg$nl_xfrm(0x3, 0x20000000, 0x0) #0 [702105ms] <- sendmsg$nl_xfrm=0x13c errno=14 cover=2700 enabling collider #0 [702106ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [702106ms] <- socket$nl_xfrm=0x3 errno=14 cover=1418 03:34:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newpolicy={0x13c, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@remote}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@empty}]}]}, 0x13c}}, 0x0) 2033/05/18 03:34:47 result hanged=false: 2033/05/18 03:34:47 #0: triaging type=7 2033/05/18 03:34:47 triaging input for call #1 sendmsg$nl_xfrm (new signal=1) [702125ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160334 #0 [702135ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [702138ms] <- socket$nl_xfrm=0x3 errno=14 cover=1408 #0 [702139ms] -> sendmsg$nl_xfrm(0x3, 0x20000000, 0x0) #0 [702139ms] <- sendmsg$nl_xfrm=0x13c errno=14 cover=1872 2033/05/18 03:34:47 result hanged=false: 03:34:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newpolicy={0x13c, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@remote}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@empty}]}]}, 0x13c}}, 0x0) [702158ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160336 #0 [702166ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [702167ms] <- socket$nl_xfrm=0x3 errno=14 cover=1408 #0 [702168ms] -> sendmsg$nl_xfrm(0x3, 0x20000000, 0x0) #0 [702169ms] <- sendmsg$nl_xfrm=0x13c errno=14 cover=1948 2033/05/18 03:34:47 result hanged=false: 03:34:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newpolicy={0x13c, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@remote}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@empty}]}]}, 0x13c}}, 0x0) [702188ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160338 #0 [702198ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [702199ms] <- socket$nl_xfrm=0x3 errno=14 cover=1455 #0 [702200ms] -> sendmsg$nl_xfrm(0x3, 0x20000000, 0x0) #0 [702201ms] <- sendmsg$nl_xfrm=0x13c errno=14 cover=1884 2033/05/18 03:34:47 result hanged=false: 2033/05/18 03:34:47 added new input for call #1 sendmsg$nl_xfrm to corpus: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newpolicy={0x13c, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@remote}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@empty}]}]}, 0x13c}}, 0x0) 03:34:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) [702231ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160340 #0 [702240ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [702246ms] <- perf_event_open=0x3 errno=14 cover=9201 #0 [702247ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [702249ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=22721 #0 [702250ms] -> mount(0x0, 0x20000000, 0x20000040, 0x0, 0x0) #0 [702254ms] <- mount=0x0 errno=14 cover=53075 #0 [702255ms] -> umount2(0x20000080, 0x0) #0 [702257ms] <- umount2=0x0 errno=14 cover=31806 enabling collider #0 [702269ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [702270ms] <- perf_event_open=0x3 errno=14 cover=8605 #0 [702272ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [702272ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=3036 pthread_create failed (errno 11) 2033/05/18 03:34:47 result hanged=false: 03:34:47 executing program 0: syz_emit_ethernet(0x11, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "afb6a5", 0x14, 0x2b, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"25c729cf2b4225248f2481edba9682a791f1f3d589c6020772a3"}}}}}}}, 0x0) [702343ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160442 #0 [702352ms] -> syz_emit_ethernet(0x11, 0x20000080, 0x0) aa aa aa aa aa aa aa aa aa aa aa 00 86 dd 60 af b6 #0 [702357ms] <- syz_emit_ethernet=0x11 errno=14 cover=6432 enabling collider #0 [702358ms] -> syz_emit_ethernet(0x11, 0x20000080, 0x0) aa aa aa aa aa aa aa aa aa aa aa 00 86 dd 60 af b6 #0 [702359ms] <- syz_emit_ethernet=0x11 errno=14 cover=5883 03:34:47 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x464e, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x3, 0x36e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)) syz_mount_image$nfs4(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x9, 0x5, &(0x7f0000001800)=[{&(0x7f0000000600)="809a028b52edbded5d3e87170608eca233b09f9910417612de00212e1173efef537c9a3694a8242841849472b5742f", 0x2f, 0x101}, {&(0x7f0000000640)="de3a1e4b3ffbc7dca4603cb6abc04fb860e829e93727c000e0a2393188caa04f934e9abeca8c091740d96b55e3132e224c635da6766905335c5fba43c440ef7aba805ef873586bfb668509f979fc76f094be257e6a1524554c7f018543801740350e0bd20a33861d81b76756fbe80bcc42cae8476cf2dcd55bce0a581a0fbfed06930b9453ed7a68e23565005e974885537153a9b4ae7d9cfef0b2f273b1ad8225a1b9cd53ebbd66260a5d10f20cfa0c6276546ffe3125646d20e0653a3da0df7a310e2e825d8136dadff0419ecb84080c6aeead2392febbee1728dd13a865bc270dc44e5d98da5200d7cc752e", 0xed, 0x7fffffff}, {&(0x7f0000000740)="59b0f1abe2e76176fe5e971b4171b8853ee4c700b6f8c2180e6c09cc179288bcc12d2a21bea582c1720458d1dceb8b", 0x2f, 0x3}, {&(0x7f00000007c0)="a5", 0x1, 0x1f}, {&(0x7f0000000800)="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", 0x1000, 0x100000001}], 0x5000, &(0x7f00000018c0)={[{'wpan4\x00'}], [{@fsname={'fsname', 0x3d, 'TIPC\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@measure}]}) syz_genetlink_get_family_id$nl802154(&(0x7f0000001a40), 0xffffffffffffffff) 2033/05/18 03:34:47 result hanged=false: [702378ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160444 #0 [702388ms] -> ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) #0 [702388ms] <- ioctl$sock_SIOCGIFINDEX_802154=0xffffffffffffffff errno=9 cover=45 #0 [702389ms] -> syz_io_uring_setup(0x464e, 0x200002c0, 0x20ffb000, 0x20ffc000, 0x20000340, 0x20000380) #0 [702392ms] <- syz_io_uring_setup=0x3 errno=14 cover=21788 #0 [702392ms] -> syz_mount_image$nfs4(0x20000580, 0x200005c0, 0x9, 0x5, 0x20001800, 0x5000, 0x200018c0) #0 [702393ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=2 cover=13587 #0 [702393ms] -> syz_genetlink_get_family_id$nl802154(0x20001a40, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [702394ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=8097 enabling collider #0 [702395ms] -> ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) #0 [702395ms] <- ioctl$sock_SIOCGIFINDEX_802154=0xffffffffffffffff errno=9 cover=45 #0 [702395ms] -> syz_io_uring_setup(0x464e, 0x200002c0, 0x20ffb000, 0x20ffc000, 0x20000340, 0x20000380) #0 [702398ms] <- syz_io_uring_setup=0x3 errno=14 cover=29164 pthread_create failed (errno 11) 2033/05/18 03:34:47 result hanged=false: 03:34:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x5, 0x3, 'K'}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x0) 2033/05/18 03:34:47 poll: candidates=8 inputs=0 signal=0 [702453ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160546 #0 [702461ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [702464ms] <- socket$nl_generic=0x3 errno=14 cover=1451 #0 [702465ms] -> syz_genetlink_get_family_id$nl80211(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [702467ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12896 #0 [702468ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [702468ms] <- socket$nl_generic=0x4 errno=14 cover=1435 #0 [702468ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x4, 0x8933, 0x200000c0) #0 [702468ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [702469ms] -> sendmsg$NL80211_CMD_JOIN_MESH(0x3, 0x20002a40, 0x0) #0 [702470ms] <- sendmsg$NL80211_CMD_JOIN_MESH=0x34 errno=14 cover=2110 enabling collider #0 [702471ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [702471ms] <- socket$nl_generic=0x3 errno=14 cover=1440 #0 [702472ms] -> syz_genetlink_get_family_id$nl80211(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [702474ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11769 pthread_create failed (errno 11) 2033/05/18 03:34:47 result hanged=false: 2033/05/18 03:34:47 #0: triaging type=7 03:34:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x5, 0x3, 'K'}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x0) 2033/05/18 03:34:47 triaging input for call #4 sendmsg$NL80211_CMD_JOIN_MESH (new signal=6) [702526ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160648 #0 [702537ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [702540ms] <- socket$nl_generic=0x3 errno=14 cover=1401 #0 [702542ms] -> syz_genetlink_get_family_id$nl80211(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [702543ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12263 #0 [702545ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [702545ms] <- socket$nl_generic=0x4 errno=14 cover=1411 #0 [702546ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x4, 0x8933, 0x200000c0) #0 [702546ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [702546ms] -> sendmsg$NL80211_CMD_JOIN_MESH(0x3, 0x20002a40, 0x0) #0 [702547ms] <- sendmsg$NL80211_CMD_JOIN_MESH=0x34 errno=14 cover=2098 03:34:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x5, 0x3, 'K'}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x0) 2033/05/18 03:34:48 result hanged=false: [702565ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160650 #0 [702575ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [702575ms] <- socket$nl_generic=0x3 errno=14 cover=1415 #0 [702576ms] -> syz_genetlink_get_family_id$nl80211(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [702577ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12261 #0 [702578ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [702579ms] <- socket$nl_generic=0x4 errno=14 cover=1433 #0 [702579ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x4, 0x8933, 0x200000c0) #0 [702579ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [702579ms] -> sendmsg$NL80211_CMD_JOIN_MESH(0x3, 0x20002a40, 0x0) #0 [702579ms] <- sendmsg$NL80211_CMD_JOIN_MESH=0x34 errno=14 cover=2070 2033/05/18 03:34:48 result hanged=false: 03:34:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x5, 0x3, 'K'}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x0) [702600ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160652 #0 [702609ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [702612ms] <- socket$nl_generic=0x3 errno=14 cover=1480 #0 [702614ms] -> syz_genetlink_get_family_id$nl80211(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [702617ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12382 #0 [702618ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [702619ms] <- socket$nl_generic=0x4 errno=14 cover=1444 #0 [702619ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x4, 0x8933, 0x200000c0) #0 [702619ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [702620ms] -> sendmsg$NL80211_CMD_JOIN_MESH(0x3, 0x20002a40, 0x0) #0 [702621ms] <- sendmsg$NL80211_CMD_JOIN_MESH=0x34 errno=14 cover=2078 2033/05/18 03:34:48 result hanged=false: 2033/05/18 03:34:48 added new input for call #4 sendmsg$NL80211_CMD_JOIN_MESH to corpus: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x5, 0x3, 'K'}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x0) 03:34:48 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) [702644ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160654 #0 [702653ms] -> socketpair(0x0, 0x0, 0x0, 0x20000100) #0 [702669ms] <- socketpair=0xffffffffffffffff errno=97 cover=2338 #0 [702671ms] -> syz_genetlink_get_family_id$nl80211(0x20000180, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [702673ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12248 enabling collider #0 [702674ms] -> socketpair(0x0, 0x0, 0x0, 0x20000100) #0 [702688ms] <- socketpair=0xffffffffffffffff errno=97 cover=1611 2033/05/18 03:34:48 result hanged=false: 03:34:48 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x5) ppoll(&(0x7f0000000100)=[{}, {r0, 0x1}, {}], 0x3, &(0x7f0000000180), 0x0, 0x0) [702709ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160656 #0 [702719ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [702724ms] <- perf_event_open=0x3 errno=14 cover=8071 #0 [702726ms] -> epoll_create(0x5) #0 [702727ms] <- epoll_create=0x4 errno=14 cover=518 #0 [702727ms] -> ppoll(0x20000100, 0x3, 0x20000180, 0x0, 0x0) #0 [702727ms] <- ppoll=0x0 errno=14 cover=206 enabling collider #0 [702737ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [702738ms] <- perf_event_open=0x3 errno=14 cover=8351 #0 [702738ms] -> epoll_create(0x5) #0 [702739ms] <- epoll_create=0x4 errno=14 cover=495 pthread_create failed (errno 11) 03:34:48 executing program 0: r0 = syz_io_uring_setup(0x1432, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x8006, 0x0, 0x0, 0xfffffffd}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:34:48 result hanged=false: [702803ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160758 #0 [702812ms] -> syz_io_uring_setup(0x1432, 0x20000080, 0x200a0000, 0x20ffc000, 0x20000000, 0x20000140) #0 [702816ms] <- syz_io_uring_setup=0x3 errno=14 cover=10579 #0 [702817ms] -> syz_io_uring_submit(0x200a0000, 0x20ffc000, 0x200002c0, 0x0) #0 [702817ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [702818ms] -> io_uring_enter(0x3, 0x58ab, 0x0, 0x0, 0x0, 0x0) #0 [702818ms] <- io_uring_enter=0x1 errno=14 cover=377 enabling collider #0 [702820ms] -> syz_io_uring_setup(0x1432, 0x20000080, 0x200a0000, 0x20ffc000, 0x20000000, 0x20000140) #0 [702824ms] <- syz_io_uring_setup=0x3 errno=14 cover=11313 #0 [702825ms] -> syz_io_uring_submit(0x200a0000, 0x20ffc000, 0x200002c0, 0x0) #0 [702825ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 pthread_create failed (errno 11) 03:34:48 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') lseek(r0, 0x0, 0x3) 2033/05/18 03:34:48 result hanged=false: [702871ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160860 #0 [702879ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000000) #0 [702880ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2381 #0 [702881ms] -> lseek(0xffffffffffffffff, 0x0, 0x3) #0 [702881ms] <- lseek=0xffffffffffffffff errno=9 cover=47 enabling collider #0 [702881ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000000) #0 [702882ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2382 03:34:48 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) getsockname(r0, &(0x7f0000001740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000017c0)=0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000034c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe(&(0x7f0000003500)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000003540), 0x0, 0x0) sendmsg$unix(r1, &(0x7f00000037c0)={&(0x7f0000001fc0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000003700)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee00}}}], 0x38}, 0x0) 2033/05/18 03:34:48 result hanged=false: [702900ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160862 #0 [702908ms] -> socket$unix(0x1, 0x5, 0x0) #0 [702910ms] <- socket$unix=0x3 errno=14 cover=1435 #0 [702910ms] -> getsockname(0x3, 0x20001740, 0x200017c0) #0 [702911ms] <- getsockname=0x0 errno=14 cover=118 #0 [702911ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20001d40) #0 [702911ms] <- socketpair$unix=0x0 errno=14 cover=2899 #0 [702911ms] -> getpid() #0 [702911ms] <- getpid=0x2745e errno=14 cover=48 #0 [702911ms] -> openat$selinux_attr(0xffffffffffffff9c, 0x200034c0, 0x2, 0x0) #0 [702911ms] <- openat$selinux_attr=0xffffffffffffffff errno=2 cover=1172 #0 [702911ms] -> pipe(0x20003500) #0 [702912ms] <- pipe=0x0 errno=14 cover=1272 #0 [702912ms] -> openat$hwrng(0xffffffffffffff9c, 0x20003540, 0x0, 0x0) #0 [702912ms] <- openat$hwrng=0xffffffffffffffff errno=2 cover=1166 #0 [702912ms] -> sendmsg$unix(0x5, 0x200037c0, 0x0) #0 [702912ms] <- sendmsg$unix=0xffffffffffffffff errno=9 cover=581 enabling collider #0 [702912ms] -> socket$unix(0x1, 0x5, 0x0) #0 [702913ms] <- socket$unix=0x3 errno=14 cover=1401 #0 [702913ms] -> getsockname(0x3, 0x20001740, 0x200017c0) #0 [702913ms] <- getsockname=0x0 errno=14 cover=118 pthread_create failed (errno 11) 03:34:48 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 2033/05/18 03:34:48 result hanged=false: [702956ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 160964 #0 [702964ms] -> perf_event_open(0x200000c0, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [702966ms] <- perf_event_open=0x3 errno=14 cover=8295 #0 [702967ms] -> pipe2(0x20000000, 0x0) #0 [702968ms] <- pipe2=0x0 errno=14 cover=4881 #0 [702968ms] -> fcntl$setpipe(0x5, 0x407, 0x0) #0 [702969ms] <- fcntl$setpipe=0x1000 errno=14 cover=1005 enabling collider #0 [702980ms] -> perf_event_open(0x200000c0, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [702981ms] <- perf_event_open=0x3 errno=14 cover=8059 #0 [702982ms] -> pipe2(0x20000000, 0x0) #0 [702983ms] <- pipe2=0x0 errno=14 cover=5046 pthread_create failed (errno 11) 03:34:48 executing program 0: pipe2$9p(&(0x7f00000025c0), 0x0) 2033/05/18 03:34:48 result hanged=false: [703042ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161066 #0 [703050ms] -> pipe2$9p(0x200025c0, 0x0) #0 [703051ms] <- pipe2$9p=0x0 errno=14 cover=1801 enabling collider #0 [703052ms] -> pipe2$9p(0x200025c0, 0x0) #0 [703054ms] <- pipe2$9p=0x0 errno=14 cover=1511 03:34:48 executing program 0: execveat(0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x0) 2033/05/18 03:34:48 result hanged=false: 2033/05/18 03:34:48 poll: candidates=8 inputs=0 signal=0 [703072ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161068 #0 [703081ms] -> execveat(0xffffffffffffffff, 0x20000840, 0x0, 0x0, 0x0) #0 [703083ms] <- execveat=0xffffffffffffffff errno=9 cover=6534 enabling collider #0 [703084ms] -> execveat(0xffffffffffffffff, 0x20000840, 0x0, 0x0, 0x0) #0 [703086ms] <- execveat=0xffffffffffffffff errno=9 cover=6309 03:34:48 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001580), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) 2033/05/18 03:34:48 result hanged=false: [703106ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161070 #0 [703114ms] -> syz_open_dev$evdev(0x20001580, 0x0, 0x0) #0 [703116ms] <- syz_open_dev$evdev=0xffffffffffffffff errno=2 cover=1169 #0 [703117ms] -> ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, 0x0) #0 [703119ms] <- ioctl$EVIOCGREP=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [703120ms] -> syz_open_dev$evdev(0x20001580, 0x0, 0x0) #0 [703120ms] <- syz_open_dev$evdev=0xffffffffffffffff errno=2 cover=1201 03:34:48 executing program 0: syz_genetlink_get_family_id$SEG6(&(0x7f00000006c0), 0xffffffffffffffff) 2033/05/18 03:34:48 result hanged=false: [703137ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161072 #0 [703146ms] -> syz_genetlink_get_family_id$SEG6(0x200006c0, 0xffffffffffffffff) syz_genetlink_get_family_id(SEG6, -1) #0 [703149ms] <- syz_genetlink_get_family_id$SEG6=0x1f errno=14 cover=8881 enabling collider #0 [703151ms] -> syz_genetlink_get_family_id$SEG6(0x200006c0, 0xffffffffffffffff) syz_genetlink_get_family_id(SEG6, -1) #0 [703152ms] <- syz_genetlink_get_family_id$SEG6=0x1f errno=14 cover=7168 2033/05/18 03:34:48 result hanged=false: 03:34:48 executing program 0: syz_io_uring_setup(0x7125, &(0x7f0000000580), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000640)) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) [703170ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161074 #0 [703178ms] -> syz_io_uring_setup(0x7125, 0x20000580, 0x20ffd000, 0x20ffd000, 0x20000600, 0x20000640) #0 [703184ms] <- syz_io_uring_setup=0x3 errno=14 cover=21004 #0 [703186ms] -> syz_io_uring_submit(0x20ffd000, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [703189ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=1127 enabling collider #0 [703189ms] -> syz_io_uring_setup(0x7125, 0x20000580, 0x20ffd000, 0x20ffd000, 0x20000600, 0x20000640) #0 [703192ms] <- syz_io_uring_setup=0x3 errno=14 cover=28811 2033/05/18 03:34:48 result hanged=false: 03:34:48 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001e80), 0x40042, 0x0) [703212ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161076 #0 [703220ms] -> openat$thread_pidfd(0xffffffffffffff9c, 0x20001e80, 0x40042, 0x0) #0 [703223ms] <- openat$thread_pidfd=0xffffffffffffffff errno=2 cover=1183 enabling collider #0 [703225ms] -> openat$thread_pidfd(0xffffffffffffff9c, 0x20001e80, 0x40042, 0x0) #0 [703225ms] <- openat$thread_pidfd=0xffffffffffffffff errno=2 cover=1160 03:34:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x6) 2033/05/18 03:34:48 result hanged=false: [703243ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161078 #0 [703251ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [703252ms] <- perf_event_open=0x3 errno=14 cover=8124 #0 [703252ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [703252ms] <- socket$inet_udp=0x4 errno=14 cover=1673 #0 [703252ms] -> connect$inet(0x4, 0x200000c0, 0x10) #0 [703252ms] <- connect$inet=0x0 errno=14 cover=762 #0 [703253ms] -> openat$procfs(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [703253ms] <- openat$procfs=0xffffffffffffffff errno=2 cover=1213 #0 [703253ms] -> sendfile(0x4, 0xffffffffffffffff, 0x0, 0x6) #0 [703253ms] <- sendfile=0xffffffffffffffff errno=9 cover=48 enabling collider #0 [703267ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [703268ms] <- perf_event_open=0x3 errno=14 cover=9990 #0 [703268ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [703268ms] <- socket$inet_udp=0x4 errno=14 cover=1675 pthread_create failed (errno 11) 2033/05/18 03:34:48 result hanged=false: 03:34:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}, {&(0x7f0000000640)="b9", 0x1}], 0x3) [703326ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161180 #0 [703334ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20000440) #0 [703337ms] <- socketpair$unix=0x0 errno=14 cover=3641 #0 [703337ms] -> writev(0x3, 0x20000840, 0x3) #0 [703338ms] <- writev=0x1 errno=14 cover=838 enabling collider #0 [703338ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20000440) #0 [703338ms] <- socketpair$unix=0x0 errno=14 cover=2870 03:34:48 executing program 0: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r1, &(0x7f0000000400)=[{&(0x7f0000000140)='>', 0x1}, {&(0x7f0000000180)="c5", 0x1}], 0x2, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/44, 0x2c}], 0x1) 2033/05/18 03:34:48 result hanged=false: [703355ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161182 #0 [703363ms] -> pipe2(0x20000000, 0x0) #0 [703364ms] <- pipe2=0x0 errno=14 cover=2729 #0 [703366ms] -> vmsplice(0x4, 0x20000400, 0x2, 0x0) #0 [703366ms] <- vmsplice=0x2 errno=14 cover=412 #0 [703366ms] -> readv(0x3, 0x20000100, 0x1) #0 [703366ms] <- readv=0x2 errno=14 cover=445 enabling collider #0 [703367ms] -> pipe2(0x20000000, 0x0) #0 [703367ms] <- pipe2=0x0 errno=14 cover=1113 #0 [703368ms] -> vmsplice(0x4, 0x20000400, 0x2, 0x0) #0 [703370ms] <- vmsplice=0x2 errno=14 cover=412 pthread_create failed (errno 11) 03:34:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r1, 0xa}) 2033/05/18 03:34:48 result hanged=false: 2033/05/18 03:34:48 poll: candidates=8 inputs=0 signal=0 [703420ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161284 #0 [703429ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [703431ms] <- perf_event_open=0x3 errno=14 cover=8097 #0 [703432ms] -> add_key$keyring(0x20000040, 0x200002c0, 0x0, 0x0, 0xfffffffffffffffd) #0 [703433ms] <- add_key$keyring=0x351f7d81 errno=14 cover=3246 #0 [703434ms] -> add_key$user(0x20000a40, 0x20000a80, 0x20000300, 0x1, 0xfffffffffffffffe) #0 [703436ms] <- add_key$user=0x1db06769 errno=14 cover=7533 #0 [703436ms] -> keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x351f7d81, 0x20000240, 0x20000000) #0 [703437ms] <- keyctl$KEYCTL_RESTRICT_KEYRING=0x0 errno=14 cover=2944 enabling collider #0 [703447ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [703448ms] <- perf_event_open=0x3 errno=14 cover=7923 #0 [703449ms] -> add_key$keyring(0x20000040, 0x200002c0, 0x0, 0x0, 0xfffffffffffffffd) #0 [703450ms] <- add_key$keyring=0x2699fb3c errno=14 cover=3382 pthread_create failed (errno 11) 03:34:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r1, 0xa}) 2033/05/18 03:34:48 result hanged=false: 2033/05/18 03:34:48 #0: triaging type=7 2033/05/18 03:34:48 triaging input for call #3 keyctl$KEYCTL_RESTRICT_KEYRING (new signal=2) [703518ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161386 #0 [703526ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [703528ms] <- perf_event_open=0x3 errno=14 cover=7983 #0 [703530ms] -> add_key$keyring(0x20000040, 0x200002c0, 0x0, 0x0, 0xfffffffffffffffd) #0 [703531ms] <- add_key$keyring=0x2faa0279 errno=14 cover=3378 #0 [703532ms] -> add_key$user(0x20000a40, 0x20000a80, 0x20000300, 0x1, 0xfffffffffffffffe) #0 [703533ms] <- add_key$user=0x2b8d60c7 errno=14 cover=8395 #0 [703534ms] -> keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x2faa0279, 0x20000240, 0x20000000) #0 [703535ms] <- keyctl$KEYCTL_RESTRICT_KEYRING=0x0 errno=14 cover=2850 03:34:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r1, 0xa}) 2033/05/18 03:34:49 result hanged=false: [703561ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161388 #0 [703569ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [703573ms] <- perf_event_open=0x3 errno=14 cover=8239 #0 [703575ms] -> add_key$keyring(0x20000040, 0x200002c0, 0x0, 0x0, 0xfffffffffffffffd) #0 [703578ms] <- add_key$keyring=0x26a93518 errno=14 cover=1120 #0 [703579ms] -> add_key$user(0x20000a40, 0x20000a80, 0x20000300, 0x1, 0xfffffffffffffffe) #0 [703579ms] <- add_key$user=0x1f12e632 errno=14 cover=2349 #0 [703580ms] -> keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x26a93518, 0x20000240, 0x20000000) #0 [703581ms] <- keyctl$KEYCTL_RESTRICT_KEYRING=0x0 errno=14 cover=1265 03:34:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r1, 0xa}) 2033/05/18 03:34:49 result hanged=false: [703604ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161390 #0 [703613ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [703617ms] <- perf_event_open=0x3 errno=14 cover=7992 #0 [703618ms] -> add_key$keyring(0x20000040, 0x200002c0, 0x0, 0x0, 0xfffffffffffffffd) #0 [703621ms] <- add_key$keyring=0x13456b56 errno=14 cover=1133 #0 [703621ms] -> add_key$user(0x20000a40, 0x20000a80, 0x20000300, 0x1, 0xfffffffffffffffe) #0 [703624ms] <- add_key$user=0x1e180628 errno=14 cover=7463 #0 [703625ms] -> keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x13456b56, 0x20000240, 0x20000000) #0 [703626ms] <- keyctl$KEYCTL_RESTRICT_KEYRING=0x0 errno=14 cover=2837 2033/05/18 03:34:49 result hanged=false: 2033/05/18 03:34:49 added new input for call #3 keyctl$KEYCTL_RESTRICT_KEYRING to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r1, 0xa}) 03:34:49 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = dup2(r0, r2) ioctl$PERF_EVENT_IOC_RESET(r3, 0x9204, 0x0) [703655ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161392 #0 [703663ms] -> syz_open_dev$usbmon(0x200000c0, 0x0, 0x0) #0 [703663ms] <- syz_open_dev$usbmon=0xffffffffffffffff errno=2 cover=1166 #0 [703664ms] -> openat$sndtimer(0xffffffffffffff9c, 0x200002c0, 0x0) #0 [703665ms] <- openat$sndtimer=0xffffffffffffffff errno=2 cover=1176 #0 [703665ms] -> fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) #0 [703665ms] <- fcntl$dupfd=0xffffffffffffffff errno=9 cover=45 #0 [703665ms] -> dup2(0xffffffffffffffff, 0xffffffffffffffff) #0 [703665ms] <- dup2=0xffffffffffffffff errno=9 cover=41 #0 [703665ms] -> ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x9204, 0x0) #0 [703665ms] <- ioctl$PERF_EVENT_IOC_RESET=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [703665ms] -> syz_open_dev$usbmon(0x200000c0, 0x0, 0x0) #0 [703665ms] <- syz_open_dev$usbmon=0xffffffffffffffff errno=2 cover=1187 #0 [703665ms] -> openat$sndtimer(0xffffffffffffff9c, 0x200002c0, 0x0) #0 [703666ms] <- openat$sndtimer=0xffffffffffffffff errno=2 cover=1211 pthread_create failed (errno 11) 03:34:49 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c04, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1, 0x0, 0x0, "f48f6fae449be4966dc32ecff8c22d82e4f66bad19c0d808bd7e68eeb17fc0c466c2e845a82b4159e66be73460b6ccfc60c25c9d290c11371729d7173eedcae3", "4e1215f6387b08a90c003e7615d5b7d37a7ed6607d74a713c1bfb45ddd09924a"}) 2033/05/18 03:34:49 result hanged=false: [703710ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161494 #0 [703719ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [703724ms] <- mknod$loop=0x0 errno=14 cover=5969 #0 [703726ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [703726ms] <- openat=0x3 errno=14 cover=1156 #0 [703727ms] -> ioctl$LOOP_SET_STATUS(0x3, 0x4c00, 0x0) #0 [703727ms] <- ioctl$LOOP_SET_STATUS=0xffffffffffffffff errno=16 cover=153 #0 [703728ms] -> ioctl$LOOP_SET_STATUS(0x3, 0x4c04, 0x20000080) #0 [703733ms] <- ioctl$LOOP_SET_STATUS=0xffffffffffffffff errno=22 cover=473 enabling collider #0 [703734ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [703734ms] <- mknod$loop=0xffffffffffffffff errno=17 cover=575 #0 [703734ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [703734ms] <- openat=0x3 errno=14 cover=1142 pthread_create failed (errno 11) 03:34:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x5385, 0x7ffffffff000) 2033/05/18 03:34:49 result hanged=false: [703776ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161596 #0 [703783ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [703786ms] <- syz_open_dev$sg=0xffffffffffffffff errno=2 cover=1166 #0 [703788ms] -> ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x5385, 0x7ffffffff000) #0 [703789ms] <- ioctl$BLKTRACETEARDOWN=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [703789ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [703790ms] <- syz_open_dev$sg=0xffffffffffffffff errno=2 cover=1187 2033/05/18 03:34:49 result hanged=false: 03:34:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000480)=0x1000000, 0x4) [703808ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161598 #0 [703816ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [703818ms] <- socket$inet6_tcp=0x3 errno=14 cover=1720 #0 [703819ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x10, 0x20000480, 0x4) #0 [703822ms] <- setsockopt$inet6_tcp_int=0xffffffffffffffff errno=22 cover=140 enabling collider #0 [703822ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [703822ms] <- socket$inet6_tcp=0x3 errno=14 cover=1719 2033/05/18 03:34:49 result hanged=false: 03:34:49 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x541b, 0x0) [703837ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161600 #0 [703845ms] -> syz_open_dev$evdev(0x20000000, 0x0, 0x0) #0 [703847ms] <- syz_open_dev$evdev=0xffffffffffffffff errno=2 cover=1225 #0 [703848ms] -> ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x541b, 0x0) #0 [703850ms] <- ioctl$EVIOCGPHYS=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [703851ms] -> syz_open_dev$evdev(0x20000000, 0x0, 0x0) #0 [703851ms] <- syz_open_dev$evdev=0xffffffffffffffff errno=2 cover=1169 2033/05/18 03:34:49 result hanged=false: 03:34:49 executing program 0: syz_io_uring_setup(0x3b20, &(0x7f0000002740), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) [703867ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161602 #0 [703876ms] -> syz_io_uring_setup(0x3b20, 0x20002740, 0x20ffc000, 0x20ffc000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [703879ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=9764 enabling collider #0 [703880ms] -> syz_io_uring_setup(0x3b20, 0x20002740, 0x20ffc000, 0x20ffc000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [703882ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=10336 2033/05/18 03:34:49 result hanged=false: 03:34:49 executing program 0: recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) [703901ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161604 #0 [703909ms] -> recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) #0 [703911ms] <- recvmsg$unix=0xffffffffffffffff errno=9 cover=52 enabling collider #0 [703913ms] -> recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) #0 [703913ms] <- recvmsg$unix=0xffffffffffffffff errno=9 cover=52 2033/05/18 03:34:49 result hanged=false: 03:34:49 executing program 0: unshare(0x0) 2033/05/18 03:34:49 poll: candidates=8 inputs=0 signal=0 [703934ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161606 #0 [703942ms] -> unshare(0x0) #0 [703942ms] <- unshare=0x0 errno=14 cover=63 enabling collider #0 [703943ms] -> unshare(0x0) #0 [703944ms] <- unshare=0x0 errno=14 cover=63 2033/05/18 03:34:49 result hanged=false: 03:34:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x24, 0x10, 0xc21, 0x0, 0x0, {}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x4, 0x32}]}]}, 0x24}}, 0x0) [703959ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161608 #0 [703966ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [703968ms] <- socket$netlink=0x3 errno=14 cover=1388 #0 [703970ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [703972ms] <- fcntl$dupfd=0x4 errno=14 cover=111 [ 1453.949318] netlink: 'syz-executor.0': attribute type 50 has an invalid length. #0 [703972ms] -> sendmsg$nl_generic(0x4, 0x20000280, 0x0) #0 [703975ms] <- sendmsg$nl_generic=0x24 errno=14 cover=3337 enabling collider #0 [703975ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [703976ms] <- socket$netlink=0x3 errno=14 cover=1431 #0 [703976ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [703976ms] <- fcntl$dupfd=0x4 errno=14 cover=110 pthread_create failed (errno 11) 03:34:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getpeername$inet(r0, 0x0, 0x0) 2033/05/18 03:34:49 result hanged=false: [704034ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161710 #0 [704044ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [704044ms] <- socket$inet_udp=0x3 errno=14 cover=1684 #0 [704045ms] -> getpeername$inet(0x3, 0x0, 0x0) #0 [704045ms] <- getpeername$inet=0xffffffffffffffff errno=107 cover=73 enabling collider #0 [704045ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [704046ms] <- socket$inet_udp=0x3 errno=14 cover=1708 03:34:49 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e28, @empty}}}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'macsec0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_targets\x00') dup2(r1, r0) 2033/05/18 03:34:49 result hanged=false: [704065ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161712 #0 [704075ms] -> sendmmsg(0xffffffffffffffff, 0x200001c0, 0x1, 0x0) #0 [704076ms] <- sendmmsg=0xffffffffffffffff errno=9 cover=51 #0 [704076ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [704077ms] <- perf_event_open=0x3 errno=14 cover=8386 #0 [704078ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [704078ms] <- openat$tun=0xffffffffffffffff errno=2 cover=3747 #0 [704079ms] -> ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, 0x20000000) #0 [704079ms] <- ioctl$TUNSETQUEUE=0xffffffffffffffff errno=9 cover=74 #0 [704080ms] -> syz_open_procfs(0x0, 0x200002c0) #0 [704081ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=7795 #0 [704081ms] -> dup2(0xffffffffffffffff, 0xffffffffffffffff) #0 [704081ms] <- dup2=0xffffffffffffffff errno=9 cover=70 enabling collider #0 [704094ms] -> sendmmsg(0xffffffffffffffff, 0x200001c0, 0x1, 0x0) #0 [704094ms] <- sendmmsg=0xffffffffffffffff errno=9 cover=51 #0 [704095ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [704096ms] <- perf_event_open=0x3 errno=14 cover=8322 pthread_create failed (errno 11) 03:34:49 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000000040)) 2033/05/18 03:34:49 result hanged=false: [704170ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161814 #0 [704178ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [704180ms] <- socket$inet6_udplite=0x3 errno=14 cover=1660 #0 [704180ms] -> getsockopt$inet6_int(0x3, 0x29, 0x4e, 0x0, 0x20000040) #0 [704180ms] <- getsockopt$inet6_int=0x0 errno=14 cover=117 enabling collider #0 [704180ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [704181ms] <- socket$inet6_udplite=0x3 errno=14 cover=1623 03:34:49 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) 2033/05/18 03:34:49 result hanged=false: [704198ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161816 #0 [704206ms] -> openat$cgroup_root(0xffffffffffffff9c, 0x200003c0, 0x200002, 0x0) #0 [704207ms] <- openat$cgroup_root=0xffffffffffffffff errno=2 cover=2262 enabling collider #0 [704207ms] -> openat$cgroup_root(0xffffffffffffff9c, 0x200003c0, 0x200002, 0x0) #0 [704208ms] <- openat$cgroup_root=0xffffffffffffffff errno=2 cover=1508 03:34:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a40), r0) 2033/05/18 03:34:49 result hanged=false: [704227ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161818 #0 [704236ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [704241ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1247 #0 [704242ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x20000a40, 0xffffffffffffffff) syz_genetlink_get_family_id(NLBL_MGMT, -1) netlink: failed to get family id for NLBL_MGMT: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [704243ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0xffffffffffffffff errno=2 cover=7837 enabling collider #0 [704243ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [704243ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1190 03:34:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a40), r0) 2033/05/18 03:34:49 result hanged=false: 2033/05/18 03:34:49 #0: triaging type=7 2033/05/18 03:34:49 triaging input for call #1 syz_genetlink_get_family_id$netlbl_mgmt (new signal=1) [704264ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161820 #0 [704273ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [704277ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1192 #0 [704279ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x20000a40, 0xffffffffffffffff) syz_genetlink_get_family_id(NLBL_MGMT, -1) netlink: failed to get family id for NLBL_MGMT: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [704280ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0xffffffffffffffff errno=2 cover=7970 03:34:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a40), r0) 2033/05/18 03:34:49 result hanged=false: [704303ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161822 #0 [704312ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [704312ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1215 #0 [704313ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x20000a40, 0xffffffffffffffff) syz_genetlink_get_family_id(NLBL_MGMT, -1) netlink: failed to get family id for NLBL_MGMT: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [704314ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0xffffffffffffffff errno=2 cover=7839 03:34:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a40), r0) 2033/05/18 03:34:49 result hanged=false: [704334ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161824 #0 [704344ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [704348ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1202 #0 [704350ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x20000a40, 0xffffffffffffffff) syz_genetlink_get_family_id(NLBL_MGMT, -1) netlink: failed to get family id for NLBL_MGMT: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [704351ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0xffffffffffffffff errno=2 cover=7825 2033/05/18 03:34:49 result hanged=false: 2033/05/18 03:34:49 added new input for call #1 syz_genetlink_get_family_id$netlbl_mgmt to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a40), r0) 03:34:49 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000ac0)={@multicast, @broadcast, @val={@void}, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x8, 0x0, @local, "ec15e25504e71231"}}}}, 0x0) [704393ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161826 #0 [704400ms] -> syz_emit_ethernet(0x2e, 0x20000ac0, 0x0) bb bb bb bb bb bb ff ff ff ff ff ff 81 00 00 00 08 06 00 00 00 00 06 08 00 00 aa aa aa aa aa aa ec 15 e2 55 04 e7 12 31 00 00 00 00 00 00 #0 [704401ms] <- syz_emit_ethernet=0x2e errno=14 cover=14139 enabling collider #0 [704402ms] -> syz_emit_ethernet(0x2e, 0x20000ac0, 0x0) bb bb bb bb bb bb ff ff ff ff ff ff 81 00 00 00 08 06 00 00 00 00 06 08 00 00 aa aa aa aa aa aa ec 15 e2 55 04 e7 12 31 00 00 00 00 00 00 #0 [704403ms] <- syz_emit_ethernet=0x2e errno=14 cover=14078 03:34:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001e00213d3fb1bccb8bf7b93907"], 0x20}}, 0x0) read(r0, &(0x7f0000000300)=""/4, 0x4) 2033/05/18 03:34:49 result hanged=false: 2033/05/18 03:34:49 poll: candidates=8 inputs=0 signal=0 [704422ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161828 #0 [704433ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [704434ms] <- socket$netlink=0x3 errno=14 cover=1377 #0 [704435ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [704435ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [704436ms] -> sendmsg$nl_generic(0x4, 0x20000280, 0x0) #0 [704439ms] <- sendmsg$nl_generic=0x20 errno=14 cover=2751 #0 [704440ms] -> read(0x3, 0x20000300, 0x4) #0 [704441ms] <- read=0x4 errno=14 cover=1274 enabling collider #0 [704442ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [704442ms] <- socket$netlink=0x3 errno=14 cover=1456 #0 [704442ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [704443ms] <- fcntl$dupfd=0x4 errno=14 cover=110 pthread_create failed (errno 11) 03:34:49 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) 2033/05/18 03:34:49 result hanged=false: [704497ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161930 #0 [704508ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [704509ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1665 #0 [704510ms] -> ioctl$sock_SIOCGIFINDEX(0x3, 0x8914, 0x20000140) #0 [704513ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=20342 #0 [704514ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [704514ms] <- socket$inet6_udplite=0x4 errno=14 cover=1649 #0 [704514ms] -> dup(0x4) #0 [704514ms] <- dup=0x5 errno=14 cover=87 #0 [704514ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [704515ms] <- socket$inet6_icmp_raw=0x6 errno=14 cover=1715 #0 [704515ms] -> ioctl$sock_SIOCGIFINDEX(0x6, 0x8933, 0x20000140) #0 [704515ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [704515ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [704516ms] <- socket$inet6_icmp_raw=0x7 errno=14 cover=1701 #0 [704516ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [704523ms] <- perf_event_open=0x8 errno=14 cover=9125 #0 [704524ms] -> ioctl$sock_SIOCGIFINDEX(0x7, 0x8914, 0x20000140) #0 [704526ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=27126 enabling collider #0 [704544ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [704545ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1711 #0 [704546ms] -> ioctl$sock_SIOCGIFINDEX(0x3, 0x8914, 0x20000140) #0 [704546ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=261 pthread_create failed (errno 11) 03:34:50 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) 2033/05/18 03:34:50 result hanged=false: 2033/05/18 03:34:50 #0: triaging type=7 2033/05/18 03:34:50 triaging input for call #8 ioctl$sock_SIOCGIFINDEX (new signal=1) [704600ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162032 #0 [704609ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [704612ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1676 #0 [704614ms] -> ioctl$sock_SIOCGIFINDEX(0x3, 0x8914, 0x20000140) #0 [704618ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=11338 #0 [704620ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [704622ms] <- socket$inet6_udplite=0x4 errno=14 cover=1678 #0 [704622ms] -> dup(0x4) #0 [704623ms] <- dup=0x5 errno=14 cover=87 #0 [704623ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [704624ms] <- socket$inet6_icmp_raw=0x6 errno=14 cover=1676 #0 [704624ms] -> ioctl$sock_SIOCGIFINDEX(0x6, 0x8933, 0x20000140) #0 [704624ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [704624ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [704625ms] <- socket$inet6_icmp_raw=0x7 errno=14 cover=1676 #0 [704625ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [704626ms] <- perf_event_open=0x8 errno=14 cover=8137 #0 [704627ms] -> ioctl$sock_SIOCGIFINDEX(0x7, 0x8914, 0x20000140) #0 [704631ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=27187 03:34:50 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) 2033/05/18 03:34:50 result hanged=false: [704670ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162034 #0 [704680ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [704683ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1676 #0 [704684ms] -> ioctl$sock_SIOCGIFINDEX(0x3, 0x8914, 0x20000140) #0 [704685ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=11315 #0 [704686ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [704687ms] <- socket$inet6_udplite=0x4 errno=14 cover=1635 #0 [704687ms] -> dup(0x4) #0 [704687ms] <- dup=0x5 errno=14 cover=87 #0 [704687ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [704687ms] <- socket$inet6_icmp_raw=0x6 errno=14 cover=1676 #0 [704687ms] -> ioctl$sock_SIOCGIFINDEX(0x6, 0x8933, 0x20000140) #0 [704687ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [704688ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [704688ms] <- socket$inet6_icmp_raw=0x7 errno=14 cover=1690 #0 [704688ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [704689ms] <- perf_event_open=0x8 errno=14 cover=8532 #0 [704689ms] -> ioctl$sock_SIOCGIFINDEX(0x7, 0x8914, 0x20000140) #0 [704691ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=27043 03:34:50 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) 2033/05/18 03:34:50 result hanged=false: [704732ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162036 #0 [704741ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [704742ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1755 #0 [704743ms] -> ioctl$sock_SIOCGIFINDEX(0x3, 0x8914, 0x20000140) #0 [704745ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=11323 #0 [704746ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [704746ms] <- socket$inet6_udplite=0x4 errno=14 cover=1624 #0 [704747ms] -> dup(0x4) #0 [704747ms] <- dup=0x5 errno=14 cover=87 #0 [704747ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [704748ms] <- socket$inet6_icmp_raw=0x6 errno=14 cover=1712 #0 [704749ms] -> ioctl$sock_SIOCGIFINDEX(0x6, 0x8933, 0x20000140) #0 [704749ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [704749ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [704751ms] <- socket$inet6_icmp_raw=0x7 errno=14 cover=1726 #0 [704751ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [704752ms] <- perf_event_open=0x8 errno=14 cover=8189 #0 [704753ms] -> ioctl$sock_SIOCGIFINDEX(0x7, 0x8914, 0x20000140) #0 [704756ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=27199 2033/05/18 03:34:50 result hanged=false: 2033/05/18 03:34:50 added new input for call #8 ioctl$sock_SIOCGIFINDEX to corpus: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) 2033/05/18 03:34:50 poll: candidates=0 inputs=0 signal=0 03:34:50 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) 2033/05/18 03:34:50 #0: triaging type=7 2033/05/18 03:34:50 triaging input for call #6 socket$inet6_icmp_raw (new signal=2) [704799ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162038 #0 [704808ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [704812ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1676 #0 [704812ms] -> ioctl$sock_SIOCGIFINDEX(0x3, 0x8914, 0x20000140) #0 [704814ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=11323 #0 [704815ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [704815ms] <- socket$inet6_udplite=0x4 errno=14 cover=1646 #0 [704815ms] -> dup(0x4) #0 [704815ms] <- dup=0x5 errno=14 cover=87 #0 [704815ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [704816ms] <- socket$inet6_icmp_raw=0x6 errno=14 cover=1676 #0 [704816ms] -> ioctl$sock_SIOCGIFINDEX(0x6, 0x8933, 0x20000140) #0 [704816ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [704816ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [704816ms] <- socket$inet6_icmp_raw=0x7 errno=14 cover=1665 #0 [704816ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [704817ms] <- perf_event_open=0x8 errno=14 cover=8525 #0 [704818ms] -> ioctl$sock_SIOCGIFINDEX(0x7, 0x8914, 0x20000140) #0 [704820ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=26995 03:34:50 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) 2033/05/18 03:34:50 result hanged=false: [704855ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162040 #0 [704865ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [704866ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1719 #0 [704867ms] -> ioctl$sock_SIOCGIFINDEX(0x3, 0x8914, 0x20000140) #0 [704869ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=11309 #0 [704870ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [704871ms] <- socket$inet6_udplite=0x4 errno=14 cover=1635 #0 [704872ms] -> dup(0x4) #0 [704872ms] <- dup=0x5 errno=14 cover=87 #0 [704872ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [704872ms] <- socket$inet6_icmp_raw=0x6 errno=14 cover=1687 #0 [704872ms] -> ioctl$sock_SIOCGIFINDEX(0x6, 0x8933, 0x20000140) #0 [704872ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [704872ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [704873ms] <- socket$inet6_icmp_raw=0x7 errno=14 cover=1698 #0 [704873ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [704874ms] <- perf_event_open=0x8 errno=14 cover=8419 #0 [704874ms] -> ioctl$sock_SIOCGIFINDEX(0x7, 0x8914, 0x20000140) #0 [704876ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=27267 03:34:50 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) 2033/05/18 03:34:50 result hanged=false: [704910ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162042 #0 [704921ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [704921ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1665 #0 [704923ms] -> ioctl$sock_SIOCGIFINDEX(0x3, 0x8914, 0x20000140) #0 [704925ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=11358 #0 [704926ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [704927ms] <- socket$inet6_udplite=0x4 errno=14 cover=1624 #0 [704928ms] -> dup(0x4) #0 [704928ms] <- dup=0x5 errno=14 cover=87 #0 [704928ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [704928ms] <- socket$inet6_icmp_raw=0x6 errno=14 cover=1676 #0 [704930ms] -> ioctl$sock_SIOCGIFINDEX(0x6, 0x8933, 0x20000140) #0 [704930ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [704930ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [704931ms] <- socket$inet6_icmp_raw=0x7 errno=14 cover=1718 #0 [704932ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [704933ms] <- perf_event_open=0x8 errno=14 cover=8284 #0 [704935ms] -> ioctl$sock_SIOCGIFINDEX(0x7, 0x8914, 0x20000140) #0 [704937ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=27048 2033/05/18 03:34:50 result hanged=false: 2033/05/18 03:34:50 added new input for call #6 socket$inet6_icmp_raw to corpus: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) 03:34:50 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000300), 0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, &(0x7f00000004c0), 0x0, 0x0) [704975ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162044 #0 [704984ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [704987ms] <- socket$inet6_tcp=0x3 errno=14 cover=1742 #0 [704989ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [704991ms] <- openat=0x4 errno=14 cover=6861 #0 [704991ms] -> close(0x4) #0 [704991ms] <- close=0x0 errno=14 cover=326 #0 [704991ms] -> openat(0xffffffffffffff9c, 0x20000200, 0x2, 0x0) #0 [704992ms] <- openat=0x4 errno=14 cover=1015 #0 [704992ms] -> write(0x4, 0x20000240, 0x1) #0 [704992ms] <- write=0x1 errno=14 cover=2915 #0 [704992ms] -> close(0x4) #0 [704992ms] <- close=0x0 errno=14 cover=298 #0 [704992ms] -> execveat(0xffffffffffffff9c, 0x20000280, 0x0, 0x20000300, 0x0) #0 [704994ms] <- execveat=0xffffffffffffffff errno=2 cover=9535 #0 [704994ms] -> close(0xffffffffffffffff) #0 [704994ms] <- close=0xffffffffffffffff errno=9 cover=41 #0 [704994ms] -> execveat(0xffffffffffffff9c, 0x20000380, 0x0, 0x0, 0x0) #0 [704995ms] <- execveat=0xffffffffffffffff errno=2 cover=7962 #0 [704995ms] -> execveat(0xffffffffffffff9c, 0x0, 0x200004c0, 0x0, 0x0) #0 [704995ms] <- execveat=0xffffffffffffffff errno=14 cover=591 enabling collider #0 [704995ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [704996ms] <- socket$inet6_tcp=0x3 errno=14 cover=1766 #0 [704996ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [704996ms] <- openat=0x4 errno=14 cover=1059 pthread_create failed (errno 11) 2033/05/18 03:34:50 result hanged=false: 2033/05/18 03:34:50 #0: triaging type=7 03:34:50 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000300), 0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, &(0x7f00000004c0), 0x0, 0x0) 2033/05/18 03:34:50 triaging input for call #1 openat (new signal=2) [705050ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162146 #0 [705060ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [705063ms] <- socket$inet6_tcp=0x3 errno=14 cover=1742 #0 [705065ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [705066ms] <- openat=0x4 errno=14 cover=6894 #0 [705067ms] -> close(0x4) #0 [705067ms] <- close=0x0 errno=14 cover=326 #0 [705068ms] -> openat(0xffffffffffffff9c, 0x20000200, 0x2, 0x0) #0 [705068ms] <- openat=0x4 errno=14 cover=1072 #0 [705069ms] -> write(0x4, 0x20000240, 0x1) #0 [705070ms] <- write=0x1 errno=14 cover=2925 #0 [705071ms] -> close(0x4) #0 [705071ms] <- close=0x0 errno=14 cover=312 #0 [705071ms] -> execveat(0xffffffffffffff9c, 0x20000280, 0x0, 0x20000300, 0x0) #0 [705073ms] <- execveat=0xffffffffffffffff errno=2 cover=9257 #0 [705074ms] -> close(0xffffffffffffffff) #0 [705075ms] <- close=0xffffffffffffffff errno=9 cover=41 #0 [705075ms] -> execveat(0xffffffffffffff9c, 0x20000380, 0x0, 0x0, 0x0) #0 [705076ms] <- execveat=0xffffffffffffffff errno=2 cover=7917 #0 [705077ms] -> execveat(0xffffffffffffff9c, 0x0, 0x200004c0, 0x0, 0x0) #0 [705077ms] <- execveat=0xffffffffffffffff errno=14 cover=592 03:34:50 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000300), 0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, &(0x7f00000004c0), 0x0, 0x0) 2033/05/18 03:34:50 result hanged=false: [705098ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162148 #0 [705109ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [705110ms] <- socket$inet6_tcp=0x3 errno=14 cover=1709 #0 [705111ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [705112ms] <- openat=0x4 errno=14 cover=6761 #0 [705113ms] -> close(0x4) #0 [705113ms] <- close=0x0 errno=14 cover=326 #0 [705113ms] -> openat(0xffffffffffffff9c, 0x20000200, 0x2, 0x0) #0 [705113ms] <- openat=0x4 errno=14 cover=993 #0 [705113ms] -> write(0x4, 0x20000240, 0x1) #0 [705114ms] <- write=0x1 errno=14 cover=2893 #0 [705114ms] -> close(0x4) #0 [705114ms] <- close=0x0 errno=14 cover=298 #0 [705114ms] -> execveat(0xffffffffffffff9c, 0x20000280, 0x0, 0x20000300, 0x0) #0 [705115ms] <- execveat=0xffffffffffffffff errno=2 cover=9170 #0 [705116ms] -> close(0xffffffffffffffff) #0 [705116ms] <- close=0xffffffffffffffff errno=9 cover=41 #0 [705117ms] -> execveat(0xffffffffffffff9c, 0x20000380, 0x0, 0x0, 0x0) #0 [705117ms] <- execveat=0xffffffffffffffff errno=2 cover=7838 #0 [705118ms] -> execveat(0xffffffffffffff9c, 0x0, 0x200004c0, 0x0, 0x0) #0 [705118ms] <- execveat=0xffffffffffffffff errno=14 cover=613 03:34:50 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000300), 0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, &(0x7f00000004c0), 0x0, 0x0) 2033/05/18 03:34:50 result hanged=false: [705137ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162150 #0 [705146ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [705148ms] <- socket$inet6_tcp=0x3 errno=14 cover=1763 #0 [705149ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [705151ms] <- openat=0x4 errno=14 cover=6707 #0 [705152ms] -> close(0x4) #0 [705152ms] <- close=0x0 errno=14 cover=326 #0 [705152ms] -> openat(0xffffffffffffff9c, 0x20000200, 0x2, 0x0) #0 [705153ms] <- openat=0x4 errno=14 cover=1138 #0 [705153ms] -> write(0x4, 0x20000240, 0x1) #0 [705155ms] <- write=0x1 errno=14 cover=2907 #0 [705155ms] -> close(0x4) #0 [705156ms] <- close=0x0 errno=14 cover=298 #0 [705156ms] -> execveat(0xffffffffffffff9c, 0x20000280, 0x0, 0x20000300, 0x0) #0 [705157ms] <- execveat=0xffffffffffffffff errno=2 cover=9193 #0 [705159ms] -> close(0xffffffffffffffff) #0 [705159ms] <- close=0xffffffffffffffff errno=9 cover=41 #0 [705159ms] -> execveat(0xffffffffffffff9c, 0x20000380, 0x0, 0x0, 0x0) #0 [705161ms] <- execveat=0xffffffffffffffff errno=2 cover=7889 #0 [705162ms] -> execveat(0xffffffffffffff9c, 0x0, 0x200004c0, 0x0, 0x0) #0 [705162ms] <- execveat=0xffffffffffffffff errno=14 cover=591 2033/05/18 03:34:50 result hanged=false: 2033/05/18 03:34:50 added new input for call #1 openat to corpus: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000300), 0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, &(0x7f00000004c0), 0x0, 0x0) 03:34:50 executing program 0: timer_create(0x2, &(0x7f00000001c0)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) [705196ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162152 #0 [705204ms] -> timer_create(0x2, 0x200001c0, 0x20000040) #0 [705205ms] <- timer_create=0x0 errno=14 cover=270 #0 [705205ms] -> timer_settime(0x0, 0x0, 0x20000080, 0x0) #0 [705205ms] <- timer_settime=0x0 errno=14 cover=188 #0 [705206ms] -> clone3(0x200005c0, 0x58) #0 [705223ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 #0 [705226ms] -> timer_settime(0x0, 0x1, 0x20000000, 0x0) #0 [705226ms] <- timer_settime=0x0 errno=14 cover=1072 enabling collider #0 [705228ms] -> timer_create(0x2, 0x200001c0, 0x20000040) #0 [705228ms] <- timer_create=0x0 errno=14 cover=256 #0 [705229ms] -> timer_settime(0x0, 0x0, 0x20000080, 0x0) #0 [705229ms] <- timer_settime=0x0 errno=14 cover=172 pthread_create failed (errno 11) 2033/05/18 03:34:50 result hanged=false: 03:34:50 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='./file1\x00') [705284ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162255 #0 [705294ms] -> mknod$loop(0x20000400, 0x0, 0x700) #0 [705297ms] <- mknod$loop=0x0 errno=14 cover=6175 #0 [705299ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [705302ms] <- perf_event_open=0x3 errno=14 cover=8454 #0 [705302ms] -> link(0x20000140, 0x20000040) #0 [705303ms] <- link=0x0 errno=14 cover=3686 enabling collider #0 [705313ms] -> mknod$loop(0x20000400, 0x0, 0x700) #0 [705313ms] <- mknod$loop=0xffffffffffffffff errno=17 cover=596 #0 [705314ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [705315ms] <- perf_event_open=0x3 errno=14 cover=8208 pthread_create failed (errno 11) 2033/05/18 03:34:50 result hanged=false: 03:34:50 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) readv(r0, 0x0, 0x0) [705379ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162357 #0 [705389ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [705392ms] <- close_range=0x0 errno=14 cover=1297 #0 [705393ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [705395ms] <- socket$inet6_tcp=0x3 errno=14 cover=1742 #0 [705395ms] -> readv(0x3, 0x0, 0x0) #0 [705396ms] <- readv=0x0 errno=14 cover=78 enabling collider #0 [705396ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [705396ms] <- close_range=0x0 errno=14 cover=51 #0 [705397ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [705397ms] <- socket$inet6_tcp=0x4 errno=14 cover=1756 pthread_create failed (errno 11) 2033/05/18 03:34:50 result hanged=false: 03:34:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) [705450ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162459 #0 [705460ms] -> openat$ptmx(0xffffffffffffff9c, 0x200000c0, 0x0, 0x0) #0 [705461ms] <- openat$ptmx=0xffffffffffffffff errno=2 cover=1223 #0 [705462ms] -> ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) #0 [705462ms] <- ioctl$TIOCSBRK=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [705462ms] -> openat$ptmx(0xffffffffffffff9c, 0x200000c0, 0x0, 0x0) #0 [705463ms] <- openat$ptmx=0xffffffffffffffff errno=2 cover=1193 2033/05/18 03:34:50 result hanged=false: 03:34:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newae={0x68, 0x14, 0xb0d, 0x0, 0x0, {{@in=@private}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@mark={0xc}, @replay_esn_val={0x1c}]}, 0x68}}, 0x0) [705482ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162461 #0 [705492ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [705495ms] <- socket$nl_xfrm=0x3 errno=14 cover=1408 [ 1455.475038] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [705496ms] -> sendmsg$nl_xfrm(0x3, 0x20000140, 0x0) #0 [705500ms] <- sendmsg$nl_xfrm=0x68 errno=14 cover=3334 enabling collider #0 [705501ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [705501ms] <- socket$nl_xfrm=0x3 errno=14 cover=1432 03:34:50 executing program 0: r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x1fd, &(0x7f0000000000)) 2033/05/18 03:34:50 result hanged=false: 2033/05/18 03:34:50 poll: candidates=8 inputs=0 signal=0 [705522ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162463 #0 [705531ms] -> gettid() #0 [705532ms] <- gettid=0x27aa0 errno=14 cover=48 #0 [705533ms] -> getpid() #0 [705534ms] <- getpid=0x27a9f errno=14 cover=48 #0 [705536ms] -> rt_tgsigqueueinfo(0x27a9f, 0x27aa0, 0x1fd, 0x20000000) #0 [705537ms] <- rt_tgsigqueueinfo=0xffffffffffffffff errno=22 cover=133 enabling collider #0 [705537ms] -> gettid() #0 [705537ms] <- gettid=0x27aa0 errno=14 cover=48 #0 [705538ms] -> getpid() #0 [705538ms] <- getpid=0x27a9f errno=14 cover=48 pthread_create failed (errno 11) 2033/05/18 03:34:51 result hanged=false: 03:34:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0}}, 0x0) [705589ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162565 #0 [705598ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [705598ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1191 #0 [705599ms] -> sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x200010c0, 0x0) #0 [705599ms] <- sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL=0xffffffffffffffff errno=9 cover=52 enabling collider #0 [705600ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [705601ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1179 2033/05/18 03:34:51 result hanged=false: 03:34:51 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="814344303031", 0x6, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002800000000000028252f45000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8800}, {&(0x7f0000000240)="b3a3b255976ea759e5dcad1ae26b88ad6a7bc4aa6697b2", 0x17, 0x4}], 0x0, &(0x7f0000002a00)={[{@cruft}]}) [705616ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162567 #0 [705625ms] -> syz_mount_image$iso9660(0x20000000, 0x20000100, 0x0, 0x3, 0x20000080, 0x0, 0x20002a00) #0 [705631ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=2 cover=6832 enabling collider #0 [705633ms] -> syz_mount_image$iso9660(0x20000000, 0x20000100, 0x0, 0x3, 0x20000080, 0x0, 0x20002a00) #0 [705634ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=2 cover=6652 2033/05/18 03:34:51 result hanged=false: 03:34:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x1c, 0x14, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) [705652ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162569 #0 [705662ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [705665ms] <- socket$netlink=0x3 errno=14 cover=1435 #0 [705666ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [705668ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [705668ms] -> sendmsg$nl_generic(0x4, 0x20000280, 0x0) [ 1455.645311] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [705670ms] <- sendmsg$nl_generic=0x1c errno=14 cover=3275 enabling collider #0 [705670ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [705673ms] <- socket$netlink=0x3 errno=14 cover=1594 #0 [705673ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [705674ms] <- fcntl$dupfd=0x4 errno=14 cover=110 pthread_create failed (errno 11) 2033/05/18 03:34:51 result hanged=false: 03:34:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbca6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000800)={{}, {}, 0xfffffffe}) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000000)={0x85, 0x0, 'client1\x00', 0x1, "718fa9c84c8ee781", "39aaf5d3f118e3a108b62c706580484f830e3fcd13ce69b6f99f76294c6490bf", 0x7fff, 0x2}) [705730ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162671 #0 [705741ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [705742ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=3336 #0 [705743ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [705743ms] <- socket$netlink=0x3 errno=14 cover=1409 #0 [705744ms] -> openat$sndseq(0xffffffffffffff9c, 0x200005c0, 0x0) #0 [705745ms] <- openat$sndseq=0xffffffffffffffff errno=2 cover=1206 #0 [705745ms] -> ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x20000800) #0 [705746ms] <- ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT=0xffffffffffffffff errno=9 cover=45 #0 [705746ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [705747ms] <- socket$inet_tcp=0x4 errno=14 cover=1756 #0 [705747ms] -> openat$sndseq(0xffffffffffffff9c, 0x200005c0, 0x0) #0 [705748ms] <- openat$sndseq=0xffffffffffffffff errno=2 cover=1221 #0 [705748ms] -> ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x20000000) #0 [705748ms] <- ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [705749ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [705749ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=3321 #0 [705751ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [705751ms] <- socket$netlink=0x3 errno=14 cover=1412 pthread_create failed (errno 11) 03:34:51 executing program 0: syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) 2033/05/18 03:34:51 result hanged=false: [705796ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162773 #0 [705805ms] -> syz_genetlink_get_family_id$nl802154(0x200003c0, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [705808ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=10096 enabling collider #0 [705810ms] -> syz_genetlink_get_family_id$nl802154(0x200003c0, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [705813ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=7682 2033/05/18 03:34:51 result hanged=false: 03:34:51 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [705832ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162775 #0 [705840ms] -> syz_usb_connect_ath9k(0x3, 0x5a, 0x20000200, 0x0) syz_usb_connect: dev: 0x20000200 syz_usb_connect: device data: 12 01 00 02 ff ff ff 40 f3 0c 71 92 08 01 01 02 03 01 09 02 48 00 01 01 00 80 fa 09 04 00 00 06 ff 00 00 00 09 05 01 02 00 02 00 00 00 09 05 82 02 00 02 00 00 00 09 05 83 03 40 00 01 00 00 09 05 04 03 40 00 01 00 00 09 05 05 02 00 02 00 00 00 09 05 06 02 00 02 00 00 00 syz_usb_connect: usb_raw_open failed with -1 #0 [705842ms] <- syz_usb_connect_ath9k=0xffffffffffffffff errno=2 cover=29274 enabling collider #0 [706343ms] -> syz_usb_connect_ath9k(0x3, 0x5a, 0x20000200, 0x0) syz_usb_connect: dev: 0x20000200 syz_usb_connect: device data: 12 01 00 02 ff ff ff 40 f3 0c 71 92 08 01 01 02 03 01 09 02 48 00 01 01 00 80 fa 09 04 00 00 06 ff 00 00 00 09 05 01 02 00 02 00 00 00 09 05 82 02 00 02 00 00 00 09 05 83 03 40 00 01 00 00 09 05 04 03 40 00 01 00 00 09 05 05 02 00 02 00 00 00 09 05 06 02 00 02 00 00 00 syz_usb_connect: usb_raw_open failed with -1 #0 [706345ms] <- syz_usb_connect_ath9k=0xffffffffffffffff errno=2 cover=27645 2033/05/18 03:34:51 result hanged=false: 03:34:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001800010001000000000000000a000000080000007f000001080017"], 0x24}}, 0x0) [706364ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162777 #0 [706373ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [706373ms] <- socket$netlink=0x3 errno=14 cover=1399 #0 [706374ms] -> sendmsg$nl_generic(0x3, 0x20000000, 0x0) #0 [706375ms] <- sendmsg$nl_generic=0x24 errno=14 cover=1753 enabling collider #0 [706376ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [706376ms] <- socket$netlink=0x3 errno=14 cover=1431 2033/05/18 03:34:51 result hanged=false: 03:34:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000780)={0x0, 0x7, &(0x7f0000000380)}) 2033/05/18 03:34:51 poll: candidates=8 inputs=0 signal=0 [706399ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162779 #0 [706409ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [706413ms] <- syz_open_dev$tty1=0xffffffffffffffff errno=2 cover=1199 #0 [706415ms] -> ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x20000780) #0 [706415ms] <- ioctl$GIO_FONTX=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [706416ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [706417ms] <- syz_open_dev$tty1=0xffffffffffffffff errno=2 cover=1165 03:34:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0xf0, 0x1a, 0x9, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev, 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 2033/05/18 03:34:51 result hanged=false: [706436ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162781 #0 [706447ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [706448ms] <- socket$nl_xfrm=0x3 errno=14 cover=1419 #0 [706448ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) #0 [706449ms] <- sendmsg$nl_xfrm=0xf0 errno=14 cover=1564 enabling collider #0 [706449ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [706449ms] <- socket$nl_xfrm=0x3 errno=14 cover=1432 2033/05/18 03:34:51 result hanged=false: 03:34:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in, @in=@loopback}, {@in=@dev, 0x0, 0x32}, @in6=@private2}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x0) [706469ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162783 #0 [706480ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [706480ms] <- socket$nl_xfrm=0x3 errno=14 cover=1419 #0 [706481ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) [ 1456.458455] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [706484ms] <- sendmsg$nl_xfrm=0x138 errno=14 cover=10821 enabling collider #0 [706485ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [706486ms] <- socket$nl_xfrm=0x3 errno=14 cover=1530 #0 [706487ms] -> sendmsg$nl_xfrm(2033/05/18 03:34:51 result hanged=false: 03:34:51 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x3, &(0x7f0000000880)=[{&(0x7f00000005c0)='e', 0x1, 0x3}, {0x0}, {&(0x7f0000000800)='E', 0x1, 0x401}], 0x0, 0x0) [706507ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162785 #0 [706517ms] -> syz_mount_image$vfat(0x0, 0x0, 0x0, 0x3, 0x20000880, 0x0, 0x0) #0 [706517ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=5113 enabling collider #0 [706518ms] -> syz_mount_image$vfat(0x0, 0x0, 0x0, 0x3, 0x20000880, 0x0, 0x0) #0 [706519ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=5399 03:34:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') 2033/05/18 03:34:51 result hanged=false: [706543ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162787 #0 [706554ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [706560ms] <- perf_event_open=0x3 errno=14 cover=9174 #0 [706560ms] -> syz_mount_image$tmpfs(0x20000400, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000040) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='' #0 [706565ms] <- syz_mount_image$tmpfs=0x4 errno=0 cover=57393 #0 [706566ms] -> symlinkat(0x200000c0, 0x4, 0x20000100) #0 [706566ms] <- symlinkat=0x0 errno=14 cover=6917 enabling collider #0 [706574ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [706575ms] <- perf_event_open=0x3 errno=14 cover=8645 #0 [706575ms] -> syz_mount_image$tmpfs(0x20000400, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000040) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='' #0 [706579ms] <- syz_mount_image$tmpfs=0x4 errno=0 cover=57506 pthread_create failed (errno 11) 2033/05/18 03:34:52 result hanged=false: 03:34:52 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) quotactl(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) umount(./5527/file0) umount(./5527/file0) [706655ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162889 #0 [706665ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [706666ms] <- mknod$loop=0x0 errno=14 cover=5839 #0 [706667ms] -> quotactl(0x0, 0x20000040, 0x0, 0x0) #0 [706667ms] <- quotactl=0xffffffffffffffff errno=19 cover=906 enabling collider #0 [706667ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [706668ms] <- mknod$loop=0xffffffffffffffff errno=17 cover=586 2033/05/18 03:34:52 result hanged=false: 03:34:52 executing program 0: io_setup(0xa04d, &(0x7f0000000000)) io_setup(0xf75, &(0x7f0000000040)) [706688ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162891 #0 [706700ms] -> io_setup(0xa04d, 0x20000000) #0 [706709ms] <- io_setup=0x0 errno=14 cover=180373 #0 [706712ms] -> io_setup(0xf75, 0x20000040) #0 [706715ms] <- io_setup=0x0 errno=14 cover=18833 enabling collider #0 [706717ms] -> io_setup(0xa04d, 0x20000000) #0 [706717ms] <- io_setup=0xffffffffffffffff errno=22 cover=40 2033/05/18 03:34:52 result hanged=false: 2033/05/18 03:34:52 #0: triaging type=7 2033/05/18 03:34:52 triaging input for call #0 io_setup (new signal=1) 03:34:52 executing program 0: io_setup(0xa04d, &(0x7f0000000000)) io_setup(0xf75, &(0x7f0000000040)) [706749ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162893 #0 [706759ms] -> io_setup(0xa04d, 0x20000000) #0 [706767ms] <- io_setup=0x0 errno=14 cover=180422 #0 [706779ms] -> io_setup(0xf75, 0x20000040) #0 [706780ms] <- io_setup=0x0 errno=14 cover=18815 2033/05/18 03:34:52 result hanged=false: 03:34:52 executing program 0: io_setup(0xa04d, &(0x7f0000000000)) io_setup(0xf75, &(0x7f0000000040)) [706819ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162895 #0 [706828ms] -> io_setup(0xa04d, 0x20000000) #0 [706836ms] <- io_setup=0x0 errno=14 cover=180347 #0 [706848ms] -> io_setup(0xf75, 0x20000040) #0 [706850ms] <- io_setup=0x0 errno=14 cover=18844 03:34:52 executing program 0: io_setup(0xa04d, &(0x7f0000000000)) io_setup(0xf75, &(0x7f0000000040)) 2033/05/18 03:34:52 result hanged=false: [706888ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162897 #0 [706897ms] -> io_setup(0xa04d, 0x20000000) #0 [706905ms] <- io_setup=0x0 errno=14 cover=180464 #0 [706919ms] -> io_setup(0xf75, 0x20000040) #0 [706921ms] <- io_setup=0x0 errno=14 cover=18778 2033/05/18 03:34:52 result hanged=false: 2033/05/18 03:34:52 added new input for call #0 io_setup to corpus: io_setup(0xa04d, &(0x7f0000000000)) io_setup(0xf75, &(0x7f0000000040)) 03:34:52 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000340)) [706963ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 162899 #0 [706972ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [706976ms] <- perf_event_open=0x3 errno=14 cover=8133 #0 [706977ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [706979ms] <- socket$inet6_tcp=0x4 errno=14 cover=5378 #0 [706979ms] -> ioctl$sock_TIOCINQ(0x4, 0x541b, 0x20000340) #0 [706979ms] <- ioctl$sock_TIOCINQ=0x0 errno=14 cover=267 enabling collider #0 [706991ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [706992ms] <- perf_event_open=0x3 errno=14 cover=8578 #0 [706993ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [706993ms] <- socket$inet6_tcp=0x4 errno=14 cover=5227 pthread_create failed (errno 11) 03:34:52 executing program 0: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) syslog(0x0, 0x0, 0x0) 2033/05/18 03:34:52 result hanged=false: 2033/05/18 03:34:52 poll: candidates=8 inputs=0 signal=0 [707067ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163001 #0 [707076ms] -> stat(0x20001cc0, 0x20001c00) #0 [707079ms] <- stat=0x0 errno=14 cover=532 #0 [707080ms] -> setresuid(0xffffffffffffffff, 0x41ed, 0x0) #0 [707082ms] <- setresuid=0x0 errno=14 cover=376 #0 [707082ms] -> syslog(0x0, 0x0, 0x0) #0 [707082ms] <- syslog=0xffffffffffffffff errno=1 cover=59 enabling collider #0 [707082ms] -> stat(0x20001cc0, 0x20001c00) #0 [707083ms] <- stat=0x0 errno=14 cover=541 #0 [707083ms] -> setresuid(0xffffffffffffffff, 0x41ed, 0x0) #0 [707083ms] <- setresuid=0x0 errno=14 cover=422 pthread_create failed (errno 11) 03:34:52 executing program 0: epoll_create1(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2033/05/18 03:34:52 result hanged=false: [707135ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163103 #0 [707144ms] -> epoll_create1(0x0) #0 [707144ms] <- epoll_create1=0x3 errno=14 cover=496 #0 [707145ms] -> openat$ttyS3(0xffffffffffffff9c, 0x200000c0, 0x0, 0x0) #0 [707146ms] <- openat$ttyS3=0xffffffffffffffff errno=2 cover=1166 #0 [707146ms] -> syz_open_dev$vcsa(0x20000100, 0x2, 0x0) #0 [707147ms] <- syz_open_dev$vcsa=0xffffffffffffffff errno=2 cover=1176 #0 [707147ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [707147ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1157 #0 [707147ms] -> sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x0) #0 [707148ms] <- sendmsg$NLBL_MGMT_C_PROTOCOLS=0xffffffffffffffff errno=9 cover=52 #0 [707148ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [707148ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1178 enabling collider #0 [707149ms] -> epoll_create1(0x0) #0 [707150ms] <- epoll_create1=0x3 errno=14 cover=523 #0 [707151ms] -> openat$ttyS3(0xffffffffffffff9c, 0x200000c0, 0x0, 0x0) #0 [707151ms] <- openat$ttyS3=0xffffffffffffffff errno=2 cover=1187 pthread_create failed (errno 11) 03:34:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x0, 0x0, 0x0, 0x400}}) 2033/05/18 03:34:52 result hanged=false: [707205ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163205 #0 [707215ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [707218ms] <- syz_open_dev$tty20=0xffffffffffffffff errno=2 cover=1166 #0 [707219ms] -> ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x20000140) #0 [707222ms] <- ioctl$TIOCL_SETSEL=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [707222ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [707222ms] <- syz_open_dev$tty20=0xffffffffffffffff errno=2 cover=1154 #0 [707223ms] -> ioctl$TIOCL_SETSEL(0xffffffffffffffff, 2033/05/18 03:34:52 result hanged=false: 03:34:52 executing program 0: perf_event_open(&(0x7f0000002580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [707243ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163207 #0 [707253ms] -> perf_event_open(0x20002580, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [707257ms] <- perf_event_open=0xffffffffffffffff errno=95 cover=834 enabling collider #0 [707259ms] -> perf_event_open(0x20002580, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [707259ms] <- perf_event_open=0xffffffffffffffff errno=95 cover=844 2033/05/18 03:34:52 result hanged=false: 03:34:52 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0xf30b202d16d1bb4d, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) [707279ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163209 #0 [707287ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [707291ms] <- perf_event_open=0x3 errno=14 cover=8514 #0 [707291ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [707291ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1202 #0 [707292ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000180, 0xffffffffffffffff) syz_genetlink_get_family_id(NLBL_UNLBL, -1) netlink: failed to get family id for NLBL_UNLBL: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [707292ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0xffffffffffffffff errno=2 cover=7998 #0 [707293ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [707293ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1169 #0 [707293ms] -> sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, 0x20000140, 0x0) #0 [707293ms] <- sendmsg$NLBL_UNLABEL_C_STATICLISTDEF=0xffffffffffffffff errno=9 cover=52 enabling collider #0 [707303ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [707304ms] <- perf_event_open=0x3 errno=14 cover=8254 #0 [707304ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [707304ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1168 pthread_create failed (errno 11) 03:34:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, 0x0) 2033/05/18 03:34:52 result hanged=false: [707371ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163311 #0 [707380ms] -> syz_open_dev$sg(0x200002c0, 0x0, 0x0) #0 [707381ms] <- syz_open_dev$sg=0xffffffffffffffff errno=2 cover=1180 #0 [707382ms] -> ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, 0x0) #0 [707382ms] <- ioctl$SCSI_IOCTL_GET_BUS_NUMBER=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [707383ms] -> syz_open_dev$sg(0x200002c0, 0x0, 0x0) #0 [707386ms] <- syz_open_dev$sg=0xffffffffffffffff errno=2 cover=1165 03:34:52 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="13892a42a51deefe6c11ee55facc", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 2033/05/18 03:34:52 result hanged=false: [707406ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163313 #0 [707416ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [707418ms] <- perf_event_open=0x3 errno=14 cover=8397 #0 [707419ms] -> fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) #0 [707419ms] <- fcntl$setlease=0xffffffffffffffff errno=9 cover=74 #0 [707419ms] -> socket$packet(0x11, 0x3, 0x300) #0 [707420ms] <- socket$packet=0x4 errno=14 cover=5071 #0 [707421ms] -> setsockopt$packet_int(0x4, 0x107, 0x14, 0x20000040, 0x4) #0 [707421ms] <- setsockopt$packet_int=0x0 errno=14 cover=162 #0 [707422ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [707424ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=5206 #0 [707424ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x20000140) #0 [707424ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=367 #0 [707425ms] -> sendto$packet(0x4, 0x200000c0, 0xe, 0x0, 0x20000100, 0x14) #0 [707426ms] <- sendto$packet=0xe errno=14 cover=2593 enabling collider #0 [707440ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [707442ms] <- perf_event_open=0x3 errno=14 cover=8364 #0 [707442ms] -> fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) #0 [707443ms] <- fcntl$setlease=0xffffffffffffffff errno=9 cover=74 pthread_create failed (errno 11) 03:34:52 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="13892a42a51deefe6c11ee55facc", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 2033/05/18 03:34:52 result hanged=false: 2033/05/18 03:34:52 #0: triaging type=7 2033/05/18 03:34:52 triaging input for call #6 sendto$packet (new signal=2) [707511ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163415 #0 [707521ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [707523ms] <- perf_event_open=0x3 errno=14 cover=8204 #0 [707524ms] -> fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) #0 [707524ms] <- fcntl$setlease=0xffffffffffffffff errno=9 cover=74 #0 [707524ms] -> socket$packet(0x11, 0x3, 0x300) #0 [707525ms] <- socket$packet=0x4 errno=14 cover=5137 #0 [707526ms] -> setsockopt$packet_int(0x4, 0x107, 0x14, 0x20000040, 0x4) #0 [707526ms] <- setsockopt$packet_int=0x0 errno=14 cover=162 #0 [707526ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [707528ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=5253 #0 [707529ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x20000140) #0 [707529ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=367 #0 [707529ms] -> sendto$packet(0x4, 0x200000c0, 0xe, 0x0, 0x20000100, 0x14) #0 [707530ms] <- sendto$packet=0xe errno=14 cover=1705 2033/05/18 03:34:53 result hanged=false: 03:34:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="13892a42a51deefe6c11ee55facc", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) [707570ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163417 #0 [707579ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [707585ms] <- perf_event_open=0x3 errno=14 cover=8325 #0 [707587ms] -> fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) #0 [707587ms] <- fcntl$setlease=0xffffffffffffffff errno=9 cover=74 #0 [707588ms] -> socket$packet(0x11, 0x3, 0x300) #0 [707589ms] <- socket$packet=0x4 errno=14 cover=4963 #0 [707589ms] -> setsockopt$packet_int(0x4, 0x107, 0x14, 0x20000040, 0x4) #0 [707589ms] <- setsockopt$packet_int=0x0 errno=14 cover=104 #0 [707589ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [707590ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=1701 #0 [707590ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x20000140) #0 [707590ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [707590ms] -> sendto$packet(0x4, 0x200000c0, 0xe, 0x0, 0x20000100, 0x14) #0 [707591ms] <- sendto$packet=0xe errno=14 cover=669 03:34:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="13892a42a51deefe6c11ee55facc", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 2033/05/18 03:34:53 result hanged=false: [707626ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163419 #0 [707636ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [707642ms] <- perf_event_open=0x3 errno=14 cover=9362 #0 [707643ms] -> fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) #0 [707643ms] <- fcntl$setlease=0xffffffffffffffff errno=9 cover=74 #0 [707644ms] -> socket$packet(0x11, 0x3, 0x300) #0 [707645ms] <- socket$packet=0x4 errno=14 cover=5161 #0 [707646ms] -> setsockopt$packet_int(0x4, 0x107, 0x14, 0x20000040, 0x4) #0 [707646ms] <- setsockopt$packet_int=0x0 errno=14 cover=162 #0 [707646ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [707647ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=5380 #0 [707648ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x20000140) #0 [707648ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=367 #0 [707649ms] -> sendto$packet(0x4, 0x200000c0, 0xe, 0x0, 0x20000100, 0x14) #0 [707650ms] <- sendto$packet=0xe errno=14 cover=1719 2033/05/18 03:34:53 result hanged=false: 2033/05/18 03:34:53 added new input for call #6 sendto$packet to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="13892a42a51deefe6c11ee55facc", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 03:34:53 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = msgget(0x2, 0x22a) msgctl$IPC_RMID(r0, 0x0) [707695ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163421 #0 [707704ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [707715ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=71092 [ 1457.692827] audit: type=1326 audit(2000000093.165:914): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=293047 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe19e0d25ff code=0x7ffc0000 [ 1457.698178] audit: type=1326 audit(2000000093.167:915): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=293047 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe19e0d25ff code=0x7ffc0000 [ 1457.704426] audit: type=1326 audit(2000000093.168:916): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=293047 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe19e0d25ff code=0x7ffc0000 [ 1457.709518] audit: type=1326 audit(2000000093.169:917): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=293047 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19e11fb19 code=0x7ffc0000 #0 [707724ms] -> msgget(0x798e2635, 0x22a) #0 [707730ms] <- msgget=0x8 errno=14 cover=3241 [ 1457.714756] audit: type=1326 audit(2000000093.169:918): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=293047 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19e11fb19 code=0x7ffc0000 #0 [707731ms] -> msgctl$IPC_RMID(0x8, 0x0) #0 [707740ms] <- msgctl$IPC_RMID=0x0 errno=14 cover=3107 enabling collider #0 [707741ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) [ 1457.719369] audit: type=1326 audit(2000000093.174:919): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=293047 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe19e0d25ff code=0x7ffc0000 #0 [707747ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=41343 [ 1457.724518] audit: type=1326 audit(2000000093.175:920): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=293047 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe19e0d25ff code=0x7ffc0000 #0 [707752ms] -> msgget(0x798e2635, 0x22a) [ 1457.730019] audit: type=1326 audit(2000000093.176:921): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=293047 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe19e0d25ff code=0x7ffc0000 #0 [707756ms] <- msgget=0x9 errno=14 cover=3344 [ 1457.734793] audit: type=1326 audit(2000000093.180:922): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=293047 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe19e0d25ff code=0x7ffc0000 [ 1457.740014] audit: type=1326 audit(2000000093.180:923): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=293047 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe19e0d25ff code=0x7ffc0000 pthread_create failed (errno 11) 2033/05/18 03:34:53 result hanged=false: 03:34:53 executing program 0: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 2033/05/18 03:34:53 poll: candidates=8 inputs=0 signal=0 [707819ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163523 #0 [707829ms] -> shmget$private(0x0, 0x2000, 0x0, 0x20ffd000) #0 [707829ms] <- shmget$private=0x26 errno=14 cover=1086 enabling collider #0 [707831ms] -> shmget$private(0x0, 0x2000, 0x0, 0x20ffd000) #0 [707832ms] <- shmget$private=0x27 errno=14 cover=1111 2033/05/18 03:34:53 result hanged=false: 03:34:53 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000012c0)={@remote, @random="f40be63db909", @val, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [707852ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163525 #0 [707861ms] -> syz_emit_ethernet(0x3e, 0x200012c0, 0x0) aa aa aa aa aa bb f4 0b e6 3d b9 09 91 00 00 00 81 00 00 00 08 00 45 00 00 28 00 00 00 00 00 06 2e b0 ac 1e 00 01 e0 00 00 01 00 00 00 00 44 43 42 41 44 43 42 41 50 00 00 00 16 bb 00 00 #0 [707865ms] <- syz_emit_ethernet=0x3e errno=14 cover=18603 enabling collider #0 [707865ms] -> syz_emit_ethernet(0x3e, 0x200012c0, 0x0) aa aa aa aa aa bb f4 0b e6 3d b9 09 91 00 00 00 81 00 00 00 08 00 45 00 00 28 00 00 00 00 00 06 2e b0 ac 1e 00 01 e0 00 00 01 00 00 00 00 44 43 42 41 44 43 42 41 50 00 00 00 16 bb 00 00 #0 [707866ms] <- syz_emit_ethernet=0x3e errno=14 cover=18387 2033/05/18 03:34:53 result hanged=false: 03:34:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) writev(r0, &(0x7f0000001180)=[{0x0}, {0x0}], 0x2) [707885ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163527 #0 [707894ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [707894ms] <- socket$inet6_udp=0x3 errno=14 cover=1687 #0 [707895ms] -> writev(0x3, 0x20001180, 0x2) #0 [707895ms] <- writev=0x0 errno=14 cover=131 enabling collider #0 [707895ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [707896ms] <- socket$inet6_udp=0x3 errno=14 cover=1704 2033/05/18 03:34:53 result hanged=false: 03:34:53 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) unlink(&(0x7f00000001c0)='./file0\x00') getdents64(r0, &(0x7f0000000240)=""/4096, 0x1000) [707915ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163529 #0 [707925ms] -> syz_mount_image$vfat(0x20000000, 0x200000c0, 0x0, 0x2, 0x20000200, 0x0, 0x20011300) #0 [707926ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=4896 #0 [707927ms] -> chdir(0x20000040) #0 [707927ms] <- chdir=0xffffffffffffffff errno=2 cover=908 #0 [707928ms] -> setresuid(0xffffffffffffffff, 0x0, 0x0) #0 [707928ms] <- setresuid=0x0 errno=14 cover=371 #0 [707929ms] -> creat(0x20000140, 0x0) #0 [707929ms] <- creat=0x3 errno=14 cover=6594 #0 [707930ms] -> unlink(0x200001c0) #0 [707931ms] <- unlink=0x0 errno=14 cover=3368 #0 [707933ms] -> getdents64(0xffffffffffffffff, 0x20000240, 0x1000) #0 [707933ms] <- getdents64=0xffffffffffffffff errno=9 cover=46 enabling collider #0 [707933ms] -> syz_mount_image$vfat(0x20000000, 0x200000c0, 0x0, 0x2, 0x20000200, 0x0, 0x20011300) #0 [707935ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=4635 #0 [707936ms] -> chdir(0x20000040) #0 [707936ms] <- chdir=0xffffffffffffffff errno=2 cover=971 pthread_create failed (errno 11) 2033/05/18 03:34:53 result hanged=false: 2033/05/18 03:34:53 #0: triaging type=7 2033/05/18 03:34:53 triaging input for call #0 syz_mount_image$vfat (new signal=1) 03:34:53 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) unlink(&(0x7f00000001c0)='./file0\x00') getdents64(r0, &(0x7f0000000240)=""/4096, 0x1000) [707991ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163631 #0 [708001ms] -> syz_mount_image$vfat(0x20000000, 0x200000c0, 0x0, 0x2, 0x20000200, 0x0, 0x20011300) #0 [708002ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=4982 #0 [708004ms] -> chdir(0x20000040) #0 [708004ms] <- chdir=0xffffffffffffffff errno=2 cover=899 #0 [708005ms] -> setresuid(0xffffffffffffffff, 0x0, 0x0) #0 [708005ms] <- setresuid=0x0 errno=14 cover=371 #0 [708006ms] -> creat(0x20000140, 0x0) #0 [708007ms] <- creat=0x3 errno=14 cover=6408 #0 [708008ms] -> unlink(0x200001c0) #0 [708008ms] <- unlink=0x0 errno=14 cover=3229 #0 [708009ms] -> getdents64(0xffffffffffffffff, 0x20000240, 0x1000) #0 [708009ms] <- getdents64=0xffffffffffffffff errno=9 cover=46 03:34:53 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) unlink(&(0x7f00000001c0)='./file0\x00') getdents64(r0, &(0x7f0000000240)=""/4096, 0x1000) 2033/05/18 03:34:53 result hanged=false: [708030ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163633 #0 [708039ms] -> syz_mount_image$vfat(0x20000000, 0x200000c0, 0x0, 0x2, 0x20000200, 0x0, 0x20011300) #0 [708041ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=5005 #0 [708042ms] -> chdir(0x20000040) #0 [708042ms] <- chdir=0xffffffffffffffff errno=2 cover=909 #0 [708043ms] -> setresuid(0xffffffffffffffff, 0x0, 0x0) #0 [708043ms] <- setresuid=0x0 errno=14 cover=382 #0 [708044ms] -> creat(0x20000140, 0x0) #0 [708045ms] <- creat=0x3 errno=14 cover=6387 #0 [708046ms] -> unlink(0x200001c0) #0 [708046ms] <- unlink=0x0 errno=14 cover=3226 #0 [708047ms] -> getdents64(0xffffffffffffffff, 0x20000240, 0x1000) #0 [708047ms] <- getdents64=0xffffffffffffffff errno=9 cover=46 2033/05/18 03:34:53 result hanged=false: 03:34:53 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) unlink(&(0x7f00000001c0)='./file0\x00') getdents64(r0, &(0x7f0000000240)=""/4096, 0x1000) [708067ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163635 #0 [708076ms] -> syz_mount_image$vfat(0x20000000, 0x200000c0, 0x0, 0x2, 0x20000200, 0x0, 0x20011300) #0 [708081ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=5142 #0 [708083ms] -> chdir(0x20000040) #0 [708083ms] <- chdir=0xffffffffffffffff errno=2 cover=920 #0 [708083ms] -> setresuid(0xffffffffffffffff, 0x0, 0x0) #0 [708083ms] <- setresuid=0x0 errno=14 cover=371 #0 [708083ms] -> creat(0x20000140, 0x0) #0 [708084ms] <- creat=0x3 errno=14 cover=6352 #0 [708084ms] -> unlink(0x200001c0) #0 [708084ms] <- unlink=0x0 errno=14 cover=3227 #0 [708085ms] -> getdents64(0xffffffffffffffff, 0x20000240, 0x1000) #0 [708085ms] <- getdents64=0xffffffffffffffff errno=9 cover=46 2033/05/18 03:34:53 result hanged=false: 2033/05/18 03:34:53 added new input for call #0 syz_mount_image$vfat to corpus: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) unlink(&(0x7f00000001c0)='./file0\x00') getdents64(r0, &(0x7f0000000240)=""/4096, 0x1000) 03:34:53 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25) r1 = socket$unix(0x1, 0x1, 0x0) shutdown(r1, 0x0) [708114ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163637 #0 [708122ms] -> openat$selinux_attr(0xffffffffffffff9c, 0x20000080, 0x2, 0x0) #0 [708126ms] <- openat$selinux_attr=0xffffffffffffffff errno=2 cover=1256 #0 [708127ms] -> write$selinux_attr(0xffffffffffffffff, 0x20000100, 0x25) #0 [708127ms] <- write$selinux_attr=0xffffffffffffffff errno=9 cover=47 #0 [708128ms] -> socket$unix(0x1, 0x1, 0x0) #0 [708128ms] <- socket$unix=0x3 errno=14 cover=1434 #0 [708128ms] -> shutdown(0x3, 0x0) #0 [708128ms] <- shutdown=0x0 errno=14 cover=81 enabling collider #0 [708129ms] -> openat$selinux_attr(0xffffffffffffff9c, 0x20000080, 0x2, 0x0) #0 [708129ms] <- openat$selinux_attr=0xffffffffffffffff errno=2 cover=1186 #0 [708131ms] -> write$selinux_attr(0xffffffffffffffff, 0x20000100, 0x25) #0 [708131ms] <- write$selinux_attr=0xffffffffffffffff errno=9 cover=47 pthread_create failed (errno 11) 2033/05/18 03:34:53 result hanged=false: 03:34:53 executing program 0: clock_nanosleep(0x6, 0x0, 0x0, 0x0) [708182ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163739 #0 [708193ms] -> clock_nanosleep(0x6, 0x0, 0x0, 0x0) #0 [708193ms] <- clock_nanosleep=0xffffffffffffffff errno=95 cover=38 enabling collider #0 [708194ms] -> clock_nanosleep(0x6, 0x0, 0x0, 0x0) #0 [708194ms] <- clock_nanosleep=0xffffffffffffffff errno=95 cover=38 03:34:53 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x7, 0x8, 0x1000, 0x10000, {{0x6, 0x4, 0x2, 0x19, 0x18, 0x67, 0x0, 0x9, 0x0, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3, 0x8e}]}}}}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000740), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x40081, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 2033/05/18 03:34:53 result hanged=false: [708214ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163741 #0 [708224ms] -> ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x20000280) #0 [708224ms] <- ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL=0xffffffffffffffff errno=9 cover=45 #0 [708225ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000400, 0x42001, 0x0) #0 [708226ms] <- openat$loop_ctrl=0xffffffffffffffff errno=2 cover=1216 #0 [708226ms] -> accept4$packet(0xffffffffffffffff, 0x0, 0x20000740, 0x0) #0 [708226ms] <- accept4$packet=0xffffffffffffffff errno=9 cover=46 #0 [708226ms] -> openat$ptmx(0xffffffffffffff9c, 0x20000800, 0x40081, 0x0) #0 [708228ms] <- openat$ptmx=0xffffffffffffffff errno=2 cover=1165 #0 [708228ms] -> syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [708229ms] <- syz_genetlink_get_family_id$devlink=0xffffffffffffffff errno=14 cover=3312 enabling collider #0 [708230ms] -> ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x20000280) #0 [708230ms] <- ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL=0xffffffffffffffff errno=9 cover=45 #0 [708231ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000400, 0x42001, 0x0) #0 [708231ms] <- openat$loop_ctrl=0xffffffffffffffff errno=2 cover=1191 pthread_create failed (errno 11) 03:34:53 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x103) 2033/05/18 03:34:53 result hanged=false: [708285ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163843 #0 [708296ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000300, 0x103) #0 [708299ms] <- openat$sndseq=0xffffffffffffffff errno=2 cover=1167 enabling collider #0 [708300ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000300, 0x103) #0 [708302ms] <- openat$sndseq=0xffffffffffffffff errno=2 cover=1177 03:34:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, 0x1e, 0xc21, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x2c}}, 0x0) 2033/05/18 03:34:53 result hanged=false: 2033/05/18 03:34:53 poll: candidates=8 inputs=0 signal=0 [708323ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163845 #0 [708333ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [708333ms] <- socket$netlink=0x3 errno=14 cover=1399 #0 [708334ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [708334ms] <- sendmsg$nl_generic=0x2c errno=14 cover=1480 enabling collider #0 [708335ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [708335ms] <- socket$netlink=0x3 errno=14 cover=1448 2033/05/18 03:34:53 result hanged=false: 03:34:53 executing program 0: syz_io_uring_setup(0x1c29, &(0x7f0000002b00)={0x0, 0x0, 0x20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002b80), &(0x7f0000002bc0)) [708356ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163847 #0 [708365ms] -> syz_io_uring_setup(0x1c29, 0x20002b00, 0x20fff000, 0x20ffd000, 0x20002b80, 0x20002bc0) #0 [708366ms] <- syz_io_uring_setup=0xffffffff errno=9 cover=2722 enabling collider #0 [708367ms] -> syz_io_uring_setup(0x1c29, 0x20002b00, 0x20fff000, 0x20ffd000, 0x20002b80, 0x20002bc0) #0 [708367ms] <- syz_io_uring_setup=0xffffffff errno=9 cover=2719 2033/05/18 03:34:53 result hanged=false: 03:34:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [708388ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163849 #0 [708398ms] -> openat$sndtimer(0xffffffffffffff9c, 0x200001c0, 0x0) #0 [708401ms] <- openat$sndtimer=0xffffffffffffffff errno=2 cover=1177 #0 [708403ms] -> ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) #0 [708405ms] <- ioctl$SNDRV_TIMER_IOCTL_START=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [708405ms] -> openat$sndtimer(0xffffffffffffff9c, 0x200001c0, 0x0) #0 [708406ms] <- openat$sndtimer=0xffffffffffffffff errno=2 cover=1213 2033/05/18 03:34:53 result hanged=false: 03:34:53 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000140)='./file1\x00', 0x0, 0x321f001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x530b, &(0x7f0000000040)) [708426ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163851 #0 [708436ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [708438ms] <- openat=0x3 errno=14 cover=6888 #0 [708439ms] -> mount(0x20000080, 0x20000140, 0x0, 0x321f001, 0x0) #0 [708439ms] <- mount=0xffffffffffffffff errno=2 cover=1559 #0 [708439ms] -> openat(0xffffffffffffff9c, 0x20004c40, 0x84e00, 0x0) #0 [708440ms] <- openat=0x4 errno=14 cover=4926 #0 [708440ms] -> ioctl$SG_SET_TIMEOUT(0x4, 0x530b, 0x20000040) #0 [708440ms] <- ioctl$SG_SET_TIMEOUT=0xffffffffffffffff errno=25 cover=107 enabling collider #0 [708440ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [708440ms] <- openat=0x3 errno=14 cover=1146 #0 [708441ms] -> mount(0x20000080, 0x20000140, 0x0, 0x321f001, 0x0) #0 [708441ms] <- mount=0xffffffffffffffff errno=2 cover=1570 pthread_create failed (errno 11) 2033/05/18 03:34:53 result hanged=false: 03:34:53 executing program 0: syz_io_uring_setup(0x2aef, &(0x7f00000025c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000002640), &(0x7f0000002680)) [708492ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163953 #0 [708501ms] -> syz_io_uring_setup(0x2aef, 0x200025c0, 0x20ffe000, 0x20ffe000, 0x20002640, 0x20002680) #0 [708507ms] <- syz_io_uring_setup=0x3 errno=14 cover=14598 enabling collider #0 [708508ms] -> syz_io_uring_setup(0x2aef, 0x200025c0, 0x20ffe000, 0x20ffe000, 0x20002640, 0x20002680) #0 [708510ms] <- syz_io_uring_setup=0x3 errno=14 cover=17601 03:34:53 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x1f00, 0x0, 0x0}) 2033/05/18 03:34:53 result hanged=false: [708529ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163955 #0 [708539ms] -> syz_open_dev$evdev(0x20000080, 0x0, 0x0) #0 [708539ms] <- syz_open_dev$evdev=0xffffffffffffffff errno=2 cover=1194 #0 [708540ms] -> ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x20000040) #0 [708540ms] <- ioctl$EVIOCSMASK=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [708540ms] -> syz_open_dev$evdev(0x20000080, 0x0, 0x0) #0 [708541ms] <- syz_open_dev$evdev=0xffffffffffffffff errno=2 cover=1226 03:34:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r0, &(0x7f0000000240)=""/4096, 0x1000) getdents64(r0, 0x0, 0x0) 2033/05/18 03:34:54 result hanged=false: [708560ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163957 #0 [708570ms] -> syz_open_procfs(0x0, 0x200000c0) #0 [708572ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2361 #0 [708574ms] -> getdents64(0xffffffffffffffff, 0x20000240, 0x1000) #0 [708576ms] <- getdents64=0xffffffffffffffff errno=9 cover=46 #0 [708576ms] -> getdents64(0xffffffffffffffff, 0x0, 0x0) #0 [708576ms] <- getdents64=0xffffffffffffffff errno=9 cover=46 enabling collider #0 [708577ms] -> syz_open_procfs(0x0, 0x200000c0) #0 [708578ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2431 #0 [708579ms] -> getdents64(0xffffffffffffffff, 0x20000240, 0x1000) #0 [708579ms] <- getdents64=0xffffffffffffffff errno=9 cover=46 pthread_create failed (errno 11) 03:34:54 executing program 0: syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 2033/05/18 03:34:54 result hanged=false: [708635ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164059 #0 [708646ms] -> syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [708649ms] <- syz_genetlink_get_family_id$nbd=0xffffffffffffffff errno=14 cover=4505 #0 [708651ms] -> socketpair$nbd(0x1, 0x1, 0x0, 0x20000100) #0 [708654ms] <- socketpair$nbd=0x0 errno=14 cover=3659 enabling collider #0 [708655ms] -> syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [708656ms] <- syz_genetlink_get_family_id$nbd=0xffffffffffffffff errno=14 cover=2558 2033/05/18 03:34:54 result hanged=false: 2033/05/18 03:34:54 #0: triaging type=7 2033/05/18 03:34:54 triaging input for call #1 socketpair$nbd (new signal=1) 03:34:54 executing program 0: syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) [708677ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164061 #0 [708687ms] -> syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [708690ms] <- syz_genetlink_get_family_id$nbd=0xffffffffffffffff errno=14 cover=4451 #0 [708691ms] -> socketpair$nbd(0x1, 0x1, 0x0, 0x20000100) #0 [708692ms] <- socketpair$nbd=0x0 errno=14 cover=3580 03:34:54 executing program 0: syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 2033/05/18 03:34:54 result hanged=false: [708712ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164063 #0 [708722ms] -> syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [708724ms] <- syz_genetlink_get_family_id$nbd=0xffffffffffffffff errno=14 cover=4487 #0 [708725ms] -> socketpair$nbd(0x1, 0x1, 0x0, 0x20000100) #0 [708726ms] <- socketpair$nbd=0x0 errno=14 cover=3558 03:34:54 executing program 0: syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 2033/05/18 03:34:54 result hanged=false: [708747ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164065 #0 [708756ms] -> syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [708757ms] <- syz_genetlink_get_family_id$nbd=0xffffffffffffffff errno=14 cover=4514 #0 [708759ms] -> socketpair$nbd(0x1, 0x1, 0x0, 0x20000100) #0 [708760ms] <- socketpair$nbd=0x0 errno=14 cover=3643 2033/05/18 03:34:54 result hanged=false: 2033/05/18 03:34:54 added new input for call #1 socketpair$nbd to corpus: syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 03:34:54 executing program 0: socket$inet6(0xa, 0x2, 0xe2) 2033/05/18 03:34:54 poll: candidates=8 inputs=0 signal=0 [708784ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164067 #0 [708792ms] -> socket$inet6(0xa, 0x2, 0xe2) #0 [708825ms] <- socket$inet6=0xffffffffffffffff errno=93 cover=2691 enabling collider #0 [708825ms] -> socket$inet6(0xa, 0x2, 0xe2) #0 [708854ms] <- socket$inet6=0xffffffffffffffff errno=93 cover=2792 03:34:54 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000020c0)) 2033/05/18 03:34:54 result hanged=false: [708874ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164069 #0 [708884ms] -> socketpair$nbd(0x1, 0x1, 0x0, 0x200020c0) #0 [708889ms] <- socketpair$nbd=0x0 errno=14 cover=3585 enabling collider #0 [708891ms] -> socketpair$nbd(0x1, 0x1, 0x0, 0x200020c0) #0 [708892ms] <- socketpair$nbd=0x0 errno=14 cover=2849 2033/05/18 03:34:54 result hanged=false: 03:34:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}]]}, 0x24}}, 0x0) [708911ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164071 #0 [708921ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [708925ms] <- socket$nl_generic=0x3 errno=14 cover=1434 #0 [708927ms] -> syz_genetlink_get_family_id$nl80211(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [708928ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12322 #0 [708929ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x200000c0) #0 [708930ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [708930ms] -> sendmsg$NL80211_CMD_CONNECT(0x3, 0x200001c0, 0x0) #0 [708931ms] <- sendmsg$NL80211_CMD_CONNECT=0x24 errno=14 cover=1939 enabling collider #0 [708932ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [708933ms] <- socket$nl_generic=0x3 errno=14 cover=1436 #0 [708934ms] -> syz_genetlink_get_family_id$nl80211(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [708936ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11785 pthread_create failed (errno 11) 2033/05/18 03:34:54 result hanged=false: 03:34:54 executing program 0: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) ftruncate(r0, 0x2001000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000009, 0x2011, r0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/238, 0xee}], 0x1) [708983ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164173 #0 [708992ms] -> memfd_create(0x20000340, 0x0) #0 [708996ms] <- memfd_create=0x3 errno=14 cover=1153 #0 [708998ms] -> ftruncate(0x3, 0x2001000) #0 [708999ms] <- ftruncate=0x0 errno=14 cover=310 #0 [708999ms] -> mmap(0x20ffa000, 0x3000, 0x3000009, 0x2011, 0x3, 0x0) #0 [709000ms] <- mmap=0x20ffa000 errno=14 cover=4868 #0 [709001ms] -> readv(0x3, 0x20000100, 0x1) #0 [709001ms] <- readv=0xee errno=14 cover=459 enabling collider #0 [709001ms] -> memfd_create(0x20000340, 0x0) #0 [709002ms] <- memfd_create=0x3 errno=14 cover=1122 #0 [709002ms] -> ftruncate(0x3, 0x2001000) #0 [709003ms] <- ftruncate=0x0 errno=14 cover=310 pthread_create failed (errno 11) 03:34:54 executing program 0: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) ftruncate(r0, 0x2001000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000009, 0x2011, r0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/238, 0xee}], 0x1) 2033/05/18 03:34:54 result hanged=false: 2033/05/18 03:34:54 #0: triaging type=7 2033/05/18 03:34:54 triaging input for call #2 mmap (new signal=1) [709046ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164275 #0 [709053ms] -> memfd_create(0x20000340, 0x0) #0 [709054ms] <- memfd_create=0x3 errno=14 cover=1142 #0 [709055ms] -> ftruncate(0x3, 0x2001000) #0 [709055ms] <- ftruncate=0x0 errno=14 cover=310 #0 [709055ms] -> mmap(0x20ffa000, 0x3000, 0x3000009, 0x2011, 0x3, 0x0) #0 [709056ms] <- mmap=0x20ffa000 errno=14 cover=6167 #0 [709057ms] -> readv(0x3, 0x20000100, 0x1) #0 [709057ms] <- readv=0xee errno=14 cover=459 03:34:54 executing program 0: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) ftruncate(r0, 0x2001000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000009, 0x2011, r0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/238, 0xee}], 0x1) 2033/05/18 03:34:54 result hanged=false: [709072ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164277 #0 [709079ms] -> memfd_create(0x20000340, 0x0) #0 [709081ms] <- memfd_create=0x3 errno=14 cover=1098 #0 [709082ms] -> ftruncate(0x3, 0x2001000) #0 [709084ms] <- ftruncate=0x0 errno=14 cover=310 #0 [709085ms] -> mmap(0x20ffa000, 0x3000, 0x3000009, 0x2011, 0x3, 0x0) #0 [709086ms] <- mmap=0x20ffa000 errno=14 cover=4371 #0 [709087ms] -> readv(0x3, 0x20000100, 0x1) #0 [709088ms] <- readv=0xee errno=14 cover=459 03:34:54 executing program 0: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) ftruncate(r0, 0x2001000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000009, 0x2011, r0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/238, 0xee}], 0x1) 2033/05/18 03:34:54 result hanged=false: [709101ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164279 #0 [709111ms] -> memfd_create(0x20000340, 0x0) #0 [709112ms] <- memfd_create=0x3 errno=14 cover=1199 #0 [709113ms] -> ftruncate(0x3, 0x2001000) #0 [709113ms] <- ftruncate=0x0 errno=14 cover=310 #0 [709114ms] -> mmap(0x20ffa000, 0x3000, 0x3000009, 0x2011, 0x3, 0x0) #0 [709115ms] <- mmap=0x20ffa000 errno=14 cover=4806 #0 [709115ms] -> readv(0x3, 0x20000100, 0x1) #0 [709115ms] <- readv=0xee errno=14 cover=459 2033/05/18 03:34:54 result hanged=false: 2033/05/18 03:34:54 added new input for call #2 mmap to corpus: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) ftruncate(r0, 0x2001000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000009, 0x2011, r0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/238, 0xee}], 0x1) 03:34:54 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x280c000, &(0x7f00000000c0)) [709138ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164281 #0 [709145ms] -> syz_mount_image$iso9660(0x20000000, 0x20000040, 0x0, 0x1, 0x20000200, 0x280c000, 0x200000c0) #0 [709149ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=2 cover=5304 enabling collider #0 [709150ms] -> syz_mount_image$iso9660(0x20000000, 0x20000040, 0x0, 0x1, 0x20000200, 0x280c000, 0x200000c0) #0 [709150ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=2 cover=5117 2033/05/18 03:34:54 result hanged=false: 03:34:54 executing program 0: add_key(&(0x7f0000000d40)='rxrpc\x00', 0x0, &(0x7f0000000dc0)="88", 0x1, 0x0) [709168ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164283 #0 [709177ms] -> add_key(0x20000d40, 0x0, 0x20000dc0, 0x1, 0x0) #0 [709180ms] <- add_key=0xffffffffffffffff errno=22 cover=304 enabling collider #0 [709181ms] -> add_key(0x20000d40, 0x0, 0x20000dc0, 0x1, 0x0) #0 [709181ms] <- add_key=0xffffffffffffffff errno=22 cover=304 03:34:54 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{}]}) 2033/05/18 03:34:54 result hanged=false: [709196ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164285 #0 [709204ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x200002c0) #0 [709204ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0xffffffffffffffff errno=22 cover=1402 enabling collider #0 [709205ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x200002c0) #0 [709205ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0xffffffffffffffff errno=22 cover=1362 2033/05/18 03:34:54 result hanged=false: 03:34:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) mkdirat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) renameat2(r0, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000180)='./file0\x00', 0x5) [709223ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164287 #0 [709230ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [709236ms] <- perf_event_open=0x3 errno=14 cover=9311 #0 [709237ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000140) syz_mount_image: size=0 segs=0 loop='' dir='./file1' fs='tmpfs' flags=0 opts='' #0 [709244ms] <- syz_mount_image$tmpfs=0x4 errno=0 cover=14376 #0 [709244ms] -> mkdirat(0x4, 0x200000c0, 0x0) #0 [709246ms] <- mkdirat=0x0 errno=14 cover=2458 #0 [709248ms] -> renameat2(0x4, 0x20000140, 0x4, 0x20000180, 0x5) #0 [709251ms] <- renameat2=0x0 errno=14 cover=3217 enabling collider #0 [709262ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [709263ms] <- perf_event_open=0x3 errno=14 cover=8106 #0 [709263ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000140) syz_mount_image: size=0 segs=0 loop='' dir='./file1' fs='tmpfs' flags=0 opts='./file1' [ 1459.240725] tmpfs: Unknown parameter './file1' syz_mount_image > mount error: 22 #0 [709265ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=22 cover=3798 pthread_create failed (errno 11) 03:34:54 executing program 0: fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x80) syz_mount_image$nfs4(&(0x7f0000001b40), &(0x7f0000001b80)='./file0\x00', 0x0, 0x0, &(0x7f0000001e80), 0x2000, &(0x7f0000001f00)={[{'/dev/nvram\x00'}]}) 2033/05/18 03:34:54 result hanged=false: umount(./5577/file1) 2033/05/18 03:34:54 poll: candidates=8 inputs=0 signal=0 [709330ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164389 #0 [709337ms] -> fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) #0 [709339ms] <- fcntl$F_GET_FILE_RW_HINT=0xffffffffffffffff errno=9 cover=45 #0 [709339ms] -> ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) #0 [709339ms] <- ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT=0xffffffffffffffff errno=9 cover=45 #0 [709339ms] -> sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x80) #0 [709339ms] <- sendmsg$NL80211_CMD_SET_WIPHY_NETNS=0xffffffffffffffff errno=9 cover=52 #0 [709339ms] -> syz_mount_image$nfs4(0x20001b40, 0x20001b80, 0x0, 0x0, 0x20001e80, 0x2000, 0x20001f00) #0 [709340ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=2 cover=3282 enabling collider #0 [709340ms] -> fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) #0 [709340ms] <- fcntl$F_GET_FILE_RW_HINT=0xffffffffffffffff errno=9 cover=45 #0 [709340ms] -> ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) #0 [709340ms] <- ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT=0xffffffffffffffff errno=9 cover=45 pthread_create failed (errno 11) 03:34:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) 2033/05/18 03:34:54 result hanged=false: [709385ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164491 #0 [709392ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [709396ms] <- socket$nl_generic=0x3 errno=14 cover=1423 #0 [709396ms] -> sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0x3, 0x20001900, 0x0) #0 [709396ms] <- sendmsg$NL80211_CMD_PEER_MEASUREMENT_START=0xffffffffffffffff errno=14 cover=477 enabling collider #0 [709397ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [709397ms] <- socket$nl_generic=0x3 errno=14 cover=1458 2033/05/18 03:34:54 result hanged=false: 03:34:54 executing program 0: getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x0) socketpair(0x27, 0x800, 0x0, &(0x7f0000001d00)) [709412ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164493 #0 [709420ms] -> getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) #0 [709424ms] <- getsockopt$IP_VS_SO_GET_DESTS=0xffffffffffffffff errno=9 cover=49 #0 [709424ms] -> sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x200016c0, 0x0) #0 [709424ms] <- sendmsg$TEAM_CMD_PORT_LIST_GET=0xffffffffffffffff errno=9 cover=52 #0 [709425ms] -> socketpair(0x27, 0x800, 0x0, 0x20001d00) #0 [709435ms] <- socketpair=0xffffffffffffffff errno=97 cover=1580 enabling collider #0 [709436ms] -> getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) #0 [709436ms] <- getsockopt$IP_VS_SO_GET_DESTS=0xffffffffffffffff errno=9 cover=49 #0 [709436ms] -> sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x200016c0, 0x0) #0 [709436ms] <- sendmsg$TEAM_CMD_PORT_LIST_GET=0xffffffffffffffff errno=9 cover=52 pthread_create failed (errno 11) 03:34:54 executing program 0: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 2033/05/18 03:34:54 result hanged=false: [709480ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164595 #0 [709489ms] -> mlock2(0x20ffc000, 0x4000, 0x1) #0 [709492ms] <- mlock2=0x0 errno=14 cover=447 enabling collider #0 [709494ms] -> mlock2(0x20ffc000, 0x4000, 0x1) #0 [709494ms] <- mlock2=0x0 errno=14 cover=208 2033/05/18 03:34:54 result hanged=false: 03:34:54 executing program 0: r0 = syz_io_uring_setup(0x1081, &(0x7f0000000280), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @dev}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [709509ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164597 #0 [709518ms] -> syz_io_uring_setup(0x1081, 0x20000280, 0x20ffd000, 0x20800000, 0x20000180, 0x20000040) #0 [709519ms] <- syz_io_uring_setup=0x3 errno=14 cover=10254 #0 [709520ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [709520ms] <- socket$inet6_udp=0x4 errno=14 cover=1698 #0 [709520ms] -> syz_io_uring_submit(0x20ffd000, 0x20800000, 0x20000580, 0x0) #0 [709520ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [709520ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [709520ms] <- io_uring_enter=0x1 errno=14 cover=678 enabling collider #0 [709520ms] -> syz_io_uring_setup(0x1081, 0x20000280, 0x20ffd000, 0x20800000, 0x20000180, 0x20000040) #0 [709521ms] <- syz_io_uring_setup=0x3 errno=14 cover=11477 #0 [709522ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [709522ms] <- socket$inet6_udp=0x4 errno=14 cover=1686 pthread_create failed (errno 11) 2033/05/18 03:34:55 result hanged=false: 03:34:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) [709566ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164699 #0 [709573ms] -> openat(0xffffffffffffff9c, 0x20000080, 0x105142, 0x0) #0 [709577ms] <- openat=0x3 errno=14 cover=6735 #0 [709578ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [709578ms] <- openat=0xffffffffffffffff errno=2 cover=1178 #0 [709578ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [709578ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 enabling collider #0 [709578ms] -> openat(0xffffffffffffff9c, 0x20000080, 0x105142, 0x0) #0 [709578ms] <- openat=0x3 errno=14 cover=1124 #0 [709579ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [709579ms] <- openat=0xffffffffffffffff errno=2 cover=1180 pthread_create failed (errno 11) 2033/05/18 03:34:55 result hanged=false: 03:34:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) [709622ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164801 #0 [709628ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [709630ms] <- socket$inet_udp=0x3 errno=14 cover=1673 #0 [709632ms] -> setsockopt$inet_IP_XFRM_POLICY(0x3, 0x0, 0x11, 0x20000040, 0xe8) #0 [709635ms] <- setsockopt$inet_IP_XFRM_POLICY=0x0 errno=14 cover=548 #0 [709635ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [709635ms] <- connect$inet=0xffffffffffffffff errno=1 cover=968 enabling collider #0 [709636ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [709637ms] <- socket$inet_udp=0x3 errno=14 cover=1683 #0 [709638ms] -> setsockopt$inet_IP_XFRM_POLICY(0x3, 0x0, 0x11, 0x20000040, 0xe8) #0 [709638ms] <- setsockopt$inet_IP_XFRM_POLICY=0x0 errno=14 cover=559 pthread_create failed (errno 11) 03:34:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x15, 0x0, &(0x7f0000000900)) 2033/05/18 03:34:55 result hanged=false: [709679ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164903 #0 [709686ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [709687ms] <- socket$inet_udp=0x3 errno=14 cover=1687 #0 [709687ms] -> getsockopt$EBT_SO_GET_INFO(0x3, 0x0, 0x15, 0x0, 0x20000900) #0 [709687ms] <- getsockopt$EBT_SO_GET_INFO=0x0 errno=14 cover=159 enabling collider #0 [709688ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [709688ms] <- socket$inet_udp=0x3 errno=14 cover=1708 2033/05/18 03:34:55 result hanged=false: 03:34:55 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLOPEN(r0, &(0x7f00000000c0)={0x18}, 0x18) write$P9_RSTATu(r0, &(0x7f0000000240)={0x5b, 0x7d, 0x0, {{0x0, 0x45, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2, '+!', 0x1, '\x00', 0x3, '+[#', 0xc, '!!p&,*-)&[%)'}, 0x1, '-'}}, 0x5b) 2033/05/18 03:34:55 poll: candidates=8 inputs=0 signal=0 [709707ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 164905 #0 [709714ms] -> pipe(0x20000080) #0 [709714ms] <- pipe=0x0 errno=14 cover=1983 #0 [709715ms] -> write$P9_RLOPEN(0x4, 0x200000c0, 0x18) #0 [709717ms] <- write$P9_RLOPEN=0x18 errno=14 cover=358 #0 [709718ms] -> write$P9_RSTATu(0x4, 0x20000240, 0x5b) #0 [709720ms] <- write$P9_RSTATu=0x5b errno=14 cover=296 enabling collider #0 [709720ms] -> pipe(0x20000080) #0 [709721ms] <- pipe=0x0 errno=14 cover=1232 #0 [709721ms] -> write$P9_RLOPEN(0x4, 0x200000c0, 0x18) #0 [709722ms] <- write$P9_RLOPEN=0x18 errno=14 cover=358 pthread_create failed (errno 11) 2033/05/18 03:34:55 result hanged=false: 03:34:55 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000001740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) utimes(&(0x7f0000000040)='./file0/file0\x00', 0x0) [709763ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165007 #0 [709772ms] -> syz_mount_image$ext4(0x0, 0x20001740, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [709773ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12897 #0 [709774ms] -> mount(0x0, 0x20000000, 0x200000c0, 0x0, 0x0) #0 [709776ms] <- mount=0x0 errno=14 cover=13238 #0 [709776ms] -> utimes(0x20000040, 0x0) #0 [709777ms] <- utimes=0xffffffffffffffff errno=2 cover=961 enabling collider #0 [709777ms] -> syz_mount_image$ext4(0x0, 0x20001740, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [709778ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1370 #0 [709778ms] -> mount(0x0, 0x20000000, 0x200000c0, 0x0, 0x0) #0 [709782ms] <- mount=0x0 errno=14 cover=13320 pthread_create failed (errno 11) 03:34:55 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) 2033/05/18 03:34:55 result hanged=false: umount(./5587/file0) umount(./5587/file0) [709832ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165109 #0 [709840ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [709840ms] <- socket$inet6_udplite=0x3 errno=14 cover=1624 enabling collider #0 [709842ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [709842ms] <- socket$inet6_udplite=0x3 errno=14 cover=1662 2033/05/18 03:34:55 result hanged=false: 03:34:55 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) [709861ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165111 #0 [709868ms] -> perf_event_open(0x200000c0, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [709872ms] <- perf_event_open=0x3 errno=14 cover=8008 #0 [709873ms] -> ioctl$PERF_EVENT_IOC_SET_OUTPUT(0x3, 0x2405, 0xffffffffffffffff) #0 [709875ms] <- ioctl$PERF_EVENT_IOC_SET_OUTPUT=0x0 errno=14 cover=137 enabling collider #0 [709887ms] -> perf_event_open(0x200000c0, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [709888ms] <- perf_event_open=0x3 errno=14 cover=7722 #0 [709889ms] -> ioctl$PERF_EVENT_IOC_SET_OUTPUT(0x3, 0x2405, 0xffffffffffffffff) #0 [709890ms] <- ioctl$PERF_EVENT_IOC_SET_OUTPUT=0xffffffffffffffff errno=9 cover=46 03:34:55 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 2033/05/18 03:34:55 result hanged=false: 2033/05/18 03:34:55 #0: triaging type=7 2033/05/18 03:34:55 triaging input for call #0 perf_event_open (new signal=1) [709911ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165113 #0 [709919ms] -> perf_event_open(0x200000c0, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [709921ms] <- perf_event_open=0x3 errno=14 cover=14095 #0 [709923ms] -> ioctl$PERF_EVENT_IOC_SET_OUTPUT(0x3, 0x2405, 0xffffffffffffffff) #0 [709923ms] <- ioctl$PERF_EVENT_IOC_SET_OUTPUT=0x0 errno=14 cover=137 2033/05/18 03:34:55 result hanged=false: 03:34:55 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) [709950ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165115 #0 [709957ms] -> perf_event_open(0x200000c0, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [709958ms] <- perf_event_open=0x3 errno=14 cover=9186 #0 [709958ms] -> ioctl$PERF_EVENT_IOC_SET_OUTPUT(0x3, 0x2405, 0xffffffffffffffff) #0 [709959ms] <- ioctl$PERF_EVENT_IOC_SET_OUTPUT=0x0 errno=14 cover=137 2033/05/18 03:34:55 result hanged=false: 03:34:55 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) [709986ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165117 #0 [709993ms] -> perf_event_open(0x200000c0, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [709993ms] <- perf_event_open=0x3 errno=14 cover=8141 #0 [709994ms] -> ioctl$PERF_EVENT_IOC_SET_OUTPUT(0x3, 0x2405, 0xffffffffffffffff) #0 [709994ms] <- ioctl$PERF_EVENT_IOC_SET_OUTPUT=0x0 errno=14 cover=137 2033/05/18 03:34:55 result hanged=false: 2033/05/18 03:34:55 added new input for call #0 perf_event_open to corpus: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 03:34:55 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) [710026ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165119 #0 [710032ms] -> syz_open_dev$loop(0x20000040, 0x0, 0x0) #0 [710035ms] <- syz_open_dev$loop=0xffffffffffffffff errno=2 cover=1180 enabling collider #0 [710035ms] -> syz_open_dev$loop(0x20000040, 0x0, 0x0) #0 [710035ms] <- syz_open_dev$loop=0xffffffffffffffff errno=2 cover=1220 03:34:55 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) 2033/05/18 03:34:55 result hanged=false: [710051ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165121 #0 [710059ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [710059ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1202 #0 [710060ms] -> getpeername$inet(0xffffffffffffffff, 0x0, 0x0) #0 [710060ms] <- getpeername$inet=0xffffffffffffffff errno=9 cover=49 enabling collider #0 [710060ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [710060ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1179 03:34:55 executing program 0: futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000040), 0x40000000) 2033/05/18 03:34:55 result hanged=false: [710076ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165123 #0 [710083ms] -> futex(0x20000080, 0x5, 0x0, 0x0, 0x20000040, 0x40000000) #0 [710087ms] <- futex=0x0 errno=14 cover=301 enabling collider #0 [710088ms] -> futex(0x20000080, 0x5, 0x0, 0x0, 0x20000040, 0x40000000) #0 [710088ms] <- futex=0x0 errno=14 cover=301 03:34:55 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000480)=""/220, 0xdc}], 0x1, 0x0, 0x0) 2033/05/18 03:34:55 result hanged=false: [710103ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165125 #0 [710110ms] -> perf_event_open(0x20000200, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [710114ms] <- perf_event_open=0x3 errno=14 cover=7942 #0 [710116ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000000) #0 [710117ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2444 #0 [710118ms] -> preadv(0xffffffffffffffff, 0x20000180, 0x1, 0x0, 0x0) #0 [710120ms] <- preadv=0xffffffffffffffff errno=9 cover=47 enabling collider #0 [710128ms] -> perf_event_open(0x20000200, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [710129ms] <- perf_event_open=0x3 errno=14 cover=8258 #0 [710130ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000000) #0 [710130ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=7745 pthread_create failed (errno 11) 2033/05/18 03:34:55 result hanged=false: 03:34:55 executing program 0: r0 = socket$inet(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x100, 0x4) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000100)="b683ae40f3fdac402b11fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast1}}}], 0x20}, 0x0) 2033/05/18 03:34:55 poll: candidates=8 inputs=0 signal=0 [710189ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165227 #0 [710199ms] -> socket$inet(0x2, 0x3, 0xff) #0 [710201ms] <- socket$inet=0x3 errno=14 cover=1699 #0 [710202ms] -> setsockopt$SO_TIMESTAMPING(0x3, 0x1, 0x41, 0x20000040, 0x4) #0 [710202ms] <- setsockopt$SO_TIMESTAMPING=0x0 errno=14 cover=148 #0 [710202ms] -> sendmsg$inet(0x3, 0x20000240, 0x0) #0 [710202ms] <- sendmsg$inet=0xffffffffffffffff errno=101 cover=355 enabling collider #0 [710203ms] -> socket$inet(0x2, 0x3, 0xff) #0 [710203ms] <- socket$inet=0x3 errno=14 cover=1723 #0 [710203ms] -> setsockopt$SO_TIMESTAMPING(0x3, 0x1, 0x41, 0x20000040, 0x4) #0 [710204ms] <- setsockopt$SO_TIMESTAMPING=0x0 errno=14 cover=148 pthread_create failed (errno 11) 03:34:55 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) 2033/05/18 03:34:55 result hanged=false: [710250ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165329 #0 [710257ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000280, 0x0) #0 [710260ms] <- openat$sndseq=0xffffffffffffffff errno=2 cover=1213 enabling collider #0 [710261ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000280, 0x0) #0 [710262ms] <- openat$sndseq=0xffffffffffffffff errno=2 cover=1179 2033/05/18 03:34:55 result hanged=false: 03:34:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) [710283ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165331 #0 [710291ms] -> socket$nl_route(0x10, 0x3, 0x0) #0 [710293ms] <- socket$nl_route=0x3 errno=14 cover=1410 #0 [710295ms] -> ioctl$sock_SIOCETHTOOL(0x3, 0x8946, 0x20000040) #0 [710296ms] <- ioctl$sock_SIOCETHTOOL=0x0 errno=14 cover=303 enabling collider #0 [710296ms] -> socket$nl_route(0x10, 0x3, 0x0) #0 [710297ms] <- socket$nl_route=0x3 errno=14 cover=1431 2033/05/18 03:34:55 result hanged=false: 03:34:55 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x24001081) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f00000016c0)=[{0x0, 0x0, 0x1937}]) [710319ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165333 #0 [710328ms] -> pkey_mprotect(0x20ffd000, 0x3000, 0x0, 0xffffffffffffffff) #0 [710331ms] <- pkey_mprotect=0x0 errno=14 cover=345 #0 [710332ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [710334ms] <- socket$nl_netfilter=0x3 errno=14 cover=1397 #0 [710334ms] -> sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x24001081) #0 [710335ms] <- sendmsg$OSF_MSG_REMOVE=0xffffffffffffffff errno=9 cover=52 #0 [710335ms] -> ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) #0 [710335ms] <- ioctl$sock_SIOCGIFINDEX_802154=0xffffffffffffffff errno=9 cover=45 #0 [710336ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [710336ms] <- syz_init_net_socket$bt_sco=0xffffffffffffffff errno=2 cover=1181 #0 [710336ms] -> socket(0x0, 0x0, 0x0) #0 [710352ms] <- socket=0xffffffffffffffff errno=97 cover=1561 #0 [710353ms] -> sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) #0 [710353ms] <- sendmsg$TIPC_NL_MON_GET=0xffffffffffffffff errno=9 cover=52 #0 [710354ms] -> syz_read_part_table(0x0, 0x1, 0x200016c0) #0 [710354ms] <- syz_read_part_table=0xffffffffffffffff errno=2 cover=3467 enabling collider #0 [710356ms] -> pkey_mprotect(0x20ffd000, 0x3000, 0x0, 0xffffffffffffffff) #0 [710356ms] <- pkey_mprotect=0x0 errno=14 cover=83 #0 [710357ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [710357ms] <- socket$nl_netfilter=0x3 errno=14 cover=1415 pthread_create failed (errno 11) 2033/05/18 03:34:55 result hanged=false: 03:34:55 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000700), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) [710408ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165435 #0 [710416ms] -> syz_open_dev$evdev(0x20000700, 0x0, 0x0) #0 [710419ms] <- syz_open_dev$evdev=0xffffffffffffffff errno=2 cover=1182 #0 [710420ms] -> ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) #0 [710422ms] <- ioctl$EVIOCGSND=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [710423ms] -> syz_open_dev$evdev(0x20000700, 0x0, 0x0) #0 [710423ms] <- syz_open_dev$evdev=0xffffffffffffffff errno=2 cover=1246 2033/05/18 03:34:55 result hanged=false: 03:34:55 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) [710440ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165437 #0 [710451ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [710456ms] <- perf_event_open=0x3 errno=14 cover=9162 #0 [710457ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [710459ms] <- syz_init_net_socket$bt_hci=0xffffffffffffffff errno=2 cover=3872 #0 [710459ms] -> ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) #0 [710459ms] <- ioctl$sock_bt_hci=0xffffffffffffffff errno=9 cover=74 enabling collider #0 [710473ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [710475ms] <- perf_event_open=0x3 errno=14 cover=8568 #0 [710476ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [710476ms] <- syz_init_net_socket$bt_hci=0xffffffffffffffff errno=2 cover=3789 pthread_create failed (errno 11) 03:34:55 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96890b", 0x38, 0x3a, 0x0, @private2, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0009e6", 0x0, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], "1ecab1a5ff99969a"}}}}}}}, 0x0) 2033/05/18 03:34:55 result hanged=false: [710540ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165539 #0 [710547ms] -> syz_emit_ethernet(0x6e, 0x20000000, 0x0) ff ff ff ff ff ff aa aa aa aa aa bb 86 dd 60 96 89 0b 00 38 3a 00 fc 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 00 9f bc 00 00 00 00 60 00 09 e6 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 ff ff ac 1e 00 01 00 00 00 00 00 00 00 00 00 00 ff ff ac 1e 00 01 1e ca b1 a5 ff 99 96 9a #0 [710548ms] <- syz_emit_ethernet=0x6e errno=14 cover=32777 enabling collider #0 [710548ms] -> syz_emit_ethernet(0x6e, 0x20000000, 0x0) ff ff ff ff ff ff aa aa aa aa aa bb 86 dd 60 96 89 0b 00 38 3a 00 fc 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 00 9f bc 00 00 00 00 60 00 09 e6 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 ff ff ac 1e 00 01 00 00 00 00 00 00 00 00 00 00 ff ff ac 1e 00 01 1e ca b1 a5 ff 99 96 9a #0 [710549ms] <- syz_emit_ethernet=0x6e errno=14 cover=32748 2033/05/18 03:34:56 result hanged=false: 2033/05/18 03:34:56 #0: triaging type=7 03:34:56 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96890b", 0x38, 0x3a, 0x0, @private2, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0009e6", 0x0, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], "1ecab1a5ff99969a"}}}}}}}, 0x0) 2033/05/18 03:34:56 triaging input for call #0 syz_emit_ethernet (new signal=2) iptable filter/10: resetting iptable mangle/10: resetting [710565ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165541 #0 [710573ms] -> syz_emit_ethernet(0x6e, 0x20000000, 0x0) ff ff ff ff ff ff aa aa aa aa aa bb 86 dd 60 96 89 0b 00 38 3a 00 fc 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 00 9f bc 00 00 00 00 60 00 09 e6 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 ff ff ac 1e 00 01 00 00 00 00 00 00 00 00 00 00 ff ff ac 1e 00 01 1e ca b1 a5 ff 99 96 9a #0 [710575ms] <- syz_emit_ethernet=0x6e errno=14 cover=32838 2033/05/18 03:34:56 result hanged=false: 03:34:56 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96890b", 0x38, 0x3a, 0x0, @private2, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0009e6", 0x0, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], "1ecab1a5ff99969a"}}}}}}}, 0x0) iptable filter/10: resetting iptable mangle/10: resetting [710592ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165543 #0 [710599ms] -> syz_emit_ethernet(0x6e, 0x20000000, 0x0) ff ff ff ff ff ff aa aa aa aa aa bb 86 dd 60 96 89 0b 00 38 3a 00 fc 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 00 9f bc 00 00 00 00 60 00 09 e6 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 ff ff ac 1e 00 01 00 00 00 00 00 00 00 00 00 00 ff ff ac 1e 00 01 1e ca b1 a5 ff 99 96 9a #0 [710600ms] <- syz_emit_ethernet=0x6e errno=14 cover=32842 2033/05/18 03:34:56 result hanged=false: 03:34:56 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96890b", 0x38, 0x3a, 0x0, @private2, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0009e6", 0x0, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], "1ecab1a5ff99969a"}}}}}}}, 0x0) iptable filter/10: resetting iptable mangle/10: resetting [710618ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165545 #0 [710626ms] -> syz_emit_ethernet(0x6e, 0x20000000, 0x0) ff ff ff ff ff ff aa aa aa aa aa bb 86 dd 60 96 89 0b 00 38 3a 00 fc 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 00 9f bc 00 00 00 00 60 00 09 e6 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 ff ff ac 1e 00 01 00 00 00 00 00 00 00 00 00 00 ff ff ac 1e 00 01 1e ca b1 a5 ff 99 96 9a #0 [710633ms] <- syz_emit_ethernet=0x6e errno=14 cover=33328 2033/05/18 03:34:56 result hanged=false: 2033/05/18 03:34:56 added new input for call #0 syz_emit_ethernet to corpus: syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96890b", 0x38, 0x3a, 0x0, @private2, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0009e6", 0x0, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], "1ecab1a5ff99969a"}}}}}}}, 0x0) iptable filter/10: resetting iptable mangle/10: resetting 03:34:56 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) read$char_usb(r0, &(0x7f00000006c0)=""/241, 0xf1) [710654ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165547 #0 [710661ms] -> openat$vcs(0xffffffffffffff9c, 0x20000540, 0x0, 0x0) #0 [710664ms] <- openat$vcs=0xffffffffffffffff errno=2 cover=1189 #0 [710665ms] -> read$char_usb(0xffffffffffffffff, 0x200006c0, 0xf1) #0 [710665ms] <- read$char_usb=0xffffffffffffffff errno=9 cover=47 enabling collider #0 [710666ms] -> openat$vcs(0xffffffffffffff9c, 0x20000540, 0x0, 0x0) #0 [710666ms] <- openat$vcs=0xffffffffffffffff errno=2 cover=1187 03:34:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000af7ba240c8af75ac000008000300", @ANYRES32=r2], 0x4c}}, 0x0) 2033/05/18 03:34:56 result hanged=false: 2033/05/18 03:34:56 poll: candidates=8 inputs=0 signal=0 [710684ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165549 #0 [710690ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [710691ms] <- socket$nl_generic=0x3 errno=14 cover=1426 #0 [710692ms] -> syz_genetlink_get_family_id$nl80211(0x20000200, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [710694ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12311 #0 [710694ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x20000700) #0 [710694ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [710694ms] -> sendmsg$NL80211_CMD_TRIGGER_SCAN(0x3, 0x20000340, 0x0) [ 1460.671717] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [710697ms] <- sendmsg$NL80211_CMD_TRIGGER_SCAN=0x4c errno=14 cover=3906 enabling collider #0 [710699ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [710699ms] <- socket$nl_generic=0x3 errno=14 cover=1547 #0 [710700ms] -> syz_genetlink_get_family_id$nl80211(0x20000200, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [710700ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11728 pthread_create failed (errno 11) 03:34:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000af7ba240c8af75ac000008000300", @ANYRES32=r2], 0x4c}}, 0x0) 2033/05/18 03:34:56 result hanged=false: 2033/05/18 03:34:56 #0: triaging type=7 2033/05/18 03:34:56 triaging input for call #3 sendmsg$NL80211_CMD_TRIGGER_SCAN (new signal=3) [710744ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165651 #0 [710751ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [710754ms] <- socket$nl_generic=0x3 errno=14 cover=1463 #0 [710755ms] -> syz_genetlink_get_family_id$nl80211(0x20000200, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [710757ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12292 #0 [710759ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x20000700) #0 [710761ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [710761ms] -> sendmsg$NL80211_CMD_TRIGGER_SCAN(0x3, 0x20000340, 0x0) [ 1460.738568] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [710763ms] <- sendmsg$NL80211_CMD_TRIGGER_SCAN=0x4c errno=14 cover=3835 03:34:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000af7ba240c8af75ac000008000300", @ANYRES32=r2], 0x4c}}, 0x0) 2033/05/18 03:34:56 result hanged=false: [710782ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165653 #0 [710790ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [710792ms] <- socket$nl_generic=0x3 errno=14 cover=1423 #0 [710793ms] -> syz_genetlink_get_family_id$nl80211(0x20000200, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [710796ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12333 #0 [710797ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x20000700) #0 [710799ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 [ 1460.776478] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [710799ms] -> sendmsg$NL80211_CMD_TRIGGER_SCAN(0x3, 0x20000340, 0x0) #0 [710801ms] <- sendmsg$NL80211_CMD_TRIGGER_SCAN=0x4c errno=14 cover=3793 2033/05/18 03:34:56 result hanged=false: 03:34:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000af7ba240c8af75ac000008000300", @ANYRES32=r2], 0x4c}}, 0x0) [710817ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165655 #0 [710825ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [710828ms] <- socket$nl_generic=0x3 errno=14 cover=1390 #0 [710830ms] -> syz_genetlink_get_family_id$nl80211(0x20000200, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [710831ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12290 #0 [710832ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x20000700) #0 [710832ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [710832ms] -> sendmsg$NL80211_CMD_TRIGGER_SCAN(0x3, 0x20000340, 0x0) [ 1460.808713] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [710833ms] <- sendmsg$NL80211_CMD_TRIGGER_SCAN=0x4c errno=14 cover=3847 2033/05/18 03:34:56 result hanged=false: 2033/05/18 03:34:56 added new input for call #3 sendmsg$NL80211_CMD_TRIGGER_SCAN to corpus: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000af7ba240c8af75ac000008000300", @ANYRES32=r2], 0x4c}}, 0x0) 03:34:56 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000200)='./file0/../file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) umount2(&(0x7f0000000600)='./file0/../file0\x00', 0x0) [710858ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165657 #0 [710864ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [710866ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13037 #0 [710867ms] -> chroot(0x20000200) #0 [710867ms] <- chroot=0x0 errno=14 cover=961 #0 [710867ms] -> mount(0x0, 0x20000140, 0x20000240, 0x0, 0x0) #0 [710868ms] <- mount=0x0 errno=14 cover=2968 #0 [710869ms] -> umount2(0x20000600, 0x0) #0 [710870ms] <- umount2=0xffffffffffffffff errno=2 cover=4963 enabling collider #0 [710871ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [710872ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1373 #0 [710872ms] -> chroot(0x20000200) #0 [710872ms] <- chroot=0xffffffffffffffff errno=2 cover=1206 pthread_create failed (errno 11) 2033/05/18 03:34:56 result hanged=false: 2033/05/18 03:34:56 #0: triaging type=7 03:34:56 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000200)='./file0/../file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) umount2(&(0x7f0000000600)='./file0/../file0\x00', 0x0) 2033/05/18 03:34:56 triaging input for call #3 umount2 (new signal=1) umount(./5612/file0) [710914ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165759 #0 [710921ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [710922ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12787 #0 [710923ms] -> chroot(0x20000200) #0 [710923ms] <- chroot=0x0 errno=14 cover=904 #0 [710924ms] -> mount(0x0, 0x20000140, 0x20000240, 0x0, 0x0) #0 [710924ms] <- mount=0x0 errno=14 cover=2964 #0 [710924ms] -> umount2(0x20000600, 0x0) #0 [710924ms] <- umount2=0xffffffffffffffff errno=2 cover=1131 03:34:56 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000200)='./file0/../file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) umount2(&(0x7f0000000600)='./file0/../file0\x00', 0x0) 2033/05/18 03:34:56 result hanged=false: umount(./5613/file0) [710939ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165761 #0 [710946ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [710948ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12772 #0 [710950ms] -> chroot(0x20000200) #0 [710950ms] <- chroot=0x0 errno=14 cover=905 #0 [710950ms] -> mount(0x0, 0x20000140, 0x20000240, 0x0, 0x0) #0 [710951ms] <- mount=0x0 errno=14 cover=2928 #0 [710951ms] -> umount2(0x20000600, 0x0) #0 [710951ms] <- umount2=0xffffffffffffffff errno=2 cover=1154 2033/05/18 03:34:56 result hanged=false: 03:34:56 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000200)='./file0/../file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) umount2(&(0x7f0000000600)='./file0/../file0\x00', 0x0) umount(./5614/file0) [710969ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165763 #0 [710978ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [710980ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12724 #0 [710981ms] -> chroot(0x20000200) #0 [710982ms] <- chroot=0x0 errno=14 cover=904 #0 [710982ms] -> mount(0x0, 0x20000140, 0x20000240, 0x0, 0x0) #0 [710982ms] <- mount=0x0 errno=14 cover=2953 #0 [710983ms] -> umount2(0x20000600, 0x0) #0 [710983ms] <- umount2=0xffffffffffffffff errno=2 cover=1120 2033/05/18 03:34:56 result hanged=false: 2033/05/18 03:34:56 added new input for call #3 umount2 to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000200)='./file0/../file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) umount2(&(0x7f0000000600)='./file0/../file0\x00', 0x0) umount(./5615/file0) 03:34:56 executing program 0: r0 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="dc", 0x1, 0xfffffffffffffffd) keyctl$clear(0x7, r0) [711006ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165765 #0 [711015ms] -> add_key(0x20000000, 0x20000040, 0x20000080, 0x1, 0xfffffffffffffffd) #0 [711015ms] <- add_key=0x1c44e358 errno=14 cover=1807 #0 [711016ms] -> keyctl$clear(0x7, 0x1c44e358) #0 [711016ms] <- keyctl$clear=0xffffffffffffffff errno=13 cover=630 enabling collider #0 [711017ms] -> add_key(0x20000000, 0x20000040, 0x20000080, 0x1, 0xfffffffffffffffd) #0 [711017ms] <- add_key=0x1e6fb986 errno=14 cover=1454 2033/05/18 03:34:56 result hanged=false: 03:34:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "be8652"}) ioctl(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) [711033ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165767 #0 [711043ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [711048ms] <- perf_event_open=0x3 errno=14 cover=8335 #0 [711050ms] -> getpgrp(0xffffffffffffffff) #0 [711050ms] <- getpgrp=0x28787 errno=14 cover=48 #0 [711051ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x200001c0, 0x0, 0x0) #0 [711051ms] <- openat$vga_arbiter=0xffffffffffffffff errno=2 cover=1202 #0 [711051ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [711052ms] <- syz_init_net_socket$bt_hci=0xffffffffffffffff errno=2 cover=1157 #0 [711053ms] -> ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x20000000) #0 [711053ms] <- ioctl$HCIINQUIRY=0xffffffffffffffff errno=9 cover=45 #0 [711053ms] -> ioctl(0xffffffffffffffff, 0x0, 0x0) #0 [711053ms] <- ioctl=0xffffffffffffffff errno=9 cover=74 #0 [711054ms] -> openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) #0 [711054ms] <- openat$sndseq=0xffffffffffffffff errno=14 cover=1149 #0 [711054ms] -> kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) #0 [711054ms] <- kcmp$KCMP_EPOLL_TFD=0xffffffffffffffff errno=3 cover=117 #0 [711054ms] -> ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) #0 [711054ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=9 cover=74 enabling collider #0 [711065ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [711066ms] <- perf_event_open=0x3 errno=14 cover=8904 #0 [711067ms] -> getpgrp(0xffffffffffffffff) #0 [711067ms] <- getpgrp=0x28787 errno=14 cover=77 pthread_create failed (errno 11) 03:34:56 executing program 0: syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb) 2033/05/18 03:34:56 result hanged=false: [711125ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165869 #0 [711134ms] -> syz_io_uring_setup(0x4d4f, 0x20000080, 0x200a0000, 0x20ffc000, 0x20000200, 0x0) SIGSEGV on (nil), skipping #0 [711138ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=19200 #0 [711139ms] -> madvise(0x20ffc000, 0x3000, 0xb) #0 [711139ms] <- madvise=0xffffffffffffffff errno=22 cover=107 enabling collider #0 [711140ms] -> syz_io_uring_setup(0x4d4f, 0x20000080, 0x200a0000, 0x20ffc000, 0x20000200, 0x0) SIGSEGV on (nil), skipping #0 [711143ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=28612 #0 [711143ms] -> madvise(0x20ffc000, 2033/05/18 03:34:56 result hanged=false: 03:34:56 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x2, 0x0, 0x0, 0x0, 0x0, "473d7fcc115d845089a8e3fefc4327c35d5f4c097347fb24dc1b3b1ba18171798bdc0062ea0b5e364eee2b3dc94c1742ea96765c683f90df0000000100"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)="480300000013890000004c435ce0f87181858ced", 0x14}], 0x1}, 0x0) [711164ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165871 #0 [711172ms] -> socket$packet(0x11, 0x3, 0x300) #0 [711175ms] <- socket$packet=0x3 errno=14 cover=1739 #0 [711177ms] -> sendmsg(0x3, 0x20000100, 0x0) #0 [711178ms] <- sendmsg=0xffffffffffffffff errno=100 cover=218 enabling collider #0 [711183ms] -> socket$packet(0x11, 0x3, 0x300) #0 [711183ms] <- socket$packet=0x3 errno=14 cover=1741 #0 [711184ms] -> sendmsg(0x3, 0x20000100, 0x0) #0 [711184ms] <- sendmsg=0xffffffffffffffff errno=9 cover=53 2033/05/18 03:34:56 result hanged=false: 03:34:56 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000100)={0x24, @long}, 0x14) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x324, 0x0, 0x0, 0x0, 0x0, 0x6e00}}], 0x324, 0x0) [711208ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165873 #0 [711216ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [711217ms] <- syz_init_net_socket$802154_dgram=0xffffffffffffffff errno=2 cover=1186 #0 [711218ms] -> bind$802154_dgram(0xffffffffffffffff, 0x20000000, 0x14) #0 [711218ms] <- bind$802154_dgram=0xffffffffffffffff errno=9 cover=48 #0 [711219ms] -> connect$802154_dgram(0xffffffffffffffff, 0x20000100, 0x14) #0 [711219ms] <- connect$802154_dgram=0xffffffffffffffff errno=9 cover=46 #0 [711220ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [711220ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=938 #0 [711222ms] -> sendmmsg$sock(0xffffffffffffffff, 0x200021c0, 0x324, 0x0) #0 [711222ms] <- sendmmsg$sock=0xffffffffffffffff errno=9 cover=51 enabling collider #0 [711222ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [711222ms] <- syz_init_net_socket$802154_dgram=0xffffffffffffffff errno=2 cover=1168 #0 [711223ms] -> bind$802154_dgram(0xffffffffffffffff, 0x20000000, 0x14) #0 [711223ms] <- bind$802154_dgram=0xffffffffffffffff errno=9 cover=48 pthread_create failed (errno 11) 03:34:56 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x0) 2033/05/18 03:34:56 result hanged=false: [711267ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165975 #0 [711275ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [711276ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1170 #0 [711276ms] -> sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x0) #0 [711279ms] <- sendmsg$NLBL_MGMT_C_LISTDEF=0xffffffffffffffff errno=9 cover=52 enabling collider #0 [711280ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [711281ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1205 2033/05/18 03:34:56 result hanged=false: 03:34:56 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000140)={0xfffffffffffffdfe}, 0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x9bbb) 2033/05/18 03:34:56 poll: candidates=8 inputs=0 signal=0 [711300ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165977 #0 [711309ms] -> openat(0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [711309ms] <- openat=0xffffffffffffffff errno=14 cover=615 #0 [711310ms] -> write$P9_RWSTAT(0xffffffffffffffff, 0x20000140, 0x7) #0 [711310ms] <- write$P9_RWSTAT=0xffffffffffffffff errno=9 cover=47 #0 [711310ms] -> openat(0xffffffffffffff9c, 0x20000080, 0x0, 0x2) #0 [711311ms] <- openat=0xffffffffffffffff errno=2 cover=1166 #0 [711311ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [711312ms] <- socket$inet6_tcp=0x3 errno=14 cover=1719 #0 [711312ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x2, 0x20000040, 0x4) #0 [711312ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=142 #0 [711313ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [711313ms] <- bind$inet6=0xffffffffffffffff errno=98 cover=443 #0 [711314ms] -> connect$inet6(0x3, 0x20000000, 0x1c) pthread_create failed (errno 11) 2033/05/18 03:34:57 result hanged=false: 03:34:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) set_mempolicy(0x0, 0x0, 0x0) iptable filter/10: resetting iptable mangle/10: resetting [712360ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166079 #0 [712368ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [712375ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=47336 #0 [712382ms] -> set_mempolicy(0x0, 0x0, 0x0) #0 [712388ms] <- set_mempolicy=0x0 errno=14 cover=2942 enabling collider #0 [712391ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [712397ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=5232 03:34:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000001740), r0) 2033/05/18 03:34:57 result hanged=false: [712417ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166081 #0 [712426ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [712428ms] <- socket$nl_generic=0x3 errno=14 cover=1434 #0 [712430ms] -> sendmsg$IPVS_CMD_NEW_DEST(0x3, 0x200016c0, 0x0) #0 [712432ms] <- sendmsg$IPVS_CMD_NEW_DEST=0x0 errno=14 cover=986 #0 [712434ms] -> syz_genetlink_get_family_id$SEG6(0x20001740, 0x3) syz_genetlink_get_family_id(SEG6, 3) #0 [712435ms] <- syz_genetlink_get_family_id$SEG6=0x1f errno=14 cover=4630 enabling collider #0 [712435ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [712435ms] <- socket$nl_generic=0x3 errno=14 cover=1411 #0 [712436ms] -> sendmsg$IPVS_CMD_NEW_DEST(0x3, 0x200016c0, 0x0) #0 [712436ms] <- sendmsg$IPVS_CMD_NEW_DEST=0x0 errno=14 cover=1003 pthread_create failed (errno 11) 2033/05/18 03:34:57 result hanged=false: 2033/05/18 03:34:57 #0: triaging type=7 03:34:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000001740), r0) 2033/05/18 03:34:57 triaging input for call #2 syz_genetlink_get_family_id$SEG6 (new signal=1) [712483ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166183 #0 [712492ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [712494ms] <- socket$nl_generic=0x3 errno=14 cover=1423 #0 [712496ms] -> sendmsg$IPVS_CMD_NEW_DEST(0x3, 0x200016c0, 0x0) #0 [712498ms] <- sendmsg$IPVS_CMD_NEW_DEST=0x0 errno=14 cover=975 #0 [712498ms] -> syz_genetlink_get_family_id$SEG6(0x20001740, 0x3) syz_genetlink_get_family_id(SEG6, 3) #0 [712499ms] <- syz_genetlink_get_family_id$SEG6=0x1f errno=14 cover=4580 03:34:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000001740), r0) 2033/05/18 03:34:57 result hanged=false: [712517ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166185 #0 [712525ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [712525ms] <- socket$nl_generic=0x3 errno=14 cover=1423 #0 [712527ms] -> sendmsg$IPVS_CMD_NEW_DEST(0x3, 0x200016c0, 0x0) #0 [712527ms] <- sendmsg$IPVS_CMD_NEW_DEST=0x0 errno=14 cover=967 #0 [712528ms] -> syz_genetlink_get_family_id$SEG6(0x20001740, 0x3) syz_genetlink_get_family_id(SEG6, 3) #0 [712529ms] <- syz_genetlink_get_family_id$SEG6=0x1f errno=14 cover=4550 2033/05/18 03:34:57 result hanged=false: 03:34:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000001740), r0) [712548ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166187 #0 [712557ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [712557ms] <- socket$nl_generic=0x3 errno=14 cover=1434 #0 [712558ms] -> sendmsg$IPVS_CMD_NEW_DEST(0x3, 0x200016c0, 0x0) #0 [712559ms] <- sendmsg$IPVS_CMD_NEW_DEST=0x0 errno=14 cover=989 #0 [712559ms] -> syz_genetlink_get_family_id$SEG6(0x20001740, 0x3) syz_genetlink_get_family_id(SEG6, 3) #0 [712560ms] <- syz_genetlink_get_family_id$SEG6=0x1f errno=14 cover=4558 2033/05/18 03:34:58 result hanged=false: 2033/05/18 03:34:58 added new input for call #2 syz_genetlink_get_family_id$SEG6 to corpus: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000001740), r0) 03:34:58 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 'w\x00Jn;m\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) [712584ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166189 #0 [712591ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [712591ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [712591ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [712592ms] <- openat$tun=0xffffffffffffffff errno=2 cover=1210 #0 [712592ms] -> ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, 0x20000000) #0 [712592ms] <- ioctl$TUNSETQUEUE=0xffffffffffffffff errno=9 cover=45 #0 [712593ms] -> ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) #0 [712593ms] <- ioctl$TUNATTACHFILTER=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [712594ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [712594ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [712595ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [712595ms] <- openat$tun=0xffffffffffffffff errno=2 cover=1198 pthread_create failed (errno 11) 2033/05/18 03:34:58 result hanged=false: 03:34:58 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0xfffffffc}, 0x0) [712649ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166291 #0 [712659ms] -> openat$pidfd(0xffffffffffffff9c, 0x20000500, 0x0, 0x0) #0 [712662ms] <- openat$pidfd=0xffffffffffffffff errno=2 cover=1166 #0 [712664ms] -> pidfd_send_signal(0xffffffffffffffff, 0x0, 0x200010c0, 0x0) #0 [712665ms] <- pidfd_send_signal=0xffffffffffffffff errno=9 cover=47 enabling collider #0 [712666ms] -> openat$pidfd(0xffffffffffffff9c, 0x20000500, 0x0, 0x0) #0 [712666ms] <- openat$pidfd=0xffffffffffffffff errno=2 cover=1164 03:34:58 executing program 0: syz_mount_image$nfs4(&(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)) 2033/05/18 03:34:58 result hanged=false: [712687ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166293 #0 [712698ms] -> syz_mount_image$nfs4(0x20001b40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20001f00) syz_mount_image: size=0 segs=0 loop='' dir='(null)' fs='nfs4' flags=0 opts='' syz_mount_image > mount error: 14 #0 [712699ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=1851 enabling collider #0 [712700ms] -> syz_mount_image$nfs4(0x20001b40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20001f00) syz_mount_image: size=0 segs=0 loop='' dir='(null)' fs='nfs4' flags=0 opts='' syz_mount_image > mount error: 14 #0 [712701ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=1800 2033/05/18 03:34:58 result hanged=false: 03:34:58 executing program 0: r0 = socket$inet(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) bind$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) [712724ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166295 #0 [712735ms] -> socket$inet(0x2, 0x3, 0xff) #0 [712736ms] <- socket$inet=0x3 errno=14 cover=1680 #0 [712737ms] -> connect$inet(0x3, 0x20000440, 0x10) #0 [712737ms] <- connect$inet=0x0 errno=14 cover=864 #0 [712738ms] -> bind$inet(0x3, 0x20000480, 0x10) #0 [712738ms] <- bind$inet=0xffffffffffffffff errno=22 cover=193 enabling collider #0 [712739ms] -> socket$inet(0x2, 0x3, 0xff) #0 [712740ms] <- socket$inet=0x3 errno=14 cover=1747 #0 [712741ms] -> connect$inet(0x3, 0x20000440, 0x10) #0 [712742ms] <- connect$inet=0x0 errno=14 cover=818 pthread_create failed (errno 11) 03:34:58 executing program 0: select(0x40, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)={0x40}, &(0x7f0000000300)={0x77359400}) 2033/05/18 03:34:58 result hanged=false: [712794ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166397 #0 [712804ms] -> select(0x40, 0x20000240, 0x20000280, 0x200002c0, 0x20000300) #0 [712810ms] <- select=0xffffffffffffffff errno=9 cover=239 enabling collider #0 [712810ms] -> select(0x40, 0x20000240, 0x20000280, 0x200002c0, 0x20000300) #0 [712811ms] <- select=0xffffffffffffffff errno=9 cover=239 2033/05/18 03:34:58 result hanged=false: 03:34:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xc}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x30}}, 0x0) 2033/05/18 03:34:58 poll: candidates=8 inputs=0 signal=0 [712831ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166399 #0 [712839ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [712842ms] <- socket$netlink=0x3 errno=14 cover=1465 #0 [712843ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [712843ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [712843ms] -> sendmsg$nl_generic(0x4, 0x20000280, 0x0) #0 [712843ms] <- sendmsg$nl_generic=0x30 errno=14 cover=1588 enabling collider #0 [712844ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [712844ms] <- socket$netlink=0x3 errno=14 cover=1445 #0 [712844ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [712844ms] <- fcntl$dupfd=0x4 errno=14 cover=110 pthread_create failed (errno 11) 03:34:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/200, 0xc8}], 0x1, 0xf4d, 0x0) 2033/05/18 03:34:58 result hanged=false: [712895ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166501 #0 [712905ms] -> syz_open_procfs(0x0, 0x20000180) #0 [712905ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2411 #0 [712906ms] -> preadv(0xffffffffffffffff, 0x20000100, 0x1, 0xf4d, 0x0) #0 [712906ms] <- preadv=0xffffffffffffffff errno=9 cover=47 enabling collider #0 [712906ms] -> syz_open_procfs(0x0, 0x20000180) #0 [712907ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2407 03:34:58 executing program 0: syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f0000001cc0), &(0x7f0000001d00)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002180)={[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@context={'context', 0x3d, 'sysadm_u'}}]}) 2033/05/18 03:34:58 result hanged=false: [712927ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166503 #0 [712937ms] -> syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [712940ms] <- syz_genetlink_get_family_id$SEG6=0xffffffffffffffff errno=14 cover=4549 #0 [712941ms] -> syz_mount_image$iso9660(0x20001cc0, 0x20001d00, 0x0, 0x0, 0x0, 0x0, 0x20002180) syz_mount_image: size=0 segs=0 loop='' dir='./file1' fs='iso9660' flags=1 opts='defcontext=user_u,mask=^MAY_WRITE,context=sysadm_u,' [ 1462.920931] SELinux: duplicate or incompatible mount options syz_mount_image > mount error: 22 #0 [712946ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=22 cover=4451 enabling collider #0 [712946ms] -> syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [712946ms] <- syz_genetlink_get_family_id$SEG6=0xffffffffffffffff errno=14 cover=2480 03:34:58 executing program 0: syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) 2033/05/18 03:34:58 result hanged=false: [712969ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166505 #0 [712979ms] -> syz_genetlink_get_family_id$nbd(0x200002c0, 0xffffffffffffffff) syz_genetlink_get_family_id(nbd, -1) netlink: failed to get family id for nbd: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [712995ms] <- syz_genetlink_get_family_id$nbd=0xffffffffffffffff errno=2 cover=12048 enabling collider #0 [712997ms] -> syz_genetlink_get_family_id$nbd(0x200002c0, 0xffffffffffffffff) syz_genetlink_get_family_id(nbd, -1) netlink: failed to get family id for nbd: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [713014ms] <- syz_genetlink_get_family_id$nbd=0xffffffffffffffff errno=2 cover=8343 03:34:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 2033/05/18 03:34:58 result hanged=false: [713032ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166507 #0 [713043ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [713043ms] <- syz_init_net_socket$bt_hci=0xffffffffffffffff errno=2 cover=1169 #0 [713044ms] -> bind$bt_hci(0xffffffffffffffff, 0x20000000, 0x6) #0 [713045ms] <- bind$bt_hci=0xffffffffffffffff errno=9 cover=48 #0 [713045ms] -> stat(0x20001cc0, 0x20001c00) #0 [713045ms] <- stat=0x0 errno=14 cover=546 #0 [713046ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [713046ms] <- setresuid=0x0 errno=14 cover=404 #0 [713047ms] -> write$bt_hci(0xffffffffffffffff, 0x20000080, 0x6) #0 [713047ms] <- write$bt_hci=0xffffffffffffffff errno=9 cover=47 enabling collider #0 [713047ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [713048ms] <- syz_init_net_socket$bt_hci=0xffffffffffffffff errno=2 cover=1227 #0 [713049ms] -> bind$bt_hci(0xffffffffffffffff, 0x20000000, 0x6) #0 [713049ms] <- bind$bt_hci=0xffffffffffffffff errno=9 cover=48 pthread_create failed (errno 11) 03:34:58 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x1, 0x4) sendmsg$unix(r0, &(0x7f0000001280)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 2033/05/18 03:34:58 result hanged=false: [713098ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166609 #0 [713108ms] -> socket$unix(0x1, 0x2, 0x0) #0 [713108ms] <- socket$unix=0x3 errno=14 cover=1458 #0 [713109ms] -> bind$unix(0x3, 0x20000040, 0x6e) #0 [713110ms] <- bind$unix=0x0 errno=14 cover=5902 #0 [713111ms] -> setsockopt$sock_int(0x3, 0x1, 0x10, 0x20000000, 0x4) #0 [713111ms] <- setsockopt$sock_int=0x0 errno=14 cover=134 #0 [713111ms] -> sendmsg$unix(0x3, 0x20001280, 0x0) #0 [713113ms] <- sendmsg$unix=0x0 errno=14 cover=1968 enabling collider #0 [713113ms] -> socket$unix(0x1, 0x2, 0x0) #0 [713114ms] <- socket$unix=0x3 errno=14 cover=1441 #0 [713115ms] -> bind$unix(0x3, 0x20000040, 0x6e) #0 [713115ms] <- bind$unix=0xffffffffffffffff errno=98 cover=602 pthread_create failed (errno 11) 03:34:58 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x1, 0x4) sendmsg$unix(r0, &(0x7f0000001280)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 2033/05/18 03:34:58 result hanged=false: 2033/05/18 03:34:58 #0: triaging type=7 2033/05/18 03:34:58 triaging input for call #3 sendmsg$unix (new signal=2) [713165ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166711 #0 [713175ms] -> socket$unix(0x1, 0x2, 0x0) #0 [713175ms] <- socket$unix=0x3 errno=14 cover=1424 #0 [713177ms] -> bind$unix(0x3, 0x20000040, 0x6e) #0 [713179ms] <- bind$unix=0x0 errno=14 cover=5897 #0 [713179ms] -> setsockopt$sock_int(0x3, 0x1, 0x10, 0x20000000, 0x4) #0 [713179ms] <- setsockopt$sock_int=0x0 errno=14 cover=134 #0 [713179ms] -> sendmsg$unix(0x3, 0x20001280, 0x0) #0 [713180ms] <- sendmsg$unix=0x0 errno=14 cover=1965 2033/05/18 03:34:58 result hanged=false: 03:34:58 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x1, 0x4) sendmsg$unix(r0, &(0x7f0000001280)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) [713199ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166713 #0 [713209ms] -> socket$unix(0x1, 0x2, 0x0) #0 [713212ms] <- socket$unix=0x3 errno=14 cover=1424 #0 [713213ms] -> bind$unix(0x3, 0x20000040, 0x6e) #0 [713213ms] <- bind$unix=0x0 errno=14 cover=5854 #0 [713214ms] -> setsockopt$sock_int(0x3, 0x1, 0x10, 0x20000000, 0x4) #0 [713214ms] <- setsockopt$sock_int=0x0 errno=14 cover=134 #0 [713214ms] -> sendmsg$unix(0x3, 0x20001280, 0x0) #0 [713214ms] <- sendmsg$unix=0x0 errno=14 cover=1821 03:34:58 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x1, 0x4) sendmsg$unix(r0, &(0x7f0000001280)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 2033/05/18 03:34:58 result hanged=false: [713232ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166715 #0 [713243ms] -> socket$unix(0x1, 0x2, 0x0) #0 [713244ms] <- socket$unix=0x3 errno=14 cover=1504 #0 [713245ms] -> bind$unix(0x3, 0x20000040, 0x6e) #0 [713246ms] <- bind$unix=0x0 errno=14 cover=5901 #0 [713247ms] -> setsockopt$sock_int(0x3, 0x1, 0x10, 0x20000000, 0x4) #0 [713248ms] <- setsockopt$sock_int=0x0 errno=14 cover=134 #0 [713248ms] -> sendmsg$unix(0x3, 0x20001280, 0x0) #0 [713249ms] <- sendmsg$unix=0x0 errno=14 cover=1863 2033/05/18 03:34:58 result hanged=false: 2033/05/18 03:34:58 added new input for call #3 sendmsg$unix to corpus: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x1, 0x4) sendmsg$unix(r0, &(0x7f0000001280)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 03:34:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x3e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}}, 0x0) [713274ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166717 #0 [713282ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [713284ms] <- socket$netlink=0x3 errno=14 cover=1421 #0 [713285ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [713286ms] <- sendmsg$nl_generic=0x14 errno=14 cover=2398 enabling collider #0 [713286ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [713287ms] <- socket$netlink=0x3 errno=14 cover=1423 03:34:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r3 = fork() ptrace$cont(0x9, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3f, 0x4, 0xe1, 0x1, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x7, 0x0, 0x0, 0xffffffffffffff00, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1714}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r4 = fork() ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000000)="8b7dff3da023485e5fa2c567781b15a668df1c528ae60675d677da3556765196b4c703245cee80d509c2dd59da7ea5eb788abe542bb73626ef6f3af9a366d1ba9ab595c181dd41d1a9fef1a77fa6c00757150c9832fda8395d26340456a98b9529bb84bee5b292b6810e930bb1bd6ba0557e9e001ca1823b291396198f52360c2d132dfd772e7f30d7") ptrace$cont(0x9, r4, 0x0, 0x0) 2033/05/18 03:34:58 result hanged=false: [713309ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166719 #0 [713319ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [713325ms] <- perf_event_open=0x3 errno=14 cover=11760 #0 [713326ms] -> ioprio_set$uid(0x3, 0x0, 0x0) #0 [713327ms] <- ioprio_set$uid=0x0 errno=14 cover=18520 #0 [713328ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [713329ms] <- perf_event_open=0x4 errno=14 cover=10966 #0 [713330ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [713331ms] <- socket$inet_icmp_raw=0x5 errno=14 cover=5269 #0 [713331ms] -> dup3(0x5, 0x4, 0x0) #0 [713344ms] <- dup3=0x4 errno=14 cover=7088 #0 [713344ms] -> ioctl$PERF_EVENT_IOC_SET_OUTPUT(0x3, 0x2405, 0x4) #0 [713344ms] <- ioctl$PERF_EVENT_IOC_SET_OUTPUT=0xffffffffffffffff errno=9 cover=298 #0 [713344ms] -> fork() #0 [713368ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [713370ms] -> ptrace$cont(0x9, 0x0, 0x0, 0x0) #0 [713371ms] <- ptrace$cont=0xffffffffffffffff errno=3 cover=93 #0 [713371ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x2) #0 [713371ms] <- perf_event_open=0xffffffffffffffff errno=7 cover=192 #0 [713372ms] -> fork() #0 [713396ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [713398ms] -> ptrace(0x10, 0x0) #0 [713398ms] <- ptrace=0xffffffffffffffff errno=3 cover=93 #0 [713398ms] -> ptrace$setregs(0xd, 0x0, 0x0, 0x20000000) #0 [713398ms] <- ptrace$setregs=0xffffffffffffffff errno=3 cover=93 #0 [713399ms] -> ptrace$cont(0x9, 0x0, 0x0, 0x0) #0 [713399ms] <- ptrace$cont=0xffffffffffffffff errno=3 cover=93 enabling collider #0 [713411ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [713413ms] <- perf_event_open=0x3 errno=14 cover=10605 #0 [713413ms] -> ioprio_set$uid(0x3, 0x0, 0x0) #0 [713414ms] <- ioprio_set$uid=0x0 errno=14 cover=17877 pthread_create failed (errno 11) 2033/05/18 03:34:58 result hanged=false: 2033/05/18 03:34:58 #0: triaging type=7 2033/05/18 03:34:58 triaging input for call #1 ioprio_set$uid (new signal=1) 03:34:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r3 = fork() ptrace$cont(0x9, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3f, 0x4, 0xe1, 0x1, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x7, 0x0, 0x0, 0xffffffffffffff00, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1714}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r4 = fork() ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000000)="8b7dff3da023485e5fa2c567781b15a668df1c528ae60675d677da3556765196b4c703245cee80d509c2dd59da7ea5eb788abe542bb73626ef6f3af9a366d1ba9ab595c181dd41d1a9fef1a77fa6c00757150c9832fda8395d26340456a98b9529bb84bee5b292b6810e930bb1bd6ba0557e9e001ca1823b291396198f52360c2d132dfd772e7f30d7") ptrace$cont(0x9, r4, 0x0, 0x0) [713483ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166823 #0 [713491ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [713496ms] <- perf_event_open=0x3 errno=14 cover=10554 #0 [713499ms] -> ioprio_set$uid(0x3, 0x0, 0x0) #0 [713501ms] <- ioprio_set$uid=0x0 errno=14 cover=18531 #0 [713503ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [713505ms] <- perf_event_open=0x4 errno=14 cover=10216 #0 [713507ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [713509ms] <- socket$inet_icmp_raw=0x5 errno=14 cover=5270 #0 [713510ms] -> dup3(0x5, 0x4, 0x0) #0 [713522ms] <- dup3=0x4 errno=14 cover=6791 #0 [713523ms] -> ioctl$PERF_EVENT_IOC_SET_OUTPUT(0x3, 0x2405, 0x4) #0 [713523ms] <- ioctl$PERF_EVENT_IOC_SET_OUTPUT=0xffffffffffffffff errno=9 cover=298 #0 [713523ms] -> fork() #0 [713547ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [713562ms] -> ptrace$cont(0x9, 0x0, 0x0, 0x0) #0 [713562ms] <- ptrace$cont=0xffffffffffffffff errno=3 cover=93 #0 [713562ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x2) #0 [713563ms] <- perf_event_open=0xffffffffffffffff errno=7 cover=192 #0 [713563ms] -> fork() #0 [713586ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [713601ms] -> ptrace(0x10, 0x0) #0 [713601ms] <- ptrace=0xffffffffffffffff errno=3 cover=93 #0 [713601ms] -> ptrace$setregs(0xd, 0x0, 0x0, 0x20000000) #0 [713601ms] <- ptrace$setregs=0xffffffffffffffff errno=3 cover=93 #0 [713601ms] -> ptrace$cont(0x9, 0x0, 0x0, 0x0) #0 [713602ms] <- ptrace$cont=0xffffffffffffffff errno=3 cover=93 2033/05/18 03:34:59 result hanged=false: 03:34:59 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r3 = fork() ptrace$cont(0x9, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3f, 0x4, 0xe1, 0x1, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x7, 0x0, 0x0, 0xffffffffffffff00, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1714}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r4 = fork() ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000000)="8b7dff3da023485e5fa2c567781b15a668df1c528ae60675d677da3556765196b4c703245cee80d509c2dd59da7ea5eb788abe542bb73626ef6f3af9a366d1ba9ab595c181dd41d1a9fef1a77fa6c00757150c9832fda8395d26340456a98b9529bb84bee5b292b6810e930bb1bd6ba0557e9e001ca1823b291396198f52360c2d132dfd772e7f30d7") ptrace$cont(0x9, r4, 0x0, 0x0) [713635ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166827 #0 [713644ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [713645ms] <- perf_event_open=0x3 errno=14 cover=10955 #0 [713646ms] -> ioprio_set$uid(0x3, 0x0, 0x0) #0 [713647ms] <- ioprio_set$uid=0x0 errno=14 cover=18661 #0 [713648ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [713649ms] <- perf_event_open=0x4 errno=14 cover=10440 #0 [713650ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [713650ms] <- socket$inet_icmp_raw=0x5 errno=14 cover=5197 #0 [713651ms] -> dup3(0x5, 0x4, 0x0) #0 [713661ms] <- dup3=0x4 errno=14 cover=7614 #0 [713662ms] -> ioctl$PERF_EVENT_IOC_SET_OUTPUT(0x3, 0x2405, 0x4) #0 [713662ms] <- ioctl$PERF_EVENT_IOC_SET_OUTPUT=0xffffffffffffffff errno=9 cover=298 #0 [713662ms] -> fork() #0 [713689ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [713704ms] -> ptrace$cont(0x9, 0x0, 0x0, 0x0) #0 [713704ms] <- ptrace$cont=0xffffffffffffffff errno=3 cover=93 #0 [713704ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x2) #0 [713704ms] <- perf_event_open=0xffffffffffffffff errno=7 cover=192 #0 [713704ms] -> fork() #0 [713727ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [713741ms] -> ptrace(0x10, 0x0) #0 [713741ms] <- ptrace=0xffffffffffffffff errno=3 cover=93 #0 [713741ms] -> ptrace$setregs(0xd, 0x0, 0x0, 0x20000000) #0 [713741ms] <- ptrace$setregs=0xffffffffffffffff errno=3 cover=93 #0 [713741ms] -> ptrace$cont(0x9, 0x0, 0x0, 0x0) #0 [713741ms] <- ptrace$cont=0xffffffffffffffff errno=3 cover=93 2033/05/18 03:34:59 result hanged=false: 03:34:59 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r3 = fork() ptrace$cont(0x9, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3f, 0x4, 0xe1, 0x1, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x7, 0x0, 0x0, 0xffffffffffffff00, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1714}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r4 = fork() ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000000)="8b7dff3da023485e5fa2c567781b15a668df1c528ae60675d677da3556765196b4c703245cee80d509c2dd59da7ea5eb788abe542bb73626ef6f3af9a366d1ba9ab595c181dd41d1a9fef1a77fa6c00757150c9832fda8395d26340456a98b9529bb84bee5b292b6810e930bb1bd6ba0557e9e001ca1823b291396198f52360c2d132dfd772e7f30d7") ptrace$cont(0x9, r4, 0x0, 0x0) [713770ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166831 #0 [713778ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [713783ms] <- perf_event_open=0x3 errno=14 cover=10736 #0 [713785ms] -> ioprio_set$uid(0x3, 0x0, 0x0) #0 [713788ms] <- ioprio_set$uid=0x0 errno=14 cover=18531 #0 [713789ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [713792ms] <- perf_event_open=0x4 errno=14 cover=10515 #0 [713794ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [713794ms] <- socket$inet_icmp_raw=0x5 errno=14 cover=5294 #0 [713796ms] -> dup3(0x5, 0x4, 0x0) #0 [713808ms] <- dup3=0x4 errno=14 cover=7308 #0 [713809ms] -> ioctl$PERF_EVENT_IOC_SET_OUTPUT(0x3, 0x2405, 0x4) #0 [713809ms] <- ioctl$PERF_EVENT_IOC_SET_OUTPUT=0xffffffffffffffff errno=9 cover=298 #0 [713809ms] -> fork() #0 [713835ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [713850ms] -> ptrace$cont(0x9, 0x0, 0x0, 0x0) #0 [713850ms] <- ptrace$cont=0xffffffffffffffff errno=3 cover=93 #0 [713850ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x2) #0 [713851ms] <- perf_event_open=0xffffffffffffffff errno=7 cover=192 #0 [713851ms] -> fork() #0 [713874ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [713889ms] -> ptrace(0x10, 0x0) #0 [713889ms] <- ptrace=0xffffffffffffffff errno=3 cover=93 #0 [713889ms] -> ptrace$setregs(0xd, 0x0, 0x0, 0x20000000) #0 [713889ms] <- ptrace$setregs=0xffffffffffffffff errno=3 cover=93 #0 [713889ms] -> ptrace$cont(0x9, 0x0, 0x0, 0x0) #0 [713890ms] <- ptrace$cont=0xffffffffffffffff errno=3 cover=93 2033/05/18 03:34:59 result hanged=false: 2033/05/18 03:34:59 added new input for call #1 ioprio_set$uid to corpus: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r3 = fork() ptrace$cont(0x9, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3f, 0x4, 0xe1, 0x1, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x7, 0x0, 0x0, 0xffffffffffffff00, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1714}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r4 = fork() ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000000)="8b7dff3da023485e5fa2c567781b15a668df1c528ae60675d677da3556765196b4c703245cee80d509c2dd59da7ea5eb788abe542bb73626ef6f3af9a366d1ba9ab595c181dd41d1a9fef1a77fa6c00757150c9832fda8395d26340456a98b9529bb84bee5b292b6810e930bb1bd6ba0557e9e001ca1823b291396198f52360c2d132dfd772e7f30d7") ptrace$cont(0x9, r4, 0x0, 0x0) 03:34:59 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) [713923ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2033/05/18 03:34:59 poll: candidates=8 inputs=0 signal=0 spawned worker pid 166835 #0 [713933ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [713938ms] <- perf_event_open=0x3 errno=14 cover=11254 #0 [713940ms] -> socket$unix(0x1, 0x5, 0x0) #0 [713940ms] <- socket$unix=0x4 errno=14 cover=4364 #0 [713941ms] -> bind$unix(0x4, 0x20000080, 0x6e) #0 [713942ms] <- bind$unix=0x0 errno=14 cover=10716 #0 [713943ms] -> listen(0x4, 0x0) #0 [713945ms] <- listen=0x0 errno=14 cover=174 #0 [713946ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x20000480) #0 [713946ms] <- socketpair$unix=0x0 errno=14 cover=8860 #0 [713947ms] -> connect$unix(0x5, 0x20000000, 0x6e) #0 [713949ms] <- connect$unix=0xffffffffffffffff errno=106 cover=6898 enabling collider #0 [713958ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [713960ms] <- perf_event_open=0x3 errno=14 cover=10779 #0 [713961ms] -> socket$unix(0x1, 0x5, 0x0) #0 [713963ms] <- socket$unix=0x4 errno=14 cover=4488 pthread_create failed (errno 11) 2033/05/18 03:34:59 result hanged=false: 03:34:59 executing program 0: syz_open_dev$vcsn(&(0x7f00000002c0), 0x6, 0x741) [714032ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166937 #0 [714041ms] -> syz_open_dev$vcsn(0x200002c0, 0x6, 0x741) #0 [714045ms] <- syz_open_dev$vcsn=0xffffffffffffffff errno=2 cover=1160 enabling collider #0 [714047ms] -> syz_open_dev$vcsn(0x200002c0, 0x6, 0x741) #0 [714047ms] <- syz_open_dev$vcsn=0xffffffffffffffff errno=2 cover=1184 2033/05/18 03:34:59 result hanged=false: 03:34:59 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000c00)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000c00)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) [714069ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 166939 #0 [714078ms] -> socket$inet(0x2, 0x1, 0x0) #0 [714081ms] <- socket$inet=0x3 errno=14 cover=1773 #0 [714083ms] -> bind$inet(0x3, 0x20000c00, 0x10) #0 [714085ms] <- bind$inet=0x0 errno=14 cover=391 #0 [714085ms] -> connect$inet(0x3, 0x20000140, 0x10) #0 [714086ms] <- connect$inet=0x0 errno=14 cover=6044 #0 [714087ms] -> shutdown(0x3, 0x1) #0 [714089ms] <- shutdown=0x0 errno=14 cover=3559 #0 [714091ms] -> socket$inet(0x2, 0x1, 0x0) #0 [714092ms] <- socket$inet=0x4 errno=14 cover=1740 #0 [714092ms] -> bind$inet(0x4, 0x20000c00, 0x10) #0 [714093ms] <- bind$inet=0x0 errno=14 cover=399 #0 [714093ms] -> connect$inet(0x4, 0x20000140, 0x10) #0 [714094ms] <- connect$inet=0x0 errno=14 cover=7792 enabling collider #0 [714095ms] -> socket$inet(0x2, 0x1, 0x0) #0 [714095ms] <- socket$inet=0x3 errno=14 cover=1728 #0 [714096ms] -> bind$inet(0x3, 0x20000c00, 0x10) #0 [714096ms] <- bind$inet=0x0 errno=14 cover=384 pthread_create failed (errno 11) 03:34:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') pread64(r0, &(0x7f00000000c0)=""/163, 0xa3, 0x100) 2033/05/18 03:34:59 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [714148ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167041 #0 [714159ms] -> syz_open_procfs(0x0, 0x20000000) #0 [714163ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2370 #0 [714164ms] -> pread64(0xffffffffffffffff, 0x200000c0, 0xa3, 0x100) #0 [714164ms] <- pread64=0xffffffffffffffff errno=9 cover=46 enabling collider #0 [714164ms] -> syz_open_procfs(0x0, 0x20000000) #0 [714164ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2358 2033/05/18 03:34:59 result hanged=false: 03:34:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0xb052) r3 = dup2(r2, r1) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x255) [714184ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167043 #0 [714192ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [714196ms] <- openat=0x3 errno=14 cover=6732 #0 [714197ms] -> ftruncate(0x3, 0x1000004) #0 [714199ms] <- ftruncate=0x0 errno=14 cover=1718 #0 [714201ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20000100) #0 [714202ms] <- socketpair$unix=0x0 errno=14 cover=2882 #0 [714203ms] -> sendfile(0x4, 0x3, 0x0, 0xb052) #0 [714205ms] <- sendfile=0xb052 errno=14 cover=9840 #0 [714205ms] -> dup2(0x5, 0x4) #0 [714207ms] <- dup2=0x4 errno=14 cover=626 #0 [714209ms] -> write$binfmt_elf64(0x4, 0x20000140, 0x255) #0 [714212ms] <- write$binfmt_elf64=0xffffffffffffffff errno=111 cover=5652 enabling collider #0 [714212ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [714212ms] <- openat=0xffffffffffffffff errno=17 cover=1015 #0 [714213ms] -> ftruncate(0x3, 0x1000004) #0 [714213ms] <- ftruncate=0xffffffffffffffff errno=9 cover=48 pthread_create failed (errno 11) 03:34:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0xb052) r3 = dup2(r2, r1) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x255) 2033/05/18 03:34:59 result hanged=false: 2033/05/18 03:34:59 #0: triaging type=7 2033/05/18 03:34:59 triaging input for call #5 write$binfmt_elf64 (new signal=1) [714268ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167145 #0 [714279ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [714281ms] <- openat=0x3 errno=14 cover=6660 #0 [714282ms] -> ftruncate(0x3, 0x1000004) #0 [714283ms] <- ftruncate=0x0 errno=14 cover=1734 #0 [714283ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20000100) #0 [714283ms] <- socketpair$unix=0x0 errno=14 cover=2959 #0 [714284ms] -> sendfile(0x4, 0x3, 0x0, 0xb052) #0 [714285ms] <- sendfile=0xb052 errno=14 cover=9326 #0 [714286ms] -> dup2(0x5, 0x4) #0 [714286ms] <- dup2=0x4 errno=14 cover=627 #0 [714286ms] -> write$binfmt_elf64(0x4, 0x20000140, 0x255) #0 [714287ms] <- write$binfmt_elf64=0xffffffffffffffff errno=111 cover=5306 03:34:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0xb052) r3 = dup2(r2, r1) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x255) 2033/05/18 03:34:59 result hanged=false: [714307ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167147 #0 [714318ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [714322ms] <- openat=0x3 errno=14 cover=6714 #0 [714325ms] -> ftruncate(0x3, 0x1000004) #0 [714325ms] <- ftruncate=0x0 errno=14 cover=1804 #0 [714326ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20000100) #0 [714327ms] <- socketpair$unix=0x0 errno=14 cover=2932 #0 [714328ms] -> sendfile(0x4, 0x3, 0x0, 0xb052) #0 [714331ms] <- sendfile=0xb052 errno=14 cover=9452 #0 [714333ms] -> dup2(0x5, 0x4) #0 [714333ms] <- dup2=0x4 errno=14 cover=627 #0 [714333ms] -> write$binfmt_elf64(0x4, 0x20000140, 0x255) #0 [714333ms] <- write$binfmt_elf64=0xffffffffffffffff errno=111 cover=5260 2033/05/18 03:34:59 result hanged=false: 03:34:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0xb052) r3 = dup2(r2, r1) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x255) [714355ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167149 #0 [714365ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [714368ms] <- openat=0x3 errno=14 cover=6671 #0 [714369ms] -> ftruncate(0x3, 0x1000004) #0 [714369ms] <- ftruncate=0x0 errno=14 cover=1734 #0 [714369ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20000100) #0 [714370ms] <- socketpair$unix=0x0 errno=14 cover=2930 #0 [714370ms] -> sendfile(0x4, 0x3, 0x0, 0xb052) #0 [714372ms] <- sendfile=0xb052 errno=14 cover=9686 #0 [714373ms] -> dup2(0x5, 0x4) #0 [714373ms] <- dup2=0x4 errno=14 cover=626 #0 [714373ms] -> write$binfmt_elf64(0x4, 0x20000140, 0x255) #0 [714374ms] <- write$binfmt_elf64=0xffffffffffffffff errno=111 cover=5339 2033/05/18 03:34:59 result hanged=false: 2033/05/18 03:34:59 added new input for call #5 write$binfmt_elf64 to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0xb052) r3 = dup2(r2, r1) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x255) 03:34:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0xb052) r3 = dup2(r2, r1) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x255) 2033/05/18 03:34:59 #0: triaging type=7 2033/05/18 03:34:59 triaging input for call #3 sendfile (new signal=2) [714397ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167151 #0 [714405ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [714408ms] <- openat=0x3 errno=14 cover=6681 #0 [714409ms] -> ftruncate(0x3, 0x1000004) #0 [714409ms] <- ftruncate=0x0 errno=14 cover=1766 #0 [714409ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20000100) #0 [714410ms] <- socketpair$unix=0x0 errno=14 cover=2849 #0 [714410ms] -> sendfile(0x4, 0x3, 0x0, 0xb052) #0 [714411ms] <- sendfile=0xb052 errno=14 cover=9932 #0 [714412ms] -> dup2(0x5, 0x4) #0 [714412ms] <- dup2=0x4 errno=14 cover=626 #0 [714413ms] -> write$binfmt_elf64(0x4, 0x20000140, 0x255) #0 [714413ms] <- write$binfmt_elf64=0xffffffffffffffff errno=111 cover=5259 03:34:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0xb052) r3 = dup2(r2, r1) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x255) 2033/05/18 03:34:59 result hanged=false: [714433ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167153 #0 [714443ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [714445ms] <- openat=0x3 errno=14 cover=6806 #0 [714446ms] -> ftruncate(0x3, 0x1000004) #0 [714446ms] <- ftruncate=0x0 errno=14 cover=1729 #0 [714447ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20000100) #0 [714448ms] <- socketpair$unix=0x0 errno=14 cover=2896 #0 [714449ms] -> sendfile(0x4, 0x3, 0x0, 0xb052) #0 [714451ms] <- sendfile=0xb052 errno=14 cover=9822 #0 [714452ms] -> dup2(0x5, 0x4) #0 [714452ms] <- dup2=0x4 errno=14 cover=626 #0 [714454ms] -> write$binfmt_elf64(0x4, 0x20000140, 0x255) #0 [714455ms] <- write$binfmt_elf64=0xffffffffffffffff errno=111 cover=5456 03:34:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0xb052) r3 = dup2(r2, r1) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x255) 2033/05/18 03:34:59 result hanged=false: [714475ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167155 #0 [714485ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [714486ms] <- openat=0x3 errno=14 cover=6713 #0 [714487ms] -> ftruncate(0x3, 0x1000004) #0 [714487ms] <- ftruncate=0x0 errno=14 cover=1748 #0 [714488ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20000100) #0 [714488ms] <- socketpair$unix=0x0 errno=14 cover=2828 #0 [714488ms] -> sendfile(0x4, 0x3, 0x0, 0xb052) #0 [714490ms] <- sendfile=0xb052 errno=14 cover=9481 #0 [714491ms] -> dup2(0x5, 0x4) #0 [714491ms] <- dup2=0x4 errno=14 cover=626 #0 [714491ms] -> write$binfmt_elf64(0x4, 0x20000140, 0x255) #0 [714492ms] <- write$binfmt_elf64=0xffffffffffffffff errno=111 cover=5341 2033/05/18 03:34:59 result hanged=false: 2033/05/18 03:34:59 added new input for call #3 sendfile to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0xb052) r3 = dup2(r2, r1) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x255) 03:34:59 executing program 0: syz_io_uring_setup(0x2a33, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_setup(0x43aa, &(0x7f00000002c0)) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0) [714522ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167157 #0 [714531ms] -> syz_io_uring_setup(0x2a33, 0x20000000, 0x20ffd000, 0x20ff1000, 0x20000080, 0x0) SIGSEGV on (nil), skipping #0 [714537ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=16355 #0 [714539ms] -> syz_io_uring_setup(0x0, 0x0, 0x20ff8000, 0x20ff2000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [714540ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=1183 #0 [714540ms] -> pkey_mprotect(0x20ffc000, 0x3000, 0x6, 0xffffffffffffffff) #0 [714541ms] <- pkey_mprotect=0x0 errno=14 cover=906 #0 [714541ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [714542ms] <- syz_init_net_socket$802154_dgram=0xffffffffffffffff errno=2 cover=1187 #0 [714543ms] -> io_uring_setup(0x43aa, 0x200002c0) #0 [714545ms] <- io_uring_setup=0x4 errno=14 cover=4917 #0 [714545ms] -> sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0) #0 [714545ms] <- sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR=0xffffffffffffffff errno=9 cover=52 enabling collider #0 [714545ms] -> syz_io_uring_setup(0x2a33, 0x20000000, 0x20ffd000, 0x20ff1000, 0x20000080, 0x0) SIGSEGV on (nil), skipping #0 [714548ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=19910 #0 [714549ms] -> syz_io_uring_setup(0x0, 0x0, 0x20ff8000, 0x20ff2000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [714549ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=1183 pthread_create failed (errno 11) 2033/05/18 03:35:00 result hanged=false: 2033/05/18 03:35:00 #0: triaging type=7 2033/05/18 03:35:00 triaging input for call #0 syz_io_uring_setup (new signal=2) 03:35:00 executing program 0: syz_io_uring_setup(0x2a33, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_setup(0x43aa, &(0x7f00000002c0)) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0) [714608ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167259 #0 [714619ms] -> syz_io_uring_setup(0x2a33, 0x20000000, 0x20ffd000, 0x20ff1000, 0x20000080, 0x0) SIGSEGV on (nil), skipping #0 [714622ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=16353 #0 [714624ms] -> syz_io_uring_setup(0x0, 0x0, 0x20ff8000, 0x20ff2000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [714624ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=1171 #0 [714625ms] -> pkey_mprotect(0x20ffc000, 0x3000, 0x6, 0xffffffffffffffff) #0 [714625ms] <- pkey_mprotect=0x0 errno=14 cover=906 #0 [714628ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [714628ms] <- syz_init_net_socket$802154_dgram=0xffffffffffffffff errno=2 cover=1201 #0 [714629ms] -> io_uring_setup(0x43aa, 0x200002c0) #0 [714631ms] <- io_uring_setup=0x4 errno=14 cover=4850 #0 [714632ms] -> sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0) #0 [714632ms] <- sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR=0xffffffffffffffff errno=9 cover=52 03:35:00 executing program 0: syz_io_uring_setup(0x2a33, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_setup(0x43aa, &(0x7f00000002c0)) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0) 2033/05/18 03:35:00 result hanged=false: [714652ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167261 #0 [714661ms] -> syz_io_uring_setup(0x2a33, 0x20000000, 0x20ffd000, 0x20ff1000, 0x20000080, 0x0) SIGSEGV on (nil), skipping #0 [714665ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=16433 #0 [714667ms] -> syz_io_uring_setup(0x0, 0x0, 0x20ff8000, 0x20ff2000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [714667ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=1171 #0 [714667ms] -> pkey_mprotect(0x20ffc000, 0x3000, 0x6, 0xffffffffffffffff) #0 [714667ms] <- pkey_mprotect=0x0 errno=14 cover=906 #0 [714668ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [714668ms] <- syz_init_net_socket$802154_dgram=0xffffffffffffffff errno=2 cover=1169 #0 [714668ms] -> io_uring_setup(0x43aa, 0x200002c0) #0 [714670ms] <- io_uring_setup=0x4 errno=14 cover=5156 #0 [714671ms] -> sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0) #0 [714671ms] <- sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR=0xffffffffffffffff errno=9 cover=52 03:35:00 executing program 0: syz_io_uring_setup(0x2a33, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_setup(0x43aa, &(0x7f00000002c0)) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0) 2033/05/18 03:35:00 result hanged=false: [714693ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167263 #0 [714702ms] -> syz_io_uring_setup(0x2a33, 0x20000000, 0x20ffd000, 0x20ff1000, 0x20000080, 0x0) SIGSEGV on (nil), skipping #0 [714708ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=16278 #0 [714711ms] -> syz_io_uring_setup(0x0, 0x0, 0x20ff8000, 0x20ff2000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [714711ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=1171 #0 [714713ms] -> pkey_mprotect(0x20ffc000, 0x3000, 0x6, 0xffffffffffffffff) #0 [714713ms] <- pkey_mprotect=0x0 errno=14 cover=906 #0 [714714ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [714714ms] <- syz_init_net_socket$802154_dgram=0xffffffffffffffff errno=2 cover=1172 #0 [714716ms] -> io_uring_setup(0x43aa, 0x200002c0) #0 [714718ms] <- io_uring_setup=0x4 errno=14 cover=4823 #0 [714719ms] -> sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0) #0 [714719ms] <- sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR=0xffffffffffffffff errno=9 cover=52 2033/05/18 03:35:00 result hanged=false: 2033/05/18 03:35:00 added new input for call #0 syz_io_uring_setup to corpus: syz_io_uring_setup(0x2a33, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_setup(0x43aa, &(0x7f00000002c0)) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0) 03:35:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [714756ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167265 #0 [714765ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [714765ms] <- socket$inet_udp=0x3 errno=14 cover=1662 #0 [714766ms] -> bind$inet(0x3, 0x20000040, 0x10) #0 [714766ms] <- bind$inet=0x0 errno=14 cover=339 #0 [714767ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [714767ms] <- socket$inet_udp=0x4 errno=14 cover=1687 #0 [714768ms] -> connect$inet(0x4, 0x20000040, 0x10) #0 [714768ms] <- connect$inet=0x0 errno=14 cover=950 #0 [714769ms] -> sendmmsg$inet(0x4, 0x20000300, 0x1, 0x0) #0 [714769ms] <- sendmmsg$inet=0x1 errno=14 cover=2057 #0 [714770ms] -> ioctl$SIOCGSTAMP(0x3, 0x8906, 0x0) #0 [714770ms] <- ioctl$SIOCGSTAMP=0xffffffffffffffff errno=2 cover=241 #0 [714771ms] -> recvfrom(0x3, 0x0, 0x0, 0x0, 0x0, 0x0) #0 [714771ms] <- recvfrom=0x0 errno=14 cover=286 enabling collider #0 [714772ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [714772ms] <- socket$inet_udp=0x3 errno=14 cover=1661 #0 [714773ms] -> bind$inet(0x3, 0x20000040, 0x10) #0 [714773ms] <- bind$inet=0x0 errno=14 cover=339 pthread_create failed (errno 11) 2033/05/18 03:35:00 result hanged=false: 2033/05/18 03:35:00 #0: triaging type=7 03:35:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:00 triaging input for call #6 recvfrom (new signal=2) iptable filter/2: resetting iptable mangle/2: resetting [714828ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167367 #0 [714836ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [714839ms] <- socket$inet_udp=0x3 errno=14 cover=1662 #0 [714841ms] -> bind$inet(0x3, 0x20000040, 0x10) #0 [714844ms] <- bind$inet=0x0 errno=14 cover=339 #0 [714844ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [714844ms] <- socket$inet_udp=0x4 errno=14 cover=1684 #0 [714845ms] -> connect$inet(0x4, 0x20000040, 0x10) #0 [714846ms] <- connect$inet=0x0 errno=14 cover=964 #0 [714846ms] -> sendmmsg$inet(0x4, 0x20000300, 0x1, 0x0) #0 [714848ms] <- sendmmsg$inet=0x1 errno=14 cover=8812 #0 [714849ms] -> ioctl$SIOCGSTAMP(0x3, 0x8906, 0x0) #0 [714849ms] <- ioctl$SIOCGSTAMP=0xffffffffffffffff errno=2 cover=240 #0 [714849ms] -> recvfrom(0x3, 0x0, 0x0, 0x0, 0x0, 0x0) #0 [714850ms] <- recvfrom=0x0 errno=14 cover=286 2033/05/18 03:35:00 result hanged=false: 03:35:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) iptable filter/2: resetting iptable mangle/2: resetting [714870ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167369 #0 [714878ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [714880ms] <- socket$inet_udp=0x3 errno=14 cover=1695 #0 [714881ms] -> bind$inet(0x3, 0x20000040, 0x10) #0 [714881ms] <- bind$inet=0x0 errno=14 cover=339 #0 [714882ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [714882ms] <- socket$inet_udp=0x4 errno=14 cover=1701 #0 [714883ms] -> connect$inet(0x4, 0x20000040, 0x10) #0 [714883ms] <- connect$inet=0x0 errno=14 cover=950 #0 [714884ms] -> sendmmsg$inet(0x4, 0x20000300, 0x1, 0x0) #0 [714885ms] <- sendmmsg$inet=0x1 errno=14 cover=1788 #0 [714886ms] -> ioctl$SIOCGSTAMP(0x3, 0x8906, 0x0) #0 [714886ms] <- ioctl$SIOCGSTAMP=0xffffffffffffffff errno=2 cover=241 #0 [714886ms] -> recvfrom(0x3, 0x0, 0x0, 0x0, 0x0, 0x0) #0 [714887ms] <- recvfrom=0x0 errno=14 cover=286 03:35:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:00 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [714907ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167371 #0 [714917ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [714918ms] <- socket$inet_udp=0x3 errno=14 cover=1750 #0 [714918ms] -> bind$inet(0x3, 0x20000040, 0x10) #0 [714918ms] <- bind$inet=0x0 errno=14 cover=339 #0 [714919ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [714919ms] <- socket$inet_udp=0x4 errno=14 cover=1687 #0 [714919ms] -> connect$inet(0x4, 0x20000040, 0x10) #0 [714919ms] <- connect$inet=0x0 errno=14 cover=950 #0 [714919ms] -> sendmmsg$inet(0x4, 0x20000300, 0x1, 0x0) #0 [714920ms] <- sendmmsg$inet=0x1 errno=14 cover=1819 #0 [714920ms] -> ioctl$SIOCGSTAMP(0x3, 0x8906, 0x0) #0 [714920ms] <- ioctl$SIOCGSTAMP=0xffffffffffffffff errno=2 cover=241 #0 [714920ms] -> recvfrom(0x3, 0x0, 0x0, 0x0, 0x0, 0x0) #0 [714921ms] <- recvfrom=0x0 errno=14 cover=286 2033/05/18 03:35:00 result hanged=false: 2033/05/18 03:35:00 added new input for call #6 recvfrom to corpus: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:35:00 executing program 0: r0 = epoll_create(0x5) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) iptable filter/2: resetting iptable mangle/2: resetting [714943ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167373 #0 [714952ms] -> epoll_create(0x5) #0 [714953ms] <- epoll_create=0x3 errno=14 cover=485 #0 [714955ms] -> openat$procfs(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [714959ms] <- openat$procfs=0xffffffffffffffff errno=2 cover=1169 #0 [714959ms] -> epoll_ctl$EPOLL_CTL_ADD(0x3, 0x1, 0xffffffffffffffff, 0x20000040) #0 [714959ms] <- epoll_ctl$EPOLL_CTL_ADD=0xffffffffffffffff errno=9 cover=86 enabling collider #0 [714960ms] -> epoll_create(0x5) #0 [714960ms] <- epoll_create=0x3 errno=14 cover=517 #0 [714961ms] -> openat$procfs(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [714961ms] <- openat$procfs=0xffffffffffffffff errno=2 cover=1182 pthread_create failed (errno 11) 03:35:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'sit0\x00', &(0x7f00000001c0)=@ethtool_perm_addr}) 2033/05/18 03:35:00 result hanged=false: 2033/05/18 03:35:00 poll: candidates=8 inputs=0 signal=0 [715011ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167475 #0 [715020ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [715023ms] <- socket$inet6_udplite=0x3 errno=14 cover=4768 #0 [715023ms] -> ioctl$sock_SIOCETHTOOL(0x3, 0x8946, 0x20000200) #0 [715023ms] <- ioctl$sock_SIOCETHTOOL=0xffffffffffffffff errno=525 cover=222 enabling collider #0 [715024ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [715024ms] <- socket$inet6_udplite=0x3 errno=14 cover=1634 03:35:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000840), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000880)={0x38, r2, 0xc1a5c1f044c0bcef, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}]}]}, 0x38}}, 0x0) 2033/05/18 03:35:00 result hanged=false: [715042ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167477 #0 [715052ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [715052ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1181 #0 [715053ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [715054ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1291 #0 [715054ms] -> syz_genetlink_get_family_id$netlbl_cipso(0x20000840, 0xffffffffffffffff) syz_genetlink_get_family_id(NLBL_CIPSOv4, -1) netlink: failed to get family id for NLBL_CIPSOv4: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [715056ms] <- syz_genetlink_get_family_id$netlbl_cipso=0xffffffffffffffff errno=2 cover=8668 #0 [715057ms] -> sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x20000b40, 0x0) #0 [715057ms] <- sendmsg$NLBL_CIPSOV4_C_ADD=0xffffffffffffffff errno=9 cover=52 enabling collider #0 [715057ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [715058ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1207 #0 [715058ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [715059ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1192 pthread_create failed (errno 11) 03:35:00 executing program 0: io_uring_setup(0x560b, &(0x7f00000006c0)) 2033/05/18 03:35:00 result hanged=false: [715116ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167579 #0 [715126ms] -> io_uring_setup(0x560b, 0x200006c0) #0 [715128ms] <- io_uring_setup=0x3 errno=14 cover=5879 enabling collider #0 [715129ms] -> io_uring_setup(0x560b, 0x200006c0) #0 [715131ms] <- io_uring_setup=0x3 errno=14 cover=4745 03:35:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@mpol={'mpol', 0x3d, {'prefer'}}}]}) 2033/05/18 03:35:00 result hanged=false: [715154ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167581 #0 [715165ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [715167ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12513 #0 [715168ms] -> syz_mount_image$tmpfs(0x20000040, 0x20000140, 0x0, 0x0, 0x0, 0x0, 0x200008c0) syz_mount_image: size=0 segs=0 loop='' dir='./file0/file0' fs='tmpfs' flags=0 opts='mpol=prefer:,' [ 1465.147221] tmpfs: Bad value for 'mpol' syz_mount_image > mount error: 22 #0 [715172ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=22 cover=4001 enabling collider #0 [715172ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [715172ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1350 03:35:00 executing program 0: syz_emit_ethernet(0x52, &(0x7f0000000080)={@random="07af43ba2470", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x1c, 0x3a, 0x1, @local, @local, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @mcast1}}}}}}, 0x0) 2033/05/18 03:35:00 result hanged=false: [715194ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167583 #0 [715204ms] -> syz_emit_ethernet(0x52, 0x20000080, 0x0) 07 af 43 ba 24 70 aa aa aa aa aa bb 86 dd 60 96 15 3f 00 1c 3a 01 fe 80 00 00 00 00 00 00 00 00 00 00 00 00 00 aa fe 80 00 00 00 00 00 00 00 00 00 00 00 00 00 aa 82 00 80 50 00 00 00 00 ff 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 #0 [715210ms] <- syz_emit_ethernet=0x52 errno=14 cover=25261 enabling collider #0 [715211ms] -> syz_emit_ethernet(0x52, 0x20000080, 0x0) 07 af 43 ba 24 70 aa aa aa aa aa bb 86 dd 60 96 15 3f 00 1c 3a 01 fe 80 00 00 00 00 00 00 00 00 00 00 00 00 00 aa fe 80 00 00 00 00 00 00 00 00 00 00 00 00 00 aa 82 00 80 50 00 00 00 00 ff 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 #0 [715213ms] <- syz_emit_ethernet=0x52 errno=14 cover=25053 03:35:00 executing program 0: syz_80211_inject_frame(&(0x7f0000001f00)=@device_b, 0x0, 0x0) 2033/05/18 03:35:00 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [715236ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167585 #0 [715244ms] -> syz_80211_inject_frame(0x20001f00, 0x0, 0x0) [ 1465.224496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium #0 [715250ms] <- syz_80211_inject_frame=0x0 errno=0 cover=13783 enabling collider #0 [715552ms] -> syz_80211_inject_frame(0x20001f00, 0x0, 0x0) [ 1465.530338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium #0 [715556ms] <- syz_80211_inject_frame=0x0 errno=0 cover=13382 03:35:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}}, 0x0) 2033/05/18 03:35:01 result hanged=false: [715575ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167587 #0 [715585ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [715587ms] <- socket$nl_generic=0x3 errno=14 cover=1412 #0 [715589ms] -> dup2(0x3, 0x3) #0 [715591ms] <- dup2=0x3 errno=14 cover=43 #0 [715591ms] -> syz_genetlink_get_family_id$nl80211(0x20000200, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [715592ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12268 #0 [715593ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x20000100) #0 [715594ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [715595ms] -> sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0x3, 0x20000240, 0x0) #0 [715597ms] <- sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL=0x2c errno=14 cover=12418 enabling collider #0 [715599ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [715601ms] <- socket$nl_generic=0x3 errno=14 cover=1444 #0 [715601ms] -> dup2(0x3, 0x3) #0 [715602ms] <- dup2=0x3 errno=14 cover=43 pthread_create failed (errno 11) 2033/05/18 03:35:01 result hanged=false: 03:35:01 executing program 0: fspick(0xffffffffffffffff, 0x0, 0x847ff85125203447) [715653ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167689 #0 [715664ms] -> fspick(0xffffffffffffffff, 0x0, 0x847ff85125203447) #0 [715666ms] <- fspick=0xffffffffffffffff errno=22 cover=77 enabling collider #0 [715668ms] -> fspick(0xffffffffffffffff, 0x0, 0x847ff85125203447) #0 [715668ms] <- fspick=0xffffffffffffffff errno=22 cover=77 03:35:01 executing program 0: syz_emit_ethernet(0xfc0, &(0x7f00000059c0)={@multicast, @dev, @val={@void, {0x8100, 0x0, 0x1}}, {@llc_tr={0x11, {@llc={0x0, 0x0, '\'', "3c7656733d8900900dc685cb4ae186507b70bbbdddc3cf47ad44fddd172e8b4d916beb682fb01cda1f35c07dabbf23dea1ec1f0a8fc61e4f2ac5576b67b4786410fc2cb1bef18e944db918ed06d7014914a363282f597aa3d1259545ee84eafaa655946605886b4f0c02616d2194766d8f1f6f768260540c836e7b11ccc3ce41dd3172069a5ce18eb91c394ca3999877d7ac461169129bcd9d59b179d94d705907029fae82c50408b372feab23673d59e7aab0af8c3c5d11d41e8b752444b025b952778719711084134744388b1eda521c1476b8c5644fc232b51a7ba232557728f2678073d4311cb7b7b43c84d4bcb5180869980c4388177c1746837a62965045481f7a445dfe213698179b938d287e8b06cda39972cbd93dbd058cef72b6896fb511a3eeaab116525a5b19c3686cd017cccc9e1251dde0032a55c8dd0d96b8b504928b75655f44ddbff68a383b2abe5d0701d23ff170994d864c142696de8da8fe3e8e2f2c4bb6f0a173e0fd4f547ffc06a6f69f545c6deab108dbdf50bf8ca1d07cca53ff94d2ba96922f7b911ce176c5322c5052aba7cd6f0ffb997a05de5d6938a3cb9d56824929ebda8a031e2c5aa2343cb310e2a09eafbe48e76d371746368626f1ffd6fe563eef4d5262779698356e85e41a049946d2be74eccdec07020ab7ba678cbf4522c5cfa858eff267bbaabde254d1484f8f1e596e4c1b90ee743c45a99b0cb94b7a324f7f816eb88c252a51c931cadc1342d68b940e3eb1e7c99ea2d32f2af6a97f60ea94807287f31c81bdbe6d85fbabc44a831922ff59cde2d9a5a76211e5ed52e18e56aa2488b8b3a02aab21f2bab6c52cfd99b2c44e6635b37b3e5b40817d60d35297f6ace65afe63bc1b51ff74f8fbee7f8a0e889ce5eae76ed6a7bb2f7ba3aa2eb39a032e6178c1db0c91714ebe971202fae3f4f62cdda277f11edee7f961e65c15d39ac41a81c09267fc464028a7df6fd95f75fdc582ef0939c41f5feea3001de0dc5edbc736b6ac0886450b5a6dd250bb1021a354c70b3b08e1c5a9beb5801f610e8544c4b4491c20cd025a5d9fd33ea9f5c949fa6a5b5840a759dafbc28dca7cd58974779824ebd1e6f81e8e6a06a773c4329471de9cb16b3b414eef5b860f17b3e890cefb405668387eec285e99dc8dc7d6eaafe5840131929fa2b262798708eddeb572d64c72b2ebea296205996509b94175ce00d21b6f081f14f04fddc89127da43da6d025714b1271abf3b665f4109ac35550f0f06aac60316c753570842f37a58b4b2b7858028859c33a5f9720cc131bbe4650b4d5171f1b62c7e8e9c3b360db35434df75b7e28e783580aefa83acb1286c18c04ec29448fd31ca1bbf6c28b3f4f9cc28e6a88e208c499facdbfc309cea7d98b380ff071b18c5f10001cc4c2c021919fa378b5b8c6d772ec57cb8dc1464a12dedece7be2484a3878aadc9ac14f6a49d9e970c5089f978ab81d5b2ea0da1bbae1e4bddd0bcf775cc5953fad53bc92ca64c21958640db95c219fbfbe49fef93d9b3fabdf4f7c30eed2e41347db93da55aa3665602daee31d0bce8d3237ecd29ae1bf50dbea436a4955419e77771cd9af8519c4c39e43356c7da72d6cfd9c10c780fd6863fa7d0992025fae0b390a052d7cdcd7430c1aeda11d6702a414c473b8d585ee8920d72ee15344f1d304ae96e8590b66e432ba77c597b274fff8474e808af1ed1f7640cd808d245f12f920c26cfd4dc9fc10940f81f49a6cef5c599dfe13aff8e64bd9b30f4ce6076005ffd633e74bf127156dab0d8f3fae4c04358dfbc91eb556a4285cf5d8bdb4f52a02ee662bf54e92efe4d2c83f6630c3ea9da7893a6d75c2bb0779d78c861b210c5d5d8725b27d223dc1764471d14631b79909038e155035b2ffe9015e17b0a812964a4dcf5d4c8c04e5563e12cd737fec6b3a701b3e40dafdcd6b1bf9a39be5d98f5664e9aeddb05dd32a0aa3dc8dd190be2ab36aabdd78e88d38eddd6f125be5fa7bd4ccf770e042ccf2f33fcb2c1b69e3f86d6d8fe6013d273105499de5e09f7be1e87ff0a4ad2bb7078887a3d085ea518ea40a000be8e581bf659210c4e29435fe1eb5fc3cff81223473f68144e9d65e81b35d67fa2a3d7d0934f288b99484e794b9667bb271300f0412967da21a8bb43636e8bc530032883583e752f30f273978cbf3148cee4e377067d580e87017a0c47a6b081e9312b2f174843628cc032a3a6a17a4f667cb8fa174954c5924efb426e8bf25b2fed3ba2086448e9618f1d92aa8b6f6db090c9a72d569199571ee5ca9191c9dd92ec44f2dced8ff5834bf46a504698bf3496a9548132954c23ccfe53a4859978bd98fc52fff9fd379e19e23889f8583f4317691d96a7d9d2d6c5aef38171478d6b06c83bbc5d74312f7bf3439a2a3d2e003a020344cd3d6c01dcd7206d3a7d0cc9ee096005cca161b57a2b3f113cdced3aa3c1afe2d0cbf8dc27eb4fd8f1c1e50376c9ac446d3948c8de3eb8bfe8034aaf6351b1e26abf52cde6908907a4f54f4e3586ef057579840a6b9129c8f425fa085caaa4ddd466c42eb5675c9f3cdd024032f0bc80d8c2493d1a0da1dc1c825043f272234f60ee115852591184e0a008b32318e8efe5a9cac5f14c5e81e24b05cc86c8eb7afc5e2da9a5e8fd4f3b76c5d8f3169805b831e1ecf84dcb2c51e6b30b90397175d2519b342d256cfdf71ef4ebe50e46cc4a93475de9a1d6c5ffac6b9b99af619a1c0e615317a973706b4d5c9b7316fa327723e453ff2953cf76450f4dba5b2b1de835ac2ff62f9b444d0e4bdedd11b3c3df06fbca99d23d6e08275912a721a90a42957f7bc05dd776bbf9b47bc277508cb9c2f1b73ccfa99ca768cfea2f46f8df4020fbfe661ec48e97e7635e81d762067b481d5cc4a5af1106ae3f210aa6fe7780b382e2b0847c6a69f4e3886177a1fdffe1b5ed72144847ffffadfb525637fbe8ed10e7a30229d6b29b24f31ac3067277ec885aa6cba5a8eb9cc81bb3145a1256bfca728035b0cd0da77b08f409202aef2b8e1f1d3c75bc818344a9bb6b1c155dc6b9e267059471ddd3cfe436c051b9b935de5b66d0cc0e77468471a3e0258f200f2596582c0f62b85adb59d63bb7c5e20570f170aa53fee0d8feec641a4350c4107b0238c9bbe49953d7fc92ac3719acdeb8f8246080e1dd0c43e2873293e6582c2ac7c9ed76c20880e4f10ffa20a3087a33985ef9e6d0cffb3ccbe5e00df7668b98b6662f501ae334d4d5b26a025554725076f2aab8efccc6e89e61851b2f43e84afa33e413e98e13782e2b6aabcb19e268fc0ef096b847562f8749105a71c9f7bdddd9c2ec3a08e40224c4fe9aa43530b5ef255bc112dafc4a8744cca57032caba6eea2fd2499e3aeafea1a31ad08bdaca3604aafda4f207b0d7b399e7f491b359448779dcb19a84c3779977ebf5d8a704d3f008e1b1f42d16c257590fb2a8ca8d30b57854acaf80f9a88a8ccf0a39ebd417e3b7adf2adbd276121c2b6b3240faf15da6dfa8f75a5b1f202fc20fc82a5fd735003f60cca4c5e68360321096b4812e61d915e77ffd2f728f0cdffdd799f8913699fb3766f741b7ea070943db169cd4b42d16a511e2b97b0e2df13841a4ade97e0b9ffc75ff3828e30de87eb8b00a246a68def05fd17a4c5af1448fb353fb2e4cd71531b10e7261f50d475ee61985d2959e66752b2fbd2f1fe999d1334baaefaad825e93a3d7ce326abcdedbc5302e1b0eeaea59f93d5bcb5fa6d220b94f277e149940d9f8de5cf4a4a01a9b830dbd7abb81156799d68f114f5496e6d546a1cc58d0c0dbb1477f16cdd173d3e2e98fa8d519de944c182030855dcb879f302533fc5a214049779badbce59e25ca035e554c9384ba9929c61c6b42eca5deb32fcc51502a7b13ba4e6c5d1e127dc33b886479e575d3df9a31942987bdda3f49a479b6ea9fd6be84449b08165d20ec9f36e13f79026bd04bcef2ba58357643225b3df596d04a2a1c18fbca2530d795964d16619b9d981a37ef143b68f834ca43f8c6a6266fcc1240f92cf842faa0275f067bd243345c9cf5d8351a70777d699431bb233fb6374eeec7b8d10b91039ecd711529fe9c42c877ad819c6d12334d15a721c6c6d9b720e1dcbc517ad61608044a5a632783cfed700c875f506c337dec0acc6b51395cbec85dd921a9c660dd93247a8e450ac8bfb46b43156876a80397d8b403972bb99196a065fc2acefd51599f0f63cea4bf7b34763d50d7b52a00943a63ff4a3776c1490079b552377d5938f7b7452e01c5ffd631e8e44813ea25c80e786c5b966901f65c88ee383a65a5cc7959f20b964e56b82cce27d720960bc1b61999ec6baf29f7adf0b4710b5a86f23735abef2545f0db0f1af8eb22b27c92099d1a58a768e5799f25185c71637cdd2a1657049e6f9e0a69eaf9f71f7440b0736f1b85b9a3d0b77379a5aeae29e736e0738d8d91d462e59ea997e590ac4e7c6451ce29c5fc354a06de6024599d33f05b4daeb5ccd7cec5a78bd199760b55bbe817ccb74293b614905c5cd43fcdccdb1563b2d3a4eb5890b95b73bfbdfa1a8c8dd1fcecd8ada08ee6d600f3433bd832b3e69feef025f6ec62ff0bcf4b874d78d8b3a9a4a89c9ed8291bdd6b723837be0ff5e415b1d04c515b50cd4c380dc4fa0450870609b30d7fedffb9571bf6d3b470e3914befe2812126e1e5bac0d995ca0076b4134ce0c6f165e9b3c6fdea9a6a1603ac1da705d8ef141832a016ea0db6bf8985d66b38ff3f486c390a69e5ee04f683828f2c8702160ec8add537b1ac2156e000f7da5cf3e3a6710057170c147692b2e91df08aee9ea92ed1db25f14b4274d5095ed8bbf17be169cfc8bc26429c93c6ec6bc2df34245f4146585823e12cb602741e82df17c8f19fcecc3a9d6b5c36ba5b0013de888f49abcdd451a862fd9738a3680af2da1f488b6704c25cc78ca1b7cf992ea1254e1082431326915080537aad79a51006d2a8b37ae1e6538b98d33bda2d73960dab60886c4a9ff024418a7a471e727098a92a7dfa93ac16a0e875939591cfc96779c202672f001f8dac69747abd0480792287230cb3b8123234da634458d3c7143d2fb6c069f0fd7fd4cd164de494694ed968c96b691e7023056d04b7879c6b0f31282db44df58eadfc7d63de19f92d7d5e9efc01e73add7e267b48ec974531141fb1ce4921ed23cdca8f2c9f54cd1a829c8e5e9fdd35ace4837820c52fa3c8960095d954f17b39b94c39ad1e93d3a759d449779eb8bbd5000b430e07128d21e980b2eb97ee407a4edfcc524015a4e496fc09ef597cfe39de427024c6343d6dd779c9e070f7b111d82cdd6fe0949663ec2c2c70a79cb05a81acce022f795074d6ae5e7a4df0ed3b0e74afa0f31dc02aaa9e07bc5cab176bcb3aa53c4eeb0aca0052059d3cb78ec7a32db9717f6e3e70584e4fc3f6ab6bd852419209626be2fb6ddb2293f3573b068b0be78407edf5729f3d580d2233a128bb8ecab22bffb4e1baaa2a3615a477e26b2855f40bc13aa9eafd30e184d043c9431de00eaecefb7a4fa44084b7c2c0cfa87e9c2f5c38780c237a096594460c878ee3ce3c49475aa50996b4c1feb6c84363a30cfef63168a308df6dcfe4bed7693eb0d0bc3d4a1ad6bd679cf74cd66967f657ec"}}}}}, 0x0) 2033/05/18 03:35:01 result hanged=false: 2033/05/18 03:35:01 poll: candidates=8 inputs=0 signal=0 [715689ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167691 #0 [715699ms] -> syz_emit_ethernet(0xfc0, 0x200059c0, 0x0) bb bb bb bb bb bb aa aa aa aa aa 00 81 00 08 00 00 11 00 00 27 3c 76 56 73 3d 89 00 90 0d c6 85 cb 4a e1 86 50 7b 70 bb bd dd c3 cf 47 ad 44 fd dd 17 2e 8b 4d 91 6b eb 68 2f b0 1c da 1f 35 c0 7d ab bf 23 de a1 ec 1f 0a 8f c6 1e 4f 2a c5 57 6b 67 b4 78 64 10 fc 2c b1 be f1 8e 94 4d b9 18 ed 06 d7 01 49 14 a3 63 28 2f 59 7a a3 d1 25 95 45 ee 84 ea fa a6 55 94 66 05 88 6b 4f 0c 02 61 6d 21 94 76 6d 8f 1f 6f 76 82 60 54 0c 83 6e 7b 11 cc c3 ce 41 dd 31 72 06 9a 5c e1 8e b9 1c 39 4c a3 99 98 77 d7 ac 46 11 69 12 9b cd 9d 59 b1 79 d9 4d 70 59 07 02 9f ae 82 c5 04 08 b3 72 fe ab 23 67 3d 59 e7 aa b0 af 8c 3c 5d 11 d4 1e 8b 75 24 44 b0 25 b9 52 77 87 19 71 10 84 13 47 44 38 8b 1e da 52 1c 14 76 b8 c5 64 4f c2 32 b5 1a 7b a2 32 55 77 28 f2 67 80 73 d4 31 1c b7 b7 b4 3c 84 d4 bc b5 18 08 69 98 0c 43 88 17 7c 17 46 83 7a 62 96 50 45 48 1f 7a 44 5d fe 21 36 98 17 9b 93 8d 28 7e 8b 06 cd a3 99 72 cb d9 3d bd 05 8c ef 72 b6 89 6f b5 11 a3 ee aa b1 16 52 5a 5b 19 c3 68 6c d0 17 cc cc 9e 12 51 dd e0 03 2a 55 c8 dd 0d 96 b8 b5 04 92 8b 75 65 5f 44 dd bf f6 8a 38 3b 2a be 5d 07 01 d2 3f f1 70 99 4d 86 4c 14 26 96 de 8d a8 fe 3e 8e 2f 2c 4b b6 f0 a1 73 e0 fd 4f 54 7f fc 06 a6 f6 9f 54 5c 6d ea b1 08 db df 50 bf 8c a1 d0 7c ca 53 ff 94 d2 ba 96 92 2f 7b 91 1c e1 76 c5 32 2c 50 52 ab a7 cd 6f 0f fb 99 7a 05 de 5d 69 38 a3 cb 9d 56 82 49 29 eb da 8a 03 1e 2c 5a a2 34 3c b3 10 e2 a0 9e af be 48 e7 6d 37 17 46 36 86 26 f1 ff d6 fe 56 3e ef 4d 52 62 77 96 98 35 6e 85 e4 1a 04 99 46 d2 be 74 ec cd ec 07 02 0a b7 ba 67 8c bf 45 22 c5 cf a8 58 ef f2 67 bb aa bd e2 54 d1 48 4f 8f 1e 59 6e 4c 1b 90 ee 74 3c 45 a9 9b 0c b9 4b 7a 32 4f 7f 81 6e b8 8c 25 2a 51 c9 31 ca dc 13 42 d6 8b 94 0e 3e b1 e7 c9 9e a2 d3 2f 2a f6 a9 7f 60 ea 94 80 72 87 f3 1c 81 bd be 6d 85 fb ab c4 4a 83 19 22 ff 59 cd e2 d9 a5 a7 62 11 e5 ed 52 e1 8e 56 aa 24 88 b8 b3 a0 2a ab 21 f2 ba b6 c5 2c fd 99 b2 c4 4e 66 35 b3 7b 3e 5b 40 81 7d 60 d3 52 97 f6 ac e6 5a fe 63 bc 1b 51 ff 74 f8 fb ee 7f 8a 0e 88 9c e5 ea e7 6e d6 a7 bb 2f 7b a3 aa 2e b3 9a 03 2e 61 78 c1 db 0c 91 71 4e be 97 12 02 fa e3 f4 f6 2c dd a2 77 f1 1e de e7 f9 61 e6 5c 15 d3 9a c4 1a 81 c0 92 67 fc 46 40 28 a7 df 6f d9 5f 75 fd c5 82 ef 09 39 c4 1f 5f ee a3 00 1d e0 dc 5e db c7 36 b6 ac 08 86 45 0b 5a 6d d2 50 bb 10 21 a3 54 c7 0b 3b 08 e1 c5 a9 be b5 80 1f 61 0e 85 44 c4 b4 49 1c 20 cd 02 5a 5d 9f d3 3e a9 f5 c9 49 fa 6a 5b 58 40 a7 59 da fb c2 8d ca 7c d5 89 74 77 98 24 eb d1 e6 f8 1e 8e 6a 06 a7 73 c4 32 94 71 de 9c b1 6b 3b 41 4e ef 5b 86 0f 17 b3 e8 90 ce fb 40 56 68 38 7e ec 28 5e 99 dc 8d c7 d6 ea af e5 84 01 31 92 9f a2 b2 62 79 87 08 ed de b5 72 d6 4c 72 b2 eb ea 29 62 05 99 65 09 b9 41 75 ce 00 d2 1b 6f 08 1f 14 f0 4f dd c8 91 27 da 43 da 6d 02 57 14 b1 27 1a bf 3b 66 5f 41 09 ac 35 55 0f 0f 06 aa c6 03 16 c7 53 57 08 42 f3 7a 58 b4 b2 b7 85 80 28 85 9c 33 a5 f9 72 0c c1 31 bb e4 65 0b 4d 51 71 f1 b6 2c 7e 8e 9c 3b 36 0d b3 54 34 df 75 b7 e2 8e 78 35 80 ae fa 83 ac b1 28 6c 18 c0 4e c2 94 48 fd 31 ca 1b bf 6c 28 b3 f4 f9 cc 28 e6 a8 8e 20 8c 49 9f ac db fc 30 9c ea 7d 98 b3 80 ff 07 1b 18 c5 f1 00 01 cc 4c 2c 02 19 19 fa 37 8b 5b 8c 6d 77 2e c5 7c b8 dc 14 64 a1 2d ed ec e7 be 24 84 a3 87 8a ad c9 ac 14 f6 a4 9d 9e 97 0c 50 89 f9 78 ab 81 d5 b2 ea 0d a1 bb ae 1e 4b dd d0 bc f7 75 cc 59 53 fa d5 3b c9 2c a6 4c 21 95 86 40 db 95 c2 19 fb fb e4 9f ef 93 d9 b3 fa bd f4 f7 c3 0e ed 2e 41 34 7d b9 3d a5 5a a3 66 56 02 da ee 31 d0 bc e8 d3 23 7e cd 29 ae 1b f5 0d be a4 36 a4 95 54 19 e7 77 71 cd 9a f8 51 9c 4c 39 e4 33 56 c7 da 72 d6 cf d9 c1 0c 78 0f d6 86 3f a7 d0 99 20 25 fa e0 b3 90 a0 52 d7 cd cd 74 30 c1 ae da 11 d6 70 2a 41 4c 47 3b 8d 58 5e e8 92 0d 72 ee 15 34 4f 1d 30 4a e9 6e 85 90 b6 6e 43 2b a7 7c 59 7b 27 4f ff 84 74 e8 08 af 1e d1 f7 64 0c d8 08 d2 45 f1 2f 92 0c 26 cf d4 dc 9f c1 09 40 f8 1f 49 a6 ce f5 c5 99 df e1 3a ff 8e 64 bd 9b 30 f4 ce 60 76 00 5f fd 63 3e 74 bf 12 71 56 da b0 d8 f3 fa e4 c0 43 58 df bc 91 eb 55 6a 42 85 cf 5d 8b db 4f 52 a0 2e e6 62 bf 54 e9 2e fe 4d 2c 83 f6 63 0c 3e a9 da 78 93 a6 d7 5c 2b b0 77 9d 78 c8 61 b2 10 c5 d5 d8 72 5b 27 d2 23 dc 17 64 47 1d 14 63 1b 79 90 90 38 e1 55 03 5b 2f fe 90 15 e1 7b 0a 81 29 64 a4 dc f5 d4 c8 c0 4e 55 63 e1 2c d7 37 fe c6 b3 a7 01 b3 e4 0d af dc d6 b1 bf 9a 39 be 5d 98 f5 66 4e 9a ed db 05 dd 32 a0 aa 3d c8 dd 19 0b e2 ab 36 aa bd d7 8e 88 d3 8e dd d6 f1 25 be 5f a7 bd 4c cf 77 0e 04 2c cf 2f 33 fc b2 c1 b6 9e 3f 86 d6 d8 fe 60 13 d2 73 10 54 99 de 5e 09 f7 be 1e 87 ff 0a 4a d2 bb 70 78 88 7a 3d 08 5e a5 18 ea 40 a0 00 be 8e 58 1b f6 59 21 0c 4e 29 43 5f e1 eb 5f c3 cf f8 12 23 47 3f 68 14 4e 9d 65 e8 1b 35 d6 7f a2 a3 d7 d0 93 4f 28 8b 99 48 4e 79 4b 96 67 bb 27 13 00 f0 41 29 67 da 21 a8 bb 43 63 6e 8b c5 30 03 28 83 58 3e 75 2f 30 f2 73 97 8c bf 31 48 ce e4 e3 77 06 7d 58 0e 87 01 7a 0c 47 a6 b0 81 e9 31 2b 2f 17 48 43 62 8c c0 32 a3 a6 a1 7a 4f 66 7c b8 fa 17 49 54 c5 92 4e fb 42 6e 8b f2 5b 2f ed 3b a2 08 64 48 e9 61 8f 1d 92 aa 8b 6f 6d b0 90 c9 a7 2d 56 91 99 57 1e e5 ca 91 91 c9 dd 92 ec 44 f2 dc ed 8f f5 83 4b f4 6a 50 46 98 bf 34 96 a9 54 81 32 95 4c 23 cc fe 53 a4 85 99 78 bd 98 fc 52 ff f9 fd 37 9e 19 e2 38 89 f8 58 3f 43 17 69 1d 96 a7 d9 d2 d6 c5 ae f3 81 71 47 8d 6b 06 c8 3b bc 5d 74 31 2f 7b f3 43 9a 2a 3d 2e 00 3a 02 03 44 cd 3d 6c 01 dc d7 20 6d 3a 7d 0c c9 ee 09 60 05 cc a1 61 b5 7a 2b 3f 11 3c dc ed 3a a3 c1 af e2 d0 cb f8 dc 27 eb 4f d8 f1 c1 e5 03 76 c9 ac 44 6d 39 48 c8 de 3e b8 bf e8 03 4a af 63 51 b1 e2 6a bf 52 cd e6 90 89 07 a4 f5 4f 4e 35 86 ef 05 75 79 84 0a 6b 91 29 c8 f4 25 fa 08 5c aa a4 dd d4 66 c4 2e b5 67 5c 9f 3c dd 02 40 32 f0 bc 80 d8 c2 49 3d 1a 0d a1 dc 1c 82 50 43 f2 72 23 4f 60 ee 11 58 52 59 11 84 e0 a0 08 b3 23 18 e8 ef e5 a9 ca c5 f1 4c 5e 81 e2 4b 05 cc 86 c8 eb 7a fc 5e 2d a9 a5 e8 fd 4f 3b 76 c5 d8 f3 16 98 05 b8 31 e1 ec f8 4d cb 2c 51 e6 b3 0b 90 39 71 75 d2 51 9b 34 2d 25 6c fd f7 1e f4 eb e5 0e 46 cc 4a 93 47 5d e9 a1 d6 c5 ff ac 6b 9b 99 af 61 9a 1c 0e 61 53 17 a9 73 70 6b 4d 5c 9b 73 16 fa 32 77 23 e4 53 ff 29 53 cf 76 45 0f 4d ba 5b 2b 1d e8 35 ac 2f f6 2f 9b 44 4d 0e 4b de dd 11 b3 c3 df 06 fb ca 99 d2 3d 6e 08 27 59 12 a7 21 a9 0a 42 95 7f 7b c0 5d d7 76 bb f9 b4 7b c2 77 50 8c b9 c2 f1 b7 3c cf a9 9c a7 68 cf ea 2f 46 f8 df 40 20 fb fe 66 1e c4 8e 97 e7 63 5e 81 d7 62 06 7b 48 1d 5c c4 a5 af 11 06 ae 3f 21 0a a6 fe 77 80 b3 82 e2 b0 84 7c 6a 69 f4 e3 88 61 77 a1 fd ff e1 b5 ed 72 14 48 47 ff ff ad fb 52 56 37 fb e8 ed 10 e7 a3 02 29 d6 b2 9b 24 f3 1a c3 06 72 77 ec 88 5a a6 cb a5 a8 eb 9c c8 1b b3 14 5a 12 56 bf ca 72 80 35 b0 cd 0d a7 7b 08 f4 09 20 2a ef 2b 8e 1f 1d 3c 75 bc 81 83 44 a9 bb 6b 1c 15 5d c6 b9 e2 67 05 94 71 dd d3 cf e4 36 c0 51 b9 b9 35 de 5b 66 d0 cc 0e 77 46 84 71 a3 e0 25 8f 20 0f 25 96 58 2c 0f 62 b8 5a db 59 d6 3b b7 c5 e2 05 70 f1 70 aa 53 fe e0 d8 fe ec 64 1a 43 50 c4 10 7b 02 38 c9 bb e4 99 53 d7 fc 92 ac 37 19 ac de b8 f8 24 60 80 e1 dd 0c 43 e2 87 32 93 e6 58 2c 2a c7 c9 ed 76 c2 08 80 e4 f1 0f fa 20 a3 08 7a 33 98 5e f9 e6 d0 cf fb 3c cb e5 e0 0d f7 66 8b 98 b6 66 2f 50 1a e3 34 d4 d5 b2 6a 02 55 54 72 50 76 f2 aa b8 ef cc c6 e8 9e 61 85 1b 2f 43 e8 4a fa 33 e4 13 e9 8e 13 78 2e 2b 6a ab cb 19 e2 68 fc 0e f0 96 b8 47 56 2f 87 49 10 5a 71 c9 f7 bd dd d9 c2 ec 3a 08 e4 02 24 c4 fe 9a a4 35 30 b5 ef 25 5b c1 12 da fc 4a 87 44 cc a5 70 32 ca ba 6e ea 2f d2 49 9e 3a ea fe a1 a3 1a d0 8b da ca 36 04 aa fd a4 f2 07 b0 d7 b3 99 e7 f4 91 b3 59 44 87 79 dc b1 9a 84 c3 77 99 77 eb f5 d8 a7 04 d3 f0 08 e1 b1 f4 2d 16 c2 57 59 0f b2 a8 ca 8d 30 b5 78 54 ac af 80 f9 a8 8a 8c cf 0a 39 eb d4 17 e3 b7 ad f2 ad bd 27 61 21 c2 b6 b3 24 0f af 15 da 6d fa 8f 75 a5 b1 f2 02 fc 20 fc 82 a5 fd 73 50 03 f6 0c ca 4c 5e 68 36 03 21 09 6b 48 12 e6 1d 91 5e 77 ff d2 f7 28 f0 cd ff dd 79 9f 89 13 69 9f b3 76 6f 74 1b 7e a0 70 94 3d b1 69 cd 4b 42 d1 6a 51 1e 2b 97 b0 e2 df 13 84 1a 4a de 97 e0 b9 ff c7 5f f3 82 8e 30 de 87 eb 8b 00 a2 46 a6 8d ef 05 fd 17 a4 c5 af 14 48 fb 35 3f b2 e4 cd 71 53 1b 10 e7 26 1f 50 d4 75 ee 61 98 5d 29 59 e6 67 52 b2 fb d2 f1 fe 99 9d 13 34 ba ae fa ad 82 5e 93 a3 d7 ce 32 6a bc de db c5 30 2e 1b 0e ea ea 59 f9 3d 5b cb 5f a6 d2 20 b9 4f 27 7e 14 99 40 d9 f8 de 5c f4 a4 a0 1a 9b 83 0d bd 7a bb 81 15 67 99 d6 8f 11 4f 54 96 e6 d5 46 a1 cc 58 d0 c0 db b1 47 7f 16 cd d1 73 d3 e2 e9 8f a8 d5 19 de 94 4c 18 20 30 85 5d cb 87 9f 30 25 33 fc 5a 21 40 49 77 9b ad bc e5 9e 25 ca 03 5e 55 4c 93 84 ba 99 29 c6 1c 6b 42 ec a5 de b3 2f cc 51 50 2a 7b 13 ba 4e 6c 5d 1e 12 7d c3 3b 88 64 79 e5 75 d3 df 9a 31 94 29 87 bd da 3f 49 a4 79 b6 ea 9f d6 be 84 44 9b 08 16 5d 20 ec 9f 36 e1 3f 79 02 6b d0 4b ce f2 ba 58 35 76 43 22 5b 3d f5 96 d0 4a 2a 1c 18 fb ca 25 30 d7 95 96 4d 16 61 9b 9d 98 1a 37 ef 14 3b 68 f8 34 ca 43 f8 c6 a6 26 6f cc 12 40 f9 2c f8 42 fa a0 27 5f 06 7b d2 43 34 5c 9c f5 d8 35 1a 70 77 7d 69 94 31 bb 23 3f b6 37 4e ee c7 b8 d1 0b 91 03 9e cd 71 15 29 fe 9c 42 c8 77 ad 81 9c 6d 12 33 4d 15 a7 21 c6 c6 d9 b7 20 e1 dc bc 51 7a d6 16 08 04 4a 5a 63 27 83 cf ed 70 0c 87 5f 50 6c 33 7d ec 0a cc 6b 51 39 5c be c8 5d d9 21 a9 c6 60 dd 93 24 7a 8e 45 0a c8 bf b4 6b 43 15 68 76 a8 03 97 d8 b4 03 97 2b b9 91 96 a0 65 fc 2a ce fd 51 59 9f 0f 63 ce a4 bf 7b 34 76 3d 50 d7 b5 2a 00 94 3a 63 ff 4a 37 76 c1 49 00 79 b5 52 37 7d 59 38 f7 b7 45 2e 01 c5 ff d6 31 e8 e4 48 13 ea 25 c8 0e 78 6c 5b 96 69 01 f6 5c 88 ee 38 3a 65 a5 cc 79 59 f2 0b 96 4e 56 b8 2c ce 27 d7 20 96 0b c1 b6 19 99 ec 6b af 29 f7 ad f0 b4 71 0b 5a 86 f2 37 35 ab ef 25 45 f0 db 0f 1a f8 eb 22 b2 7c 92 09 9d 1a 58 a7 68 e5 79 9f 25 18 5c 71 63 7c dd 2a 16 57 04 9e 6f 9e 0a 69 ea f9 f7 1f 74 40 b0 73 6f 1b 85 b9 a3 d0 b7 73 79 a5 ae ae 29 e7 36 e0 73 8d 8d 91 d4 62 e5 9e a9 97 e5 90 ac 4e 7c 64 51 ce 29 c5 fc 35 4a 06 de 60 24 59 9d 33 f0 5b 4d ae b5 cc d7 ce c5 a7 8b d1 99 76 0b 55 bb e8 17 cc b7 42 93 b6 14 90 5c 5c d4 3f cd cc db 15 63 b2 d3 a4 eb 58 90 b9 5b 73 bf bd fa 1a 8c 8d d1 fc ec d8 ad a0 8e e6 d6 00 f3 43 3b d8 32 b3 e6 9f ee f0 25 f6 ec 62 ff 0b cf 4b 87 4d 78 d8 b3 a9 a4 a8 9c 9e d8 29 1b dd 6b 72 38 37 be 0f f5 e4 15 b1 d0 4c 51 5b 50 cd 4c 38 0d c4 fa 04 50 87 06 09 b3 0d 7f ed ff b9 57 1b f6 d3 b4 70 e3 91 4b ef e2 81 21 26 e1 e5 ba c0 d9 95 ca 00 76 b4 13 4c e0 c6 f1 65 e9 b3 c6 fd ea 9a 6a 16 03 ac 1d a7 05 d8 ef 14 18 32 a0 16 ea 0d b6 bf 89 85 d6 6b 38 ff 3f 48 6c 39 0a 69 e5 ee 04 f6 83 82 8f 2c 87 02 16 0e c8 ad d5 37 b1 ac 21 56 e0 00 f7 da 5c f3 e3 a6 71 00 57 17 0c 14 76 92 b2 e9 1d f0 8a ee 9e a9 2e d1 db 25 f1 4b 42 74 d5 09 5e d8 bb f1 7b e1 69 cf c8 bc 26 42 9c 93 c6 ec 6b c2 df 34 24 5f 41 46 58 58 23 e1 2c b6 02 74 1e 82 df 17 c8 f1 9f ce cc 3a 9d 6b 5c 36 ba 5b 00 13 de 88 8f 49 ab cd d4 51 a8 62 fd 97 38 a3 68 0a f2 da 1f 48 8b 67 04 c2 5c c7 8c a1 b7 cf 99 2e a1 25 4e 10 82 43 13 26 91 50 80 53 7a ad 79 a5 10 06 d2 a8 b3 7a e1 e6 53 8b 98 d3 3b da 2d 73 96 0d ab 60 88 6c 4a 9f f0 24 41 8a 7a 47 1e 72 70 98 a9 2a 7d fa 93 ac 16 a0 e8 75 93 95 91 cf c9 67 79 c2 02 67 2f 00 1f 8d ac 69 74 7a bd 04 80 79 22 87 23 0c b3 b8 12 32 34 da 63 44 58 d3 c7 14 3d 2f b6 c0 69 f0 fd 7f d4 cd 16 4d e4 94 69 4e d9 68 c9 6b 69 1e 70 23 05 6d 04 b7 87 9c 6b 0f 31 28 2d b4 4d f5 8e ad fc 7d 63 de 19 f9 2d 7d 5e 9e fc 01 e7 3a dd 7e 26 7b 48 ec 97 45 31 14 1f b1 ce 49 21 ed 23 cd ca 8f 2c 9f 54 cd 1a 82 9c 8e 5e 9f dd 35 ac e4 83 78 20 c5 2f a3 c8 96 00 95 d9 54 f1 7b 39 b9 4c 39 ad 1e 93 d3 a7 59 d4 49 77 9e b8 bb d5 00 0b 43 0e 07 12 8d 21 e9 80 b2 eb 97 ee 40 7a 4e df cc 52 40 15 a4 e4 96 fc 09 ef 59 7c fe 39 de 42 70 24 c6 34 3d 6d d7 79 c9 e0 70 f7 b1 11 d8 2c dd 6f e0 94 96 63 ec 2c 2c 70 a7 9c b0 5a 81 ac ce 02 2f 79 50 74 d6 ae 5e 7a 4d f0 ed 3b 0e 74 af a0 f3 1d c0 2a aa 9e 07 bc 5c ab 17 6b cb 3a a5 3c 4e eb 0a ca 00 52 05 9d 3c b7 8e c7 a3 2d b9 71 7f 6e 3e 70 58 4e 4f c3 f6 ab 6b d8 52 41 92 09 62 6b e2 fb 6d db 22 93 f3 57 3b 06 8b 0b e7 84 07 ed f5 72 9f 3d 58 0d 22 33 a1 28 bb 8e ca b2 2b ff b4 e1 ba aa 2a 36 15 a4 77 e2 6b 28 55 f4 0b c1 3a a9 ea fd 30 e1 84 d0 43 c9 43 1d e0 0e ae ce fb 7a 4f a4 40 84 b7 c2 c0 cf a8 7e 9c 2f 5c 38 78 0c 23 7a 09 65 94 46 0c 87 8e e3 ce 3c 49 47 5a a5 09 96 b4 c1 fe b6 c8 43 63 a3 0c fe f6 31 68 a3 08 df 6d cf e4 be d7 69 3e b0 d0 bc 3d 4a 1a d6 bd 67 9c f7 4c d6 69 67 f6 57 ec #0 [715794ms] <- syz_emit_ethernet=0xfc0 errno=14 cover=262143 enabling collider #0 [715796ms] -> syz_emit_ethernet(0xfc0, 0x200059c0, 0x0) bb bb bb bb bb bb aa aa aa aa aa 00 81 00 08 00 00 11 00 00 27 3c 76 56 73 3d 89 00 90 0d c6 85 cb 4a e1 86 50 7b 70 bb bd dd c3 cf 47 ad 44 fd dd 17 2e 8b 4d 91 6b eb 68 2f b0 1c da 1f 35 c0 7d ab bf 23 de a1 ec 1f 0a 8f c6 1e 4f 2a c5 57 6b 67 b4 78 64 10 fc 2c b1 be f1 8e 94 4d b9 18 ed 06 d7 01 49 14 a3 63 28 2f 59 7a a3 d1 25 95 45 ee 84 ea fa a6 55 94 66 05 88 6b 4f 0c 02 61 6d 21 94 76 6d 8f 1f 6f 76 82 60 54 0c 83 6e 7b 11 cc c3 ce 41 dd 31 72 06 9a 5c e1 8e b9 1c 39 4c a3 99 98 77 d7 ac 46 11 69 12 9b cd 9d 59 b1 79 d9 4d 70 59 07 02 9f ae 82 c5 04 08 b3 72 fe ab 23 67 3d 59 e7 aa b0 af 8c 3c 5d 11 d4 1e 8b 75 24 44 b0 25 b9 52 77 87 19 71 10 84 13 47 44 38 8b 1e da 52 1c 14 76 b8 c5 64 4f c2 32 b5 1a 7b a2 32 55 77 28 f2 67 80 73 d4 31 1c b7 b7 b4 3c 84 d4 bc b5 18 08 69 98 0c 43 88 17 7c 17 46 83 7a 62 96 50 45 48 1f 7a 44 5d fe 21 36 98 17 9b 93 8d 28 7e 8b 06 cd a3 99 72 cb d9 3d bd 05 8c ef 72 b6 89 6f b5 11 a3 ee aa b1 16 52 5a 5b 19 c3 68 6c d0 17 cc cc 9e 12 51 dd e0 03 2a 55 c8 dd 0d 96 b8 b5 04 92 8b 75 65 5f 44 dd bf f6 8a 38 3b 2a be 5d 07 01 d2 3f f1 70 99 4d 86 4c 14 26 96 de 8d a8 fe 3e 8e 2f 2c 4b b6 f0 a1 73 e0 fd 4f 54 7f fc 06 a6 f6 9f 54 5c 6d ea b1 08 db df 50 bf 8c a1 d0 7c ca 53 ff 94 d2 ba 96 92 2f 7b 91 1c e1 76 c5 32 2c 50 52 ab a7 cd 6f 0f fb 99 7a 05 de 5d 69 38 a3 cb 9d 56 82 49 29 eb da 8a 03 1e 2c 5a a2 34 3c b3 10 e2 a0 9e af be 48 e7 6d 37 17 46 36 86 26 f1 ff d6 fe 56 3e ef 4d 52 62 77 96 98 35 6e 85 e4 1a 04 99 46 d2 be 74 ec cd ec 07 02 0a b7 ba 67 8c bf 45 22 c5 cf a8 58 ef f2 67 bb aa bd e2 54 d1 48 4f 8f 1e 59 6e 4c 1b 90 ee 74 3c 45 a9 9b 0c b9 4b 7a 32 4f 7f 81 6e b8 8c 25 2a 51 c9 31 ca dc 13 42 d6 8b 94 0e 3e b1 e7 c9 9e a2 d3 2f 2a f6 a9 7f 60 ea 94 80 72 87 f3 1c 81 bd be 6d 85 fb ab c4 4a 83 19 22 ff 59 cd e2 d9 a5 a7 62 11 e5 ed 52 e1 8e 56 aa 24 88 b8 b3 a0 2a ab 21 f2 ba b6 c5 2c fd 99 b2 c4 4e 66 35 b3 7b 3e 5b 40 81 7d 60 d3 52 97 f6 ac e6 5a fe 63 bc 1b 51 ff 74 f8 fb ee 7f 8a 0e 88 9c e5 ea e7 6e d6 a7 bb 2f 7b a3 aa 2e b3 9a 03 2e 61 78 c1 db 0c 91 71 4e be 97 12 02 fa e3 f4 f6 2c dd a2 77 f1 1e de e7 f9 61 e6 5c 15 d3 9a c4 1a 81 c0 92 67 fc 46 40 28 a7 df 6f d9 5f 75 fd c5 82 ef 09 39 c4 1f 5f ee a3 00 1d e0 dc 5e db c7 36 b6 ac 08 86 45 0b 5a 6d d2 50 bb 10 21 a3 54 c7 0b 3b 08 e1 c5 a9 be b5 80 1f 61 0e 85 44 c4 b4 49 1c 20 cd 02 5a 5d 9f d3 3e a9 f5 c9 49 fa 6a 5b 58 40 a7 59 da fb c2 8d ca 7c d5 89 74 77 98 24 eb d1 e6 f8 1e 8e 6a 06 a7 73 c4 32 94 71 de 9c b1 6b 3b 41 4e ef 5b 86 0f 17 b3 e8 90 ce fb 40 56 68 38 7e ec 28 5e 99 dc 8d c7 d6 ea af e5 84 01 31 92 9f a2 b2 62 79 87 08 ed de b5 72 d6 4c 72 b2 eb ea 29 62 05 99 65 09 b9 41 75 ce 00 d2 1b 6f 08 1f 14 f0 4f dd c8 91 27 da 43 da 6d 02 57 14 b1 27 1a bf 3b 66 5f 41 09 ac 35 55 0f 0f 06 aa c6 03 16 c7 53 57 08 42 f3 7a 58 b4 b2 b7 85 80 28 85 9c 33 a5 f9 72 0c c1 31 bb e4 65 0b 4d 51 71 f1 b6 2c 7e 8e 9c 3b 36 0d b3 54 34 df 75 b7 e2 8e 78 35 80 ae fa 83 ac b1 28 6c 18 c0 4e c2 94 48 fd 31 ca 1b bf 6c 28 b3 f4 f9 cc 28 e6 a8 8e 20 8c 49 9f ac db fc 30 9c ea 7d 98 b3 80 ff 07 1b 18 c5 f1 00 01 cc 4c 2c 02 19 19 fa 37 8b 5b 8c 6d 77 2e c5 7c b8 dc 14 64 a1 2d ed ec e7 be 24 84 a3 87 8a ad c9 ac 14 f6 a4 9d 9e 97 0c 50 89 f9 78 ab 81 d5 b2 ea 0d a1 bb ae 1e 4b dd d0 bc f7 75 cc 59 53 fa d5 3b c9 2c a6 4c 21 95 86 40 db 95 c2 19 fb fb e4 9f ef 93 d9 b3 fa bd f4 f7 c3 0e ed 2e 41 34 7d b9 3d a5 5a a3 66 56 02 da ee 31 d0 bc e8 d3 23 7e cd 29 ae 1b f5 0d be a4 36 a4 95 54 19 e7 77 71 cd 9a f8 51 9c 4c 39 e4 33 56 c7 da 72 d6 cf d9 c1 0c 78 0f d6 86 3f a7 d0 99 20 25 fa e0 b3 90 a0 52 d7 cd cd 74 30 c1 ae da 11 d6 70 2a 41 4c 47 3b 8d 58 5e e8 92 0d 72 ee 15 34 4f 1d 30 4a e9 6e 85 90 b6 6e 43 2b a7 7c 59 7b 27 4f ff 84 74 e8 08 af 1e d1 f7 64 0c d8 08 d2 45 f1 2f 92 0c 26 cf d4 dc 9f c1 09 40 f8 1f 49 a6 ce f5 c5 99 df e1 3a ff 8e 64 bd 9b 30 f4 ce 60 76 00 5f fd 63 3e 74 bf 12 71 56 da b0 d8 f3 fa e4 c0 43 58 df bc 91 eb 55 6a 42 85 cf 5d 8b db 4f 52 a0 2e e6 62 bf 54 e9 2e fe 4d 2c 83 f6 63 0c 3e a9 da 78 93 a6 d7 5c 2b b0 77 9d 78 c8 61 b2 10 c5 d5 d8 72 5b 27 d2 23 dc 17 64 47 1d 14 63 1b 79 90 90 38 e1 55 03 5b 2f fe 90 15 e1 7b 0a 81 29 64 a4 dc f5 d4 c8 c0 4e 55 63 e1 2c d7 37 fe c6 b3 a7 01 b3 e4 0d af dc d6 b1 bf 9a 39 be 5d 98 f5 66 4e 9a ed db 05 dd 32 a0 aa 3d c8 dd 19 0b e2 ab 36 aa bd d7 8e 88 d3 8e dd d6 f1 25 be 5f a7 bd 4c cf 77 0e 04 2c cf 2f 33 fc b2 c1 b6 9e 3f 86 d6 d8 fe 60 13 d2 73 10 54 99 de 5e 09 f7 be 1e 87 ff 0a 4a d2 bb 70 78 88 7a 3d 08 5e a5 18 ea 40 a0 00 be 8e 58 1b f6 59 21 0c 4e 29 43 5f e1 eb 5f c3 cf f8 12 23 47 3f 68 14 4e 9d 65 e8 1b 35 d6 7f a2 a3 d7 d0 93 4f 28 8b 99 48 4e 79 4b 96 67 bb 27 13 00 f0 41 29 67 da 21 a8 bb 43 63 6e 8b c5 30 03 28 83 58 3e 75 2f 30 f2 73 97 8c bf 31 48 ce e4 e3 77 06 7d 58 0e 87 01 7a 0c 47 a6 b0 81 e9 31 2b 2f 17 48 43 62 8c c0 32 a3 a6 a1 7a 4f 66 7c b8 fa 17 49 54 c5 92 4e fb 42 6e 8b f2 5b 2f ed 3b a2 08 64 48 e9 61 8f 1d 92 aa 8b 6f 6d b0 90 c9 a7 2d 56 91 99 57 1e e5 ca 91 91 c9 dd 92 ec 44 f2 dc ed 8f f5 83 4b f4 6a 50 46 98 bf 34 96 a9 54 81 32 95 4c 23 cc fe 53 a4 85 99 78 bd 98 fc 52 ff f9 fd 37 9e 19 e2 38 89 f8 58 3f 43 17 69 1d 96 a7 d9 d2 d6 c5 ae f3 81 71 47 8d 6b 06 c8 3b bc 5d 74 31 2f 7b f3 43 9a 2a 3d 2e 00 3a 02 03 44 cd 3d 6c 01 dc d7 20 6d 3a 7d 0c c9 ee 09 60 05 cc a1 61 b5 7a 2b 3f 11 3c dc ed 3a a3 c1 af e2 d0 cb f8 dc 27 eb 4f d8 f1 c1 e5 03 76 c9 ac 44 6d 39 48 c8 de 3e b8 bf e8 03 4a af 63 51 b1 e2 6a bf 52 cd e6 90 89 07 a4 f5 4f 4e 35 86 ef 05 75 79 84 0a 6b 91 29 c8 f4 25 fa 08 5c aa a4 dd d4 66 c4 2e b5 67 5c 9f 3c dd 02 40 32 f0 bc 80 d8 c2 49 3d 1a 0d a1 dc 1c 82 50 43 f2 72 23 4f 60 ee 11 58 52 59 11 84 e0 a0 08 b3 23 18 e8 ef e5 a9 ca c5 f1 4c 5e 81 e2 4b 05 cc 86 c8 eb 7a fc 5e 2d a9 a5 e8 fd 4f 3b 76 c5 d8 f3 16 98 05 b8 31 e1 ec f8 4d cb 2c 51 e6 b3 0b 90 39 71 75 d2 51 9b 34 2d 25 6c fd f7 1e f4 eb e5 0e 46 cc 4a 93 47 5d e9 a1 d6 c5 ff ac 6b 9b 99 af 61 9a 1c 0e 61 53 17 a9 73 70 6b 4d 5c 9b 73 16 fa 32 77 23 e4 53 ff 29 53 cf 76 45 0f 4d ba 5b 2b 1d e8 35 ac 2f f6 2f 9b 44 4d 0e 4b de dd 11 b3 c3 df 06 fb ca 99 d2 3d 6e 08 27 59 12 a7 21 a9 0a 42 95 7f 7b c0 5d d7 76 bb f9 b4 7b c2 77 50 8c b9 c2 f1 b7 3c cf a9 9c a7 68 cf ea 2f 46 f8 df 40 20 fb fe 66 1e c4 8e 97 e7 63 5e 81 d7 62 06 7b 48 1d 5c c4 a5 af 11 06 ae 3f 21 0a a6 fe 77 80 b3 82 e2 b0 84 7c 6a 69 f4 e3 88 61 77 a1 fd ff e1 b5 ed 72 14 48 47 ff ff ad fb 52 56 37 fb e8 ed 10 e7 a3 02 29 d6 b2 9b 24 f3 1a c3 06 72 77 ec 88 5a a6 cb a5 a8 eb 9c c8 1b b3 14 5a 12 56 bf ca 72 80 35 b0 cd 0d a7 7b 08 f4 09 20 2a ef 2b 8e 1f 1d 3c 75 bc 81 83 44 a9 bb 6b 1c 15 5d c6 b9 e2 67 05 94 71 dd d3 cf e4 36 c0 51 b9 b9 35 de 5b 66 d0 cc 0e 77 46 84 71 a3 e0 25 8f 20 0f 25 96 58 2c 0f 62 b8 5a db 59 d6 3b b7 c5 e2 05 70 f1 70 aa 53 fe e0 d8 fe ec 64 1a 43 50 c4 10 7b 02 38 c9 bb e4 99 53 d7 fc 92 ac 37 19 ac de b8 f8 24 60 80 e1 dd 0c 43 e2 87 32 93 e6 58 2c 2a c7 c9 ed 76 c2 08 80 e4 f1 0f fa 20 a3 08 7a 33 98 5e f9 e6 d0 cf fb 3c cb e5 e0 0d f7 66 8b 98 b6 66 2f 50 1a e3 34 d4 d5 b2 6a 02 55 54 72 50 76 f2 aa b8 ef cc c6 e8 9e 61 85 1b 2f 43 e8 4a fa 33 e4 13 e9 8e 13 78 2e 2b 6a ab cb 19 e2 68 fc 0e f0 96 b8 47 56 2f 87 49 10 5a 71 c9 f7 bd dd d9 c2 ec 3a 08 e4 02 24 c4 fe 9a a4 35 30 b5 ef 25 5b c1 12 da fc 4a 87 44 cc a5 70 32 ca ba 6e ea 2f d2 49 9e 3a ea fe a1 a3 1a d0 8b da ca 36 04 aa fd a4 f2 07 b0 d7 b3 99 e7 f4 91 b3 59 44 87 79 dc b1 9a 84 c3 77 99 77 eb f5 d8 a7 04 d3 f0 08 e1 b1 f4 2d 16 c2 57 59 0f b2 a8 ca 8d 30 b5 78 54 ac af 80 f9 a8 8a 8c cf 0a 39 eb d4 17 e3 b7 ad f2 ad bd 27 61 21 c2 b6 b3 24 0f af 15 da 6d fa 8f 75 a5 b1 f2 02 fc 20 fc 82 a5 fd 73 50 03 f6 0c ca 4c 5e 68 36 03 21 09 6b 48 12 e6 1d 91 5e 77 ff d2 f7 28 f0 cd ff dd 79 9f 89 13 69 9f b3 76 6f 74 1b 7e a0 70 94 3d b1 69 cd 4b 42 d1 6a 51 1e 2b 97 b0 e2 df 13 84 1a 4a de 97 e0 b9 ff c7 5f f3 82 8e 30 de 87 eb 8b 00 a2 46 a6 8d ef 05 fd 17 a4 c5 af 14 48 fb 35 3f b2 e4 cd 71 53 1b 10 e7 26 1f 50 d4 75 ee 61 98 5d 29 59 e6 67 52 b2 fb d2 f1 fe 99 9d 13 34 ba ae fa ad 82 5e 93 a3 d7 ce 32 6a bc de db c5 30 2e 1b 0e ea ea 59 f9 3d 5b cb 5f a6 d2 20 b9 4f 27 7e 14 99 40 d9 f8 de 5c f4 a4 a0 1a 9b 83 0d bd 7a bb 81 15 67 99 d6 8f 11 4f 54 96 e6 d5 46 a1 cc 58 d0 c0 db b1 47 7f 16 cd d1 73 d3 e2 e9 8f a8 d5 19 de 94 4c 18 20 30 85 5d cb 87 9f 30 25 33 fc 5a 21 40 49 77 9b ad bc e5 9e 25 ca 03 5e 55 4c 93 84 ba 99 29 c6 1c 6b 42 ec a5 de b3 2f cc 51 50 2a 7b 13 ba 4e 6c 5d 1e 12 7d c3 3b 88 64 79 e5 75 d3 df 9a 31 94 29 87 bd da 3f 49 a4 79 b6 ea 9f d6 be 84 44 9b 08 16 5d 20 ec 9f 36 e1 3f 79 02 6b d0 4b ce f2 ba 58 35 76 43 22 5b 3d f5 96 d0 4a 2a 1c 18 fb ca 25 30 d7 95 96 4d 16 61 9b 9d 98 1a 37 ef 14 3b 68 f8 34 ca 43 f8 c6 a6 26 6f cc 12 40 f9 2c f8 42 fa a0 27 5f 06 7b d2 43 34 5c 9c f5 d8 35 1a 70 77 7d 69 94 31 bb 23 3f b6 37 4e ee c7 b8 d1 0b 91 03 9e cd 71 15 29 fe 9c 42 c8 77 ad 81 9c 6d 12 33 4d 15 a7 21 c6 c6 d9 b7 20 e1 dc bc 51 7a d6 16 08 04 4a 5a 63 27 83 cf ed 70 0c 87 5f 50 6c 33 7d ec 0a cc 6b 51 39 5c be c8 5d d9 21 a9 c6 60 dd 93 24 7a 8e 45 0a c8 bf b4 6b 43 15 68 76 a8 03 97 d8 b4 03 97 2b b9 91 96 a0 65 fc 2a ce fd 51 59 9f 0f 63 ce a4 bf 7b 34 76 3d 50 d7 b5 2a 00 94 3a 63 ff 4a 37 76 c1 49 00 79 b5 52 37 7d 59 38 f7 b7 45 2e 01 c5 ff d6 31 e8 e4 48 13 ea 25 c8 0e 78 6c 5b 96 69 01 f6 5c 88 ee 38 3a 65 a5 cc 79 59 f2 0b 96 4e 56 b8 2c ce 27 d7 20 96 0b c1 b6 19 99 ec 6b af 29 f7 ad f0 b4 71 0b 5a 86 f2 37 35 ab ef 25 45 f0 db 0f 1a f8 eb 22 b2 7c 92 09 9d 1a 58 a7 68 e5 79 9f 25 18 5c 71 63 7c dd 2a 16 57 04 9e 6f 9e 0a 69 ea f9 f7 1f 74 40 b0 73 6f 1b 85 b9 a3 d0 b7 73 79 a5 ae ae 29 e7 36 e0 73 8d 8d 91 d4 62 e5 9e a9 97 e5 90 ac 4e 7c 64 51 ce 29 c5 fc 35 4a 06 de 60 24 59 9d 33 f0 5b 4d ae b5 cc d7 ce c5 a7 8b d1 99 76 0b 55 bb e8 17 cc b7 42 93 b6 14 90 5c 5c d4 3f cd cc db 15 63 b2 d3 a4 eb 58 90 b9 5b 73 bf bd fa 1a 8c 8d d1 fc ec d8 ad a0 8e e6 d6 00 f3 43 3b d8 32 b3 e6 9f ee f0 25 f6 ec 62 ff 0b cf 4b 87 4d 78 d8 b3 a9 a4 a8 9c 9e d8 29 1b dd 6b 72 38 37 be 0f f5 e4 15 b1 d0 4c 51 5b 50 cd 4c 38 0d c4 fa 04 50 87 06 09 b3 0d 7f ed ff b9 57 1b f6 d3 b4 70 e3 91 4b ef e2 81 21 26 e1 e5 ba c0 d9 95 ca 00 76 b4 13 4c e0 c6 f1 65 e9 b3 c6 fd ea 9a 6a 16 03 ac 1d a7 05 d8 ef 14 18 32 a0 16 ea 0d b6 bf 89 85 d6 6b 38 ff 3f 48 6c 39 0a 69 e5 ee 04 f6 83 82 8f 2c 87 02 16 0e c8 ad d5 37 b1 ac 21 56 e0 00 f7 da 5c f3 e3 a6 71 00 57 17 0c 14 76 92 b2 e9 1d f0 8a ee 9e a9 2e d1 db 25 f1 4b 42 74 d5 09 5e d8 bb f1 7b e1 69 cf c8 bc 26 42 9c 93 c6 ec 6b c2 df 34 24 5f 41 46 58 58 23 e1 2c b6 02 74 1e 82 df 17 c8 f1 9f ce cc 3a 9d 6b 5c 36 ba 5b 00 13 de 88 8f 49 ab cd d4 51 a8 62 fd 97 38 a3 68 0a f2 da 1f 48 8b 67 04 c2 5c c7 8c a1 b7 cf 99 2e a1 25 4e 10 82 43 13 26 91 50 80 53 7a ad 79 a5 10 06 d2 a8 b3 7a e1 e6 53 8b 98 d3 3b da 2d 73 96 0d ab 60 88 6c 4a 9f f0 24 41 8a 7a 47 1e 72 70 98 a9 2a 7d fa 93 ac 16 a0 e8 75 93 95 91 cf c9 67 79 c2 02 67 2f 00 1f 8d ac 69 74 7a bd 04 80 79 22 87 23 0c b3 b8 12 32 34 da 63 44 58 d3 c7 14 3d 2f b6 c0 69 f0 fd 7f d4 cd 16 4d e4 94 69 4e d9 68 c9 6b 69 1e 70 23 05 6d 04 b7 87 9c 6b 0f 31 28 2d b4 4d f5 8e ad fc 7d 63 de 19 f9 2d 7d 5e 9e fc 01 e7 3a dd 7e 26 7b 48 ec 97 45 31 14 1f b1 ce 49 21 ed 23 cd ca 8f 2c 9f 54 cd 1a 82 9c 8e 5e 9f dd 35 ac e4 83 78 20 c5 2f a3 c8 96 00 95 d9 54 f1 7b 39 b9 4c 39 ad 1e 93 d3 a7 59 d4 49 77 9e b8 bb d5 00 0b 43 0e 07 12 8d 21 e9 80 b2 eb 97 ee 40 7a 4e df cc 52 40 15 a4 e4 96 fc 09 ef 59 7c fe 39 de 42 70 24 c6 34 3d 6d d7 79 c9 e0 70 f7 b1 11 d8 2c dd 6f e0 94 96 63 ec 2c 2c 70 a7 9c b0 5a 81 ac ce 02 2f 79 50 74 d6 ae 5e 7a 4d f0 ed 3b 0e 74 af a0 f3 1d c0 2a aa 9e 07 bc 5c ab 17 6b cb 3a a5 3c 4e eb 0a ca 00 52 05 9d 3c b7 8e c7 a3 2d b9 71 7f 6e 3e 70 58 4e 4f c3 f6 ab 6b d8 52 41 92 09 62 6b e2 fb 6d db 22 93 f3 57 3b 06 8b 0b e7 84 07 ed f5 72 9f 3d 58 0d 22 33 a1 28 bb 8e ca b2 2b ff b4 e1 ba aa 2a 36 15 a4 77 e2 6b 28 55 f4 0b c1 3a a9 ea fd 30 e1 84 d0 43 c9 43 1d e0 0e ae ce fb 7a 4f a4 40 84 b7 c2 c0 cf a8 7e 9c 2f 5c 38 78 0c 23 7a 09 65 94 46 0c 87 8e e3 ce 3c 49 47 5a a5 09 96 b4 c1 fe b6 c8 43 63 a3 0c fe f6 31 68 a3 08 df 6d cf e4 be d7 69 3e b0 d0 bc 3d 4a 1a d6 bd 67 9c f7 4c d6 69 67 f6 57 ec #0 [715892ms] <- syz_emit_ethernet=0xfc0 errno=14 cover=262143 03:35:01 executing program 0: syz_emit_ethernet(0xfc0, &(0x7f00000059c0)={@multicast, @dev, @val={@void, {0x8100, 0x0, 0x1}}, {@llc_tr={0x11, {@llc={0x0, 0x0, '\'', "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"}}}}}, 0x0) 2033/05/18 03:35:01 result hanged=false: 2033/05/18 03:35:01 #0: triaging type=7 2033/05/18 03:35:01 triaging input for call #0 syz_emit_ethernet (new signal=7) [715912ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167693 #0 [715921ms] -> syz_emit_ethernet(0xfc0, 0x200059c0, 0x0) bb bb bb bb bb bb aa aa aa aa aa 00 81 00 08 00 00 11 00 00 27 3c 76 56 73 3d 89 00 90 0d c6 85 cb 4a e1 86 50 7b 70 bb bd dd c3 cf 47 ad 44 fd dd 17 2e 8b 4d 91 6b eb 68 2f b0 1c da 1f 35 c0 7d ab bf 23 de a1 ec 1f 0a 8f c6 1e 4f 2a c5 57 6b 67 b4 78 64 10 fc 2c b1 be f1 8e 94 4d b9 18 ed 06 d7 01 49 14 a3 63 28 2f 59 7a a3 d1 25 95 45 ee 84 ea fa a6 55 94 66 05 88 6b 4f 0c 02 61 6d 21 94 76 6d 8f 1f 6f 76 82 60 54 0c 83 6e 7b 11 cc c3 ce 41 dd 31 72 06 9a 5c e1 8e b9 1c 39 4c a3 99 98 77 d7 ac 46 11 69 12 9b cd 9d 59 b1 79 d9 4d 70 59 07 02 9f ae 82 c5 04 08 b3 72 fe ab 23 67 3d 59 e7 aa b0 af 8c 3c 5d 11 d4 1e 8b 75 24 44 b0 25 b9 52 77 87 19 71 10 84 13 47 44 38 8b 1e da 52 1c 14 76 b8 c5 64 4f c2 32 b5 1a 7b a2 32 55 77 28 f2 67 80 73 d4 31 1c b7 b7 b4 3c 84 d4 bc b5 18 08 69 98 0c 43 88 17 7c 17 46 83 7a 62 96 50 45 48 1f 7a 44 5d fe 21 36 98 17 9b 93 8d 28 7e 8b 06 cd a3 99 72 cb d9 3d bd 05 8c ef 72 b6 89 6f b5 11 a3 ee aa b1 16 52 5a 5b 19 c3 68 6c d0 17 cc cc 9e 12 51 dd e0 03 2a 55 c8 dd 0d 96 b8 b5 04 92 8b 75 65 5f 44 dd bf f6 8a 38 3b 2a be 5d 07 01 d2 3f f1 70 99 4d 86 4c 14 26 96 de 8d a8 fe 3e 8e 2f 2c 4b b6 f0 a1 73 e0 fd 4f 54 7f fc 06 a6 f6 9f 54 5c 6d ea b1 08 db df 50 bf 8c a1 d0 7c ca 53 ff 94 d2 ba 96 92 2f 7b 91 1c e1 76 c5 32 2c 50 52 ab a7 cd 6f 0f fb 99 7a 05 de 5d 69 38 a3 cb 9d 56 82 49 29 eb da 8a 03 1e 2c 5a a2 34 3c b3 10 e2 a0 9e af be 48 e7 6d 37 17 46 36 86 26 f1 ff d6 fe 56 3e ef 4d 52 62 77 96 98 35 6e 85 e4 1a 04 99 46 d2 be 74 ec cd ec 07 02 0a b7 ba 67 8c bf 45 22 c5 cf a8 58 ef f2 67 bb aa bd e2 54 d1 48 4f 8f 1e 59 6e 4c 1b 90 ee 74 3c 45 a9 9b 0c b9 4b 7a 32 4f 7f 81 6e b8 8c 25 2a 51 c9 31 ca dc 13 42 d6 8b 94 0e 3e b1 e7 c9 9e a2 d3 2f 2a f6 a9 7f 60 ea 94 80 72 87 f3 1c 81 bd be 6d 85 fb ab c4 4a 83 19 22 ff 59 cd e2 d9 a5 a7 62 11 e5 ed 52 e1 8e 56 aa 24 88 b8 b3 a0 2a ab 21 f2 ba b6 c5 2c fd 99 b2 c4 4e 66 35 b3 7b 3e 5b 40 81 7d 60 d3 52 97 f6 ac e6 5a fe 63 bc 1b 51 ff 74 f8 fb ee 7f 8a 0e 88 9c e5 ea e7 6e d6 a7 bb 2f 7b a3 aa 2e b3 9a 03 2e 61 78 c1 db 0c 91 71 4e be 97 12 02 fa e3 f4 f6 2c dd a2 77 f1 1e de e7 f9 61 e6 5c 15 d3 9a c4 1a 81 c0 92 67 fc 46 40 28 a7 df 6f d9 5f 75 fd c5 82 ef 09 39 c4 1f 5f ee a3 00 1d e0 dc 5e db c7 36 b6 ac 08 86 45 0b 5a 6d d2 50 bb 10 21 a3 54 c7 0b 3b 08 e1 c5 a9 be b5 80 1f 61 0e 85 44 c4 b4 49 1c 20 cd 02 5a 5d 9f d3 3e a9 f5 c9 49 fa 6a 5b 58 40 a7 59 da fb c2 8d ca 7c d5 89 74 77 98 24 eb d1 e6 f8 1e 8e 6a 06 a7 73 c4 32 94 71 de 9c b1 6b 3b 41 4e ef 5b 86 0f 17 b3 e8 90 ce fb 40 56 68 38 7e ec 28 5e 99 dc 8d c7 d6 ea af e5 84 01 31 92 9f a2 b2 62 79 87 08 ed de b5 72 d6 4c 72 b2 eb ea 29 62 05 99 65 09 b9 41 75 ce 00 d2 1b 6f 08 1f 14 f0 4f dd c8 91 27 da 43 da 6d 02 57 14 b1 27 1a bf 3b 66 5f 41 09 ac 35 55 0f 0f 06 aa c6 03 16 c7 53 57 08 42 f3 7a 58 b4 b2 b7 85 80 28 85 9c 33 a5 f9 72 0c c1 31 bb e4 65 0b 4d 51 71 f1 b6 2c 7e 8e 9c 3b 36 0d b3 54 34 df 75 b7 e2 8e 78 35 80 ae fa 83 ac b1 28 6c 18 c0 4e c2 94 48 fd 31 ca 1b bf 6c 28 b3 f4 f9 cc 28 e6 a8 8e 20 8c 49 9f ac db fc 30 9c ea 7d 98 b3 80 ff 07 1b 18 c5 f1 00 01 cc 4c 2c 02 19 19 fa 37 8b 5b 8c 6d 77 2e c5 7c b8 dc 14 64 a1 2d ed ec e7 be 24 84 a3 87 8a ad c9 ac 14 f6 a4 9d 9e 97 0c 50 89 f9 78 ab 81 d5 b2 ea 0d a1 bb ae 1e 4b dd d0 bc f7 75 cc 59 53 fa d5 3b c9 2c a6 4c 21 95 86 40 db 95 c2 19 fb fb e4 9f ef 93 d9 b3 fa bd f4 f7 c3 0e ed 2e 41 34 7d b9 3d a5 5a a3 66 56 02 da ee 31 d0 bc e8 d3 23 7e cd 29 ae 1b f5 0d be a4 36 a4 95 54 19 e7 77 71 cd 9a f8 51 9c 4c 39 e4 33 56 c7 da 72 d6 cf d9 c1 0c 78 0f d6 86 3f a7 d0 99 20 25 fa e0 b3 90 a0 52 d7 cd cd 74 30 c1 ae da 11 d6 70 2a 41 4c 47 3b 8d 58 5e e8 92 0d 72 ee 15 34 4f 1d 30 4a e9 6e 85 90 b6 6e 43 2b a7 7c 59 7b 27 4f ff 84 74 e8 08 af 1e d1 f7 64 0c d8 08 d2 45 f1 2f 92 0c 26 cf d4 dc 9f c1 09 40 f8 1f 49 a6 ce f5 c5 99 df e1 3a ff 8e 64 bd 9b 30 f4 ce 60 76 00 5f fd 63 3e 74 bf 12 71 56 da b0 d8 f3 fa e4 c0 43 58 df bc 91 eb 55 6a 42 85 cf 5d 8b db 4f 52 a0 2e e6 62 bf 54 e9 2e fe 4d 2c 83 f6 63 0c 3e a9 da 78 93 a6 d7 5c 2b b0 77 9d 78 c8 61 b2 10 c5 d5 d8 72 5b 27 d2 23 dc 17 64 47 1d 14 63 1b 79 90 90 38 e1 55 03 5b 2f fe 90 15 e1 7b 0a 81 29 64 a4 dc f5 d4 c8 c0 4e 55 63 e1 2c d7 37 fe c6 b3 a7 01 b3 e4 0d af dc d6 b1 bf 9a 39 be 5d 98 f5 66 4e 9a ed db 05 dd 32 a0 aa 3d c8 dd 19 0b e2 ab 36 aa bd d7 8e 88 d3 8e dd d6 f1 25 be 5f a7 bd 4c cf 77 0e 04 2c cf 2f 33 fc b2 c1 b6 9e 3f 86 d6 d8 fe 60 13 d2 73 10 54 99 de 5e 09 f7 be 1e 87 ff 0a 4a d2 bb 70 78 88 7a 3d 08 5e a5 18 ea 40 a0 00 be 8e 58 1b f6 59 21 0c 4e 29 43 5f e1 eb 5f c3 cf f8 12 23 47 3f 68 14 4e 9d 65 e8 1b 35 d6 7f a2 a3 d7 d0 93 4f 28 8b 99 48 4e 79 4b 96 67 bb 27 13 00 f0 41 29 67 da 21 a8 bb 43 63 6e 8b c5 30 03 28 83 58 3e 75 2f 30 f2 73 97 8c bf 31 48 ce e4 e3 77 06 7d 58 0e 87 01 7a 0c 47 a6 b0 81 e9 31 2b 2f 17 48 43 62 8c c0 32 a3 a6 a1 7a 4f 66 7c b8 fa 17 49 54 c5 92 4e fb 42 6e 8b f2 5b 2f ed 3b a2 08 64 48 e9 61 8f 1d 92 aa 8b 6f 6d b0 90 c9 a7 2d 56 91 99 57 1e e5 ca 91 91 c9 dd 92 ec 44 f2 dc ed 8f f5 83 4b f4 6a 50 46 98 bf 34 96 a9 54 81 32 95 4c 23 cc fe 53 a4 85 99 78 bd 98 fc 52 ff f9 fd 37 9e 19 e2 38 89 f8 58 3f 43 17 69 1d 96 a7 d9 d2 d6 c5 ae f3 81 71 47 8d 6b 06 c8 3b bc 5d 74 31 2f 7b f3 43 9a 2a 3d 2e 00 3a 02 03 44 cd 3d 6c 01 dc d7 20 6d 3a 7d 0c c9 ee 09 60 05 cc a1 61 b5 7a 2b 3f 11 3c dc ed 3a a3 c1 af e2 d0 cb f8 dc 27 eb 4f d8 f1 c1 e5 03 76 c9 ac 44 6d 39 48 c8 de 3e b8 bf e8 03 4a af 63 51 b1 e2 6a bf 52 cd e6 90 89 07 a4 f5 4f 4e 35 86 ef 05 75 79 84 0a 6b 91 29 c8 f4 25 fa 08 5c aa a4 dd d4 66 c4 2e b5 67 5c 9f 3c dd 02 40 32 f0 bc 80 d8 c2 49 3d 1a 0d a1 dc 1c 82 50 43 f2 72 23 4f 60 ee 11 58 52 59 11 84 e0 a0 08 b3 23 18 e8 ef e5 a9 ca c5 f1 4c 5e 81 e2 4b 05 cc 86 c8 eb 7a fc 5e 2d a9 a5 e8 fd 4f 3b 76 c5 d8 f3 16 98 05 b8 31 e1 ec f8 4d cb 2c 51 e6 b3 0b 90 39 71 75 d2 51 9b 34 2d 25 6c fd f7 1e f4 eb e5 0e 46 cc 4a 93 47 5d e9 a1 d6 c5 ff ac 6b 9b 99 af 61 9a 1c 0e 61 53 17 a9 73 70 6b 4d 5c 9b 73 16 fa 32 77 23 e4 53 ff 29 53 cf 76 45 0f 4d ba 5b 2b 1d e8 35 ac 2f f6 2f 9b 44 4d 0e 4b de dd 11 b3 c3 df 06 fb ca 99 d2 3d 6e 08 27 59 12 a7 21 a9 0a 42 95 7f 7b c0 5d d7 76 bb f9 b4 7b c2 77 50 8c b9 c2 f1 b7 3c cf a9 9c a7 68 cf ea 2f 46 f8 df 40 20 fb fe 66 1e c4 8e 97 e7 63 5e 81 d7 62 06 7b 48 1d 5c c4 a5 af 11 06 ae 3f 21 0a a6 fe 77 80 b3 82 e2 b0 84 7c 6a 69 f4 e3 88 61 77 a1 fd ff e1 b5 ed 72 14 48 47 ff ff ad fb 52 56 37 fb e8 ed 10 e7 a3 02 29 d6 b2 9b 24 f3 1a c3 06 72 77 ec 88 5a a6 cb a5 a8 eb 9c c8 1b b3 14 5a 12 56 bf ca 72 80 35 b0 cd 0d a7 7b 08 f4 09 20 2a ef 2b 8e 1f 1d 3c 75 bc 81 83 44 a9 bb 6b 1c 15 5d c6 b9 e2 67 05 94 71 dd d3 cf e4 36 c0 51 b9 b9 35 de 5b 66 d0 cc 0e 77 46 84 71 a3 e0 25 8f 20 0f 25 96 58 2c 0f 62 b8 5a db 59 d6 3b b7 c5 e2 05 70 f1 70 aa 53 fe e0 d8 fe ec 64 1a 43 50 c4 10 7b 02 38 c9 bb e4 99 53 d7 fc 92 ac 37 19 ac de b8 f8 24 60 80 e1 dd 0c 43 e2 87 32 93 e6 58 2c 2a c7 c9 ed 76 c2 08 80 e4 f1 0f fa 20 a3 08 7a 33 98 5e f9 e6 d0 cf fb 3c cb e5 e0 0d f7 66 8b 98 b6 66 2f 50 1a e3 34 d4 d5 b2 6a 02 55 54 72 50 76 f2 aa b8 ef cc c6 e8 9e 61 85 1b 2f 43 e8 4a fa 33 e4 13 e9 8e 13 78 2e 2b 6a ab cb 19 e2 68 fc 0e f0 96 b8 47 56 2f 87 49 10 5a 71 c9 f7 bd dd d9 c2 ec 3a 08 e4 02 24 c4 fe 9a a4 35 30 b5 ef 25 5b c1 12 da fc 4a 87 44 cc a5 70 32 ca ba 6e ea 2f d2 49 9e 3a ea fe a1 a3 1a d0 8b da ca 36 04 aa fd a4 f2 07 b0 d7 b3 99 e7 f4 91 b3 59 44 87 79 dc b1 9a 84 c3 77 99 77 eb f5 d8 a7 04 d3 f0 08 e1 b1 f4 2d 16 c2 57 59 0f b2 a8 ca 8d 30 b5 78 54 ac af 80 f9 a8 8a 8c cf 0a 39 eb d4 17 e3 b7 ad f2 ad bd 27 61 21 c2 b6 b3 24 0f af 15 da 6d fa 8f 75 a5 b1 f2 02 fc 20 fc 82 a5 fd 73 50 03 f6 0c ca 4c 5e 68 36 03 21 09 6b 48 12 e6 1d 91 5e 77 ff d2 f7 28 f0 cd ff dd 79 9f 89 13 69 9f b3 76 6f 74 1b 7e a0 70 94 3d b1 69 cd 4b 42 d1 6a 51 1e 2b 97 b0 e2 df 13 84 1a 4a de 97 e0 b9 ff c7 5f f3 82 8e 30 de 87 eb 8b 00 a2 46 a6 8d ef 05 fd 17 a4 c5 af 14 48 fb 35 3f b2 e4 cd 71 53 1b 10 e7 26 1f 50 d4 75 ee 61 98 5d 29 59 e6 67 52 b2 fb d2 f1 fe 99 9d 13 34 ba ae fa ad 82 5e 93 a3 d7 ce 32 6a bc de db c5 30 2e 1b 0e ea ea 59 f9 3d 5b cb 5f a6 d2 20 b9 4f 27 7e 14 99 40 d9 f8 de 5c f4 a4 a0 1a 9b 83 0d bd 7a bb 81 15 67 99 d6 8f 11 4f 54 96 e6 d5 46 a1 cc 58 d0 c0 db b1 47 7f 16 cd d1 73 d3 e2 e9 8f a8 d5 19 de 94 4c 18 20 30 85 5d cb 87 9f 30 25 33 fc 5a 21 40 49 77 9b ad bc e5 9e 25 ca 03 5e 55 4c 93 84 ba 99 29 c6 1c 6b 42 ec a5 de b3 2f cc 51 50 2a 7b 13 ba 4e 6c 5d 1e 12 7d c3 3b 88 64 79 e5 75 d3 df 9a 31 94 29 87 bd da 3f 49 a4 79 b6 ea 9f d6 be 84 44 9b 08 16 5d 20 ec 9f 36 e1 3f 79 02 6b d0 4b ce f2 ba 58 35 76 43 22 5b 3d f5 96 d0 4a 2a 1c 18 fb ca 25 30 d7 95 96 4d 16 61 9b 9d 98 1a 37 ef 14 3b 68 f8 34 ca 43 f8 c6 a6 26 6f cc 12 40 f9 2c f8 42 fa a0 27 5f 06 7b d2 43 34 5c 9c f5 d8 35 1a 70 77 7d 69 94 31 bb 23 3f b6 37 4e ee c7 b8 d1 0b 91 03 9e cd 71 15 29 fe 9c 42 c8 77 ad 81 9c 6d 12 33 4d 15 a7 21 c6 c6 d9 b7 20 e1 dc bc 51 7a d6 16 08 04 4a 5a 63 27 83 cf ed 70 0c 87 5f 50 6c 33 7d ec 0a cc 6b 51 39 5c be c8 5d d9 21 a9 c6 60 dd 93 24 7a 8e 45 0a c8 bf b4 6b 43 15 68 76 a8 03 97 d8 b4 03 97 2b b9 91 96 a0 65 fc 2a ce fd 51 59 9f 0f 63 ce a4 bf 7b 34 76 3d 50 d7 b5 2a 00 94 3a 63 ff 4a 37 76 c1 49 00 79 b5 52 37 7d 59 38 f7 b7 45 2e 01 c5 ff d6 31 e8 e4 48 13 ea 25 c8 0e 78 6c 5b 96 69 01 f6 5c 88 ee 38 3a 65 a5 cc 79 59 f2 0b 96 4e 56 b8 2c ce 27 d7 20 96 0b c1 b6 19 99 ec 6b af 29 f7 ad f0 b4 71 0b 5a 86 f2 37 35 ab ef 25 45 f0 db 0f 1a f8 eb 22 b2 7c 92 09 9d 1a 58 a7 68 e5 79 9f 25 18 5c 71 63 7c dd 2a 16 57 04 9e 6f 9e 0a 69 ea f9 f7 1f 74 40 b0 73 6f 1b 85 b9 a3 d0 b7 73 79 a5 ae ae 29 e7 36 e0 73 8d 8d 91 d4 62 e5 9e a9 97 e5 90 ac 4e 7c 64 51 ce 29 c5 fc 35 4a 06 de 60 24 59 9d 33 f0 5b 4d ae b5 cc d7 ce c5 a7 8b d1 99 76 0b 55 bb e8 17 cc b7 42 93 b6 14 90 5c 5c d4 3f cd cc db 15 63 b2 d3 a4 eb 58 90 b9 5b 73 bf bd fa 1a 8c 8d d1 fc ec d8 ad a0 8e e6 d6 00 f3 43 3b d8 32 b3 e6 9f ee f0 25 f6 ec 62 ff 0b cf 4b 87 4d 78 d8 b3 a9 a4 a8 9c 9e d8 29 1b dd 6b 72 38 37 be 0f f5 e4 15 b1 d0 4c 51 5b 50 cd 4c 38 0d c4 fa 04 50 87 06 09 b3 0d 7f ed ff b9 57 1b f6 d3 b4 70 e3 91 4b ef e2 81 21 26 e1 e5 ba c0 d9 95 ca 00 76 b4 13 4c e0 c6 f1 65 e9 b3 c6 fd ea 9a 6a 16 03 ac 1d a7 05 d8 ef 14 18 32 a0 16 ea 0d b6 bf 89 85 d6 6b 38 ff 3f 48 6c 39 0a 69 e5 ee 04 f6 83 82 8f 2c 87 02 16 0e c8 ad d5 37 b1 ac 21 56 e0 00 f7 da 5c f3 e3 a6 71 00 57 17 0c 14 76 92 b2 e9 1d f0 8a ee 9e a9 2e d1 db 25 f1 4b 42 74 d5 09 5e d8 bb f1 7b e1 69 cf c8 bc 26 42 9c 93 c6 ec 6b c2 df 34 24 5f 41 46 58 58 23 e1 2c b6 02 74 1e 82 df 17 c8 f1 9f ce cc 3a 9d 6b 5c 36 ba 5b 00 13 de 88 8f 49 ab cd d4 51 a8 62 fd 97 38 a3 68 0a f2 da 1f 48 8b 67 04 c2 5c c7 8c a1 b7 cf 99 2e a1 25 4e 10 82 43 13 26 91 50 80 53 7a ad 79 a5 10 06 d2 a8 b3 7a e1 e6 53 8b 98 d3 3b da 2d 73 96 0d ab 60 88 6c 4a 9f f0 24 41 8a 7a 47 1e 72 70 98 a9 2a 7d fa 93 ac 16 a0 e8 75 93 95 91 cf c9 67 79 c2 02 67 2f 00 1f 8d ac 69 74 7a bd 04 80 79 22 87 23 0c b3 b8 12 32 34 da 63 44 58 d3 c7 14 3d 2f b6 c0 69 f0 fd 7f d4 cd 16 4d e4 94 69 4e d9 68 c9 6b 69 1e 70 23 05 6d 04 b7 87 9c 6b 0f 31 28 2d b4 4d f5 8e ad fc 7d 63 de 19 f9 2d 7d 5e 9e fc 01 e7 3a dd 7e 26 7b 48 ec 97 45 31 14 1f b1 ce 49 21 ed 23 cd ca 8f 2c 9f 54 cd 1a 82 9c 8e 5e 9f dd 35 ac e4 83 78 20 c5 2f a3 c8 96 00 95 d9 54 f1 7b 39 b9 4c 39 ad 1e 93 d3 a7 59 d4 49 77 9e b8 bb d5 00 0b 43 0e 07 12 8d 21 e9 80 b2 eb 97 ee 40 7a 4e df cc 52 40 15 a4 e4 96 fc 09 ef 59 7c fe 39 de 42 70 24 c6 34 3d 6d d7 79 c9 e0 70 f7 b1 11 d8 2c dd 6f e0 94 96 63 ec 2c 2c 70 a7 9c b0 5a 81 ac ce 02 2f 79 50 74 d6 ae 5e 7a 4d f0 ed 3b 0e 74 af a0 f3 1d c0 2a aa 9e 07 bc 5c ab 17 6b cb 3a a5 3c 4e eb 0a ca 00 52 05 9d 3c b7 8e c7 a3 2d b9 71 7f 6e 3e 70 58 4e 4f c3 f6 ab 6b d8 52 41 92 09 62 6b e2 fb 6d db 22 93 f3 57 3b 06 8b 0b e7 84 07 ed f5 72 9f 3d 58 0d 22 33 a1 28 bb 8e ca b2 2b ff b4 e1 ba aa 2a 36 15 a4 77 e2 6b 28 55 f4 0b c1 3a a9 ea fd 30 e1 84 d0 43 c9 43 1d e0 0e ae ce fb 7a 4f a4 40 84 b7 c2 c0 cf a8 7e 9c 2f 5c 38 78 0c 23 7a 09 65 94 46 0c 87 8e e3 ce 3c 49 47 5a a5 09 96 b4 c1 fe b6 c8 43 63 a3 0c fe f6 31 68 a3 08 df 6d cf e4 be d7 69 3e b0 d0 bc 3d 4a 1a d6 bd 67 9c f7 4c d6 69 67 f6 57 ec #0 [715956ms] <- syz_emit_ethernet=0xfc0 errno=14 cover=262143 03:35:01 executing program 0: syz_emit_ethernet(0xfc0, &(0x7f00000059c0)={@multicast, @dev, @val={@void, {0x8100, 0x0, 0x1}}, {@llc_tr={0x11, {@llc={0x0, 0x0, '\'', "3c7656733d8900900dc685cb4ae186507b70bbbdddc3cf47ad44fddd172e8b4d916beb682fb01cda1f35c07dabbf23dea1ec1f0a8fc61e4f2ac5576b67b4786410fc2cb1bef18e944db918ed06d7014914a363282f597aa3d1259545ee84eafaa655946605886b4f0c02616d2194766d8f1f6f768260540c836e7b11ccc3ce41dd3172069a5ce18eb91c394ca3999877d7ac461169129bcd9d59b179d94d705907029fae82c50408b372feab23673d59e7aab0af8c3c5d11d41e8b752444b025b952778719711084134744388b1eda521c1476b8c5644fc232b51a7ba232557728f2678073d4311cb7b7b43c84d4bcb5180869980c4388177c1746837a62965045481f7a445dfe213698179b938d287e8b06cda39972cbd93dbd058cef72b6896fb511a3eeaab116525a5b19c3686cd017cccc9e1251dde0032a55c8dd0d96b8b504928b75655f44ddbff68a383b2abe5d0701d23ff170994d864c142696de8da8fe3e8e2f2c4bb6f0a173e0fd4f547ffc06a6f69f545c6deab108dbdf50bf8ca1d07cca53ff94d2ba96922f7b911ce176c5322c5052aba7cd6f0ffb997a05de5d6938a3cb9d56824929ebda8a031e2c5aa2343cb310e2a09eafbe48e76d371746368626f1ffd6fe563eef4d5262779698356e85e41a049946d2be74eccdec07020ab7ba678cbf4522c5cfa858eff267bbaabde254d1484f8f1e596e4c1b90ee743c45a99b0cb94b7a324f7f816eb88c252a51c931cadc1342d68b940e3eb1e7c99ea2d32f2af6a97f60ea94807287f31c81bdbe6d85fbabc44a831922ff59cde2d9a5a76211e5ed52e18e56aa2488b8b3a02aab21f2bab6c52cfd99b2c44e6635b37b3e5b40817d60d35297f6ace65afe63bc1b51ff74f8fbee7f8a0e889ce5eae76ed6a7bb2f7ba3aa2eb39a032e6178c1db0c91714ebe971202fae3f4f62cdda277f11edee7f961e65c15d39ac41a81c09267fc464028a7df6fd95f75fdc582ef0939c41f5feea3001de0dc5edbc736b6ac0886450b5a6dd250bb1021a354c70b3b08e1c5a9beb5801f610e8544c4b4491c20cd025a5d9fd33ea9f5c949fa6a5b5840a759dafbc28dca7cd58974779824ebd1e6f81e8e6a06a773c4329471de9cb16b3b414eef5b860f17b3e890cefb405668387eec285e99dc8dc7d6eaafe5840131929fa2b262798708eddeb572d64c72b2ebea296205996509b94175ce00d21b6f081f14f04fddc89127da43da6d025714b1271abf3b665f4109ac35550f0f06aac60316c753570842f37a58b4b2b7858028859c33a5f9720cc131bbe4650b4d5171f1b62c7e8e9c3b360db35434df75b7e28e783580aefa83acb1286c18c04ec29448fd31ca1bbf6c28b3f4f9cc28e6a88e208c499facdbfc309cea7d98b380ff071b18c5f10001cc4c2c021919fa378b5b8c6d772ec57cb8dc1464a12dedece7be2484a3878aadc9ac14f6a49d9e970c5089f978ab81d5b2ea0da1bbae1e4bddd0bcf775cc5953fad53bc92ca64c21958640db95c219fbfbe49fef93d9b3fabdf4f7c30eed2e41347db93da55aa3665602daee31d0bce8d3237ecd29ae1bf50dbea436a4955419e77771cd9af8519c4c39e43356c7da72d6cfd9c10c780fd6863fa7d0992025fae0b390a052d7cdcd7430c1aeda11d6702a414c473b8d585ee8920d72ee15344f1d304ae96e8590b66e432ba77c597b274fff8474e808af1ed1f7640cd808d245f12f920c26cfd4dc9fc10940f81f49a6cef5c599dfe13aff8e64bd9b30f4ce6076005ffd633e74bf127156dab0d8f3fae4c04358dfbc91eb556a4285cf5d8bdb4f52a02ee662bf54e92efe4d2c83f6630c3ea9da7893a6d75c2bb0779d78c861b210c5d5d8725b27d223dc1764471d14631b79909038e155035b2ffe9015e17b0a812964a4dcf5d4c8c04e5563e12cd737fec6b3a701b3e40dafdcd6b1bf9a39be5d98f5664e9aeddb05dd32a0aa3dc8dd190be2ab36aabdd78e88d38eddd6f125be5fa7bd4ccf770e042ccf2f33fcb2c1b69e3f86d6d8fe6013d273105499de5e09f7be1e87ff0a4ad2bb7078887a3d085ea518ea40a000be8e581bf659210c4e29435fe1eb5fc3cff81223473f68144e9d65e81b35d67fa2a3d7d0934f288b99484e794b9667bb271300f0412967da21a8bb43636e8bc530032883583e752f30f273978cbf3148cee4e377067d580e87017a0c47a6b081e9312b2f174843628cc032a3a6a17a4f667cb8fa174954c5924efb426e8bf25b2fed3ba2086448e9618f1d92aa8b6f6db090c9a72d569199571ee5ca9191c9dd92ec44f2dced8ff5834bf46a504698bf3496a9548132954c23ccfe53a4859978bd98fc52fff9fd379e19e23889f8583f4317691d96a7d9d2d6c5aef38171478d6b06c83bbc5d74312f7bf3439a2a3d2e003a020344cd3d6c01dcd7206d3a7d0cc9ee096005cca161b57a2b3f113cdced3aa3c1afe2d0cbf8dc27eb4fd8f1c1e50376c9ac446d3948c8de3eb8bfe8034aaf6351b1e26abf52cde6908907a4f54f4e3586ef057579840a6b9129c8f425fa085caaa4ddd466c42eb5675c9f3cdd024032f0bc80d8c2493d1a0da1dc1c825043f272234f60ee115852591184e0a008b32318e8efe5a9cac5f14c5e81e24b05cc86c8eb7afc5e2da9a5e8fd4f3b76c5d8f3169805b831e1ecf84dcb2c51e6b30b90397175d2519b342d256cfdf71ef4ebe50e46cc4a93475de9a1d6c5ffac6b9b99af619a1c0e615317a973706b4d5c9b7316fa327723e453ff2953cf76450f4dba5b2b1de835ac2ff62f9b444d0e4bdedd11b3c3df06fbca99d23d6e08275912a721a90a42957f7bc05dd776bbf9b47bc277508cb9c2f1b73ccfa99ca768cfea2f46f8df4020fbfe661ec48e97e7635e81d762067b481d5cc4a5af1106ae3f210aa6fe7780b382e2b0847c6a69f4e3886177a1fdffe1b5ed72144847ffffadfb525637fbe8ed10e7a30229d6b29b24f31ac3067277ec885aa6cba5a8eb9cc81bb3145a1256bfca728035b0cd0da77b08f409202aef2b8e1f1d3c75bc818344a9bb6b1c155dc6b9e267059471ddd3cfe436c051b9b935de5b66d0cc0e77468471a3e0258f200f2596582c0f62b85adb59d63bb7c5e20570f170aa53fee0d8feec641a4350c4107b0238c9bbe49953d7fc92ac3719acdeb8f8246080e1dd0c43e2873293e6582c2ac7c9ed76c20880e4f10ffa20a3087a33985ef9e6d0cffb3ccbe5e00df7668b98b6662f501ae334d4d5b26a025554725076f2aab8efccc6e89e61851b2f43e84afa33e413e98e13782e2b6aabcb19e268fc0ef096b847562f8749105a71c9f7bdddd9c2ec3a08e40224c4fe9aa43530b5ef255bc112dafc4a8744cca57032caba6eea2fd2499e3aeafea1a31ad08bdaca3604aafda4f207b0d7b399e7f491b359448779dcb19a84c3779977ebf5d8a704d3f008e1b1f42d16c257590fb2a8ca8d30b57854acaf80f9a88a8ccf0a39ebd417e3b7adf2adbd276121c2b6b3240faf15da6dfa8f75a5b1f202fc20fc82a5fd735003f60cca4c5e68360321096b4812e61d915e77ffd2f728f0cdffdd799f8913699fb3766f741b7ea070943db169cd4b42d16a511e2b97b0e2df13841a4ade97e0b9ffc75ff3828e30de87eb8b00a246a68def05fd17a4c5af1448fb353fb2e4cd71531b10e7261f50d475ee61985d2959e66752b2fbd2f1fe999d1334baaefaad825e93a3d7ce326abcdedbc5302e1b0eeaea59f93d5bcb5fa6d220b94f277e149940d9f8de5cf4a4a01a9b830dbd7abb81156799d68f114f5496e6d546a1cc58d0c0dbb1477f16cdd173d3e2e98fa8d519de944c182030855dcb879f302533fc5a214049779badbce59e25ca035e554c9384ba9929c61c6b42eca5deb32fcc51502a7b13ba4e6c5d1e127dc33b886479e575d3df9a31942987bdda3f49a479b6ea9fd6be84449b08165d20ec9f36e13f79026bd04bcef2ba58357643225b3df596d04a2a1c18fbca2530d795964d16619b9d981a37ef143b68f834ca43f8c6a6266fcc1240f92cf842faa0275f067bd243345c9cf5d8351a70777d699431bb233fb6374eeec7b8d10b91039ecd711529fe9c42c877ad819c6d12334d15a721c6c6d9b720e1dcbc517ad61608044a5a632783cfed700c875f506c337dec0acc6b51395cbec85dd921a9c660dd93247a8e450ac8bfb46b43156876a80397d8b403972bb99196a065fc2acefd51599f0f63cea4bf7b34763d50d7b52a00943a63ff4a3776c1490079b552377d5938f7b7452e01c5ffd631e8e44813ea25c80e786c5b966901f65c88ee383a65a5cc7959f20b964e56b82cce27d720960bc1b61999ec6baf29f7adf0b4710b5a86f23735abef2545f0db0f1af8eb22b27c92099d1a58a768e5799f25185c71637cdd2a1657049e6f9e0a69eaf9f71f7440b0736f1b85b9a3d0b77379a5aeae29e736e0738d8d91d462e59ea997e590ac4e7c6451ce29c5fc354a06de6024599d33f05b4daeb5ccd7cec5a78bd199760b55bbe817ccb74293b614905c5cd43fcdccdb1563b2d3a4eb5890b95b73bfbdfa1a8c8dd1fcecd8ada08ee6d600f3433bd832b3e69feef025f6ec62ff0bcf4b874d78d8b3a9a4a89c9ed8291bdd6b723837be0ff5e415b1d04c515b50cd4c380dc4fa0450870609b30d7fedffb9571bf6d3b470e3914befe2812126e1e5bac0d995ca0076b4134ce0c6f165e9b3c6fdea9a6a1603ac1da705d8ef141832a016ea0db6bf8985d66b38ff3f486c390a69e5ee04f683828f2c8702160ec8add537b1ac2156e000f7da5cf3e3a6710057170c147692b2e91df08aee9ea92ed1db25f14b4274d5095ed8bbf17be169cfc8bc26429c93c6ec6bc2df34245f4146585823e12cb602741e82df17c8f19fcecc3a9d6b5c36ba5b0013de888f49abcdd451a862fd9738a3680af2da1f488b6704c25cc78ca1b7cf992ea1254e1082431326915080537aad79a51006d2a8b37ae1e6538b98d33bda2d73960dab60886c4a9ff024418a7a471e727098a92a7dfa93ac16a0e875939591cfc96779c202672f001f8dac69747abd0480792287230cb3b8123234da634458d3c7143d2fb6c069f0fd7fd4cd164de494694ed968c96b691e7023056d04b7879c6b0f31282db44df58eadfc7d63de19f92d7d5e9efc01e73add7e267b48ec974531141fb1ce4921ed23cdca8f2c9f54cd1a829c8e5e9fdd35ace4837820c52fa3c8960095d954f17b39b94c39ad1e93d3a759d449779eb8bbd5000b430e07128d21e980b2eb97ee407a4edfcc524015a4e496fc09ef597cfe39de427024c6343d6dd779c9e070f7b111d82cdd6fe0949663ec2c2c70a79cb05a81acce022f795074d6ae5e7a4df0ed3b0e74afa0f31dc02aaa9e07bc5cab176bcb3aa53c4eeb0aca0052059d3cb78ec7a32db9717f6e3e70584e4fc3f6ab6bd852419209626be2fb6ddb2293f3573b068b0be78407edf5729f3d580d2233a128bb8ecab22bffb4e1baaa2a3615a477e26b2855f40bc13aa9eafd30e184d043c9431de00eaecefb7a4fa44084b7c2c0cfa87e9c2f5c38780c237a096594460c878ee3ce3c49475aa50996b4c1feb6c84363a30cfef63168a308df6dcfe4bed7693eb0d0bc3d4a1ad6bd679cf74cd66967f657ec"}}}}}, 0x0) 2033/05/18 03:35:01 result hanged=false: [715996ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167695 #0 [716005ms] -> syz_emit_ethernet(0xfc0, 0x200059c0, 0x0) bb bb bb bb bb bb aa aa aa aa aa 00 81 00 08 00 00 11 00 00 27 3c 76 56 73 3d 89 00 90 0d c6 85 cb 4a e1 86 50 7b 70 bb bd dd c3 cf 47 ad 44 fd dd 17 2e 8b 4d 91 6b eb 68 2f b0 1c da 1f 35 c0 7d ab bf 23 de a1 ec 1f 0a 8f c6 1e 4f 2a c5 57 6b 67 b4 78 64 10 fc 2c b1 be f1 8e 94 4d b9 18 ed 06 d7 01 49 14 a3 63 28 2f 59 7a a3 d1 25 95 45 ee 84 ea fa a6 55 94 66 05 88 6b 4f 0c 02 61 6d 21 94 76 6d 8f 1f 6f 76 82 60 54 0c 83 6e 7b 11 cc c3 ce 41 dd 31 72 06 9a 5c e1 8e b9 1c 39 4c a3 99 98 77 d7 ac 46 11 69 12 9b cd 9d 59 b1 79 d9 4d 70 59 07 02 9f ae 82 c5 04 08 b3 72 fe ab 23 67 3d 59 e7 aa b0 af 8c 3c 5d 11 d4 1e 8b 75 24 44 b0 25 b9 52 77 87 19 71 10 84 13 47 44 38 8b 1e da 52 1c 14 76 b8 c5 64 4f c2 32 b5 1a 7b a2 32 55 77 28 f2 67 80 73 d4 31 1c b7 b7 b4 3c 84 d4 bc b5 18 08 69 98 0c 43 88 17 7c 17 46 83 7a 62 96 50 45 48 1f 7a 44 5d fe 21 36 98 17 9b 93 8d 28 7e 8b 06 cd a3 99 72 cb d9 3d bd 05 8c ef 72 b6 89 6f b5 11 a3 ee aa b1 16 52 5a 5b 19 c3 68 6c d0 17 cc cc 9e 12 51 dd e0 03 2a 55 c8 dd 0d 96 b8 b5 04 92 8b 75 65 5f 44 dd bf f6 8a 38 3b 2a be 5d 07 01 d2 3f f1 70 99 4d 86 4c 14 26 96 de 8d a8 fe 3e 8e 2f 2c 4b b6 f0 a1 73 e0 fd 4f 54 7f fc 06 a6 f6 9f 54 5c 6d ea b1 08 db df 50 bf 8c a1 d0 7c ca 53 ff 94 d2 ba 96 92 2f 7b 91 1c e1 76 c5 32 2c 50 52 ab a7 cd 6f 0f fb 99 7a 05 de 5d 69 38 a3 cb 9d 56 82 49 29 eb da 8a 03 1e 2c 5a a2 34 3c b3 10 e2 a0 9e af be 48 e7 6d 37 17 46 36 86 26 f1 ff d6 fe 56 3e ef 4d 52 62 77 96 98 35 6e 85 e4 1a 04 99 46 d2 be 74 ec cd ec 07 02 0a b7 ba 67 8c bf 45 22 c5 cf a8 58 ef f2 67 bb aa bd e2 54 d1 48 4f 8f 1e 59 6e 4c 1b 90 ee 74 3c 45 a9 9b 0c b9 4b 7a 32 4f 7f 81 6e b8 8c 25 2a 51 c9 31 ca dc 13 42 d6 8b 94 0e 3e b1 e7 c9 9e a2 d3 2f 2a f6 a9 7f 60 ea 94 80 72 87 f3 1c 81 bd be 6d 85 fb ab c4 4a 83 19 22 ff 59 cd e2 d9 a5 a7 62 11 e5 ed 52 e1 8e 56 aa 24 88 b8 b3 a0 2a ab 21 f2 ba b6 c5 2c fd 99 b2 c4 4e 66 35 b3 7b 3e 5b 40 81 7d 60 d3 52 97 f6 ac e6 5a fe 63 bc 1b 51 ff 74 f8 fb ee 7f 8a 0e 88 9c e5 ea e7 6e d6 a7 bb 2f 7b a3 aa 2e b3 9a 03 2e 61 78 c1 db 0c 91 71 4e be 97 12 02 fa e3 f4 f6 2c dd a2 77 f1 1e de e7 f9 61 e6 5c 15 d3 9a c4 1a 81 c0 92 67 fc 46 40 28 a7 df 6f d9 5f 75 fd c5 82 ef 09 39 c4 1f 5f ee a3 00 1d e0 dc 5e db c7 36 b6 ac 08 86 45 0b 5a 6d d2 50 bb 10 21 a3 54 c7 0b 3b 08 e1 c5 a9 be b5 80 1f 61 0e 85 44 c4 b4 49 1c 20 cd 02 5a 5d 9f d3 3e a9 f5 c9 49 fa 6a 5b 58 40 a7 59 da fb c2 8d ca 7c d5 89 74 77 98 24 eb d1 e6 f8 1e 8e 6a 06 a7 73 c4 32 94 71 de 9c b1 6b 3b 41 4e ef 5b 86 0f 17 b3 e8 90 ce fb 40 56 68 38 7e ec 28 5e 99 dc 8d c7 d6 ea af e5 84 01 31 92 9f a2 b2 62 79 87 08 ed de b5 72 d6 4c 72 b2 eb ea 29 62 05 99 65 09 b9 41 75 ce 00 d2 1b 6f 08 1f 14 f0 4f dd c8 91 27 da 43 da 6d 02 57 14 b1 27 1a bf 3b 66 5f 41 09 ac 35 55 0f 0f 06 aa c6 03 16 c7 53 57 08 42 f3 7a 58 b4 b2 b7 85 80 28 85 9c 33 a5 f9 72 0c c1 31 bb e4 65 0b 4d 51 71 f1 b6 2c 7e 8e 9c 3b 36 0d b3 54 34 df 75 b7 e2 8e 78 35 80 ae fa 83 ac b1 28 6c 18 c0 4e c2 94 48 fd 31 ca 1b bf 6c 28 b3 f4 f9 cc 28 e6 a8 8e 20 8c 49 9f ac db fc 30 9c ea 7d 98 b3 80 ff 07 1b 18 c5 f1 00 01 cc 4c 2c 02 19 19 fa 37 8b 5b 8c 6d 77 2e c5 7c b8 dc 14 64 a1 2d ed ec e7 be 24 84 a3 87 8a ad c9 ac 14 f6 a4 9d 9e 97 0c 50 89 f9 78 ab 81 d5 b2 ea 0d a1 bb ae 1e 4b dd d0 bc f7 75 cc 59 53 fa d5 3b c9 2c a6 4c 21 95 86 40 db 95 c2 19 fb fb e4 9f ef 93 d9 b3 fa bd f4 f7 c3 0e ed 2e 41 34 7d b9 3d a5 5a a3 66 56 02 da ee 31 d0 bc e8 d3 23 7e cd 29 ae 1b f5 0d be a4 36 a4 95 54 19 e7 77 71 cd 9a f8 51 9c 4c 39 e4 33 56 c7 da 72 d6 cf d9 c1 0c 78 0f d6 86 3f a7 d0 99 20 25 fa e0 b3 90 a0 52 d7 cd cd 74 30 c1 ae da 11 d6 70 2a 41 4c 47 3b 8d 58 5e e8 92 0d 72 ee 15 34 4f 1d 30 4a e9 6e 85 90 b6 6e 43 2b a7 7c 59 7b 27 4f ff 84 74 e8 08 af 1e d1 f7 64 0c d8 08 d2 45 f1 2f 92 0c 26 cf d4 dc 9f c1 09 40 f8 1f 49 a6 ce f5 c5 99 df e1 3a ff 8e 64 bd 9b 30 f4 ce 60 76 00 5f fd 63 3e 74 bf 12 71 56 da b0 d8 f3 fa e4 c0 43 58 df bc 91 eb 55 6a 42 85 cf 5d 8b db 4f 52 a0 2e e6 62 bf 54 e9 2e fe 4d 2c 83 f6 63 0c 3e a9 da 78 93 a6 d7 5c 2b b0 77 9d 78 c8 61 b2 10 c5 d5 d8 72 5b 27 d2 23 dc 17 64 47 1d 14 63 1b 79 90 90 38 e1 55 03 5b 2f fe 90 15 e1 7b 0a 81 29 64 a4 dc f5 d4 c8 c0 4e 55 63 e1 2c d7 37 fe c6 b3 a7 01 b3 e4 0d af dc d6 b1 bf 9a 39 be 5d 98 f5 66 4e 9a ed db 05 dd 32 a0 aa 3d c8 dd 19 0b e2 ab 36 aa bd d7 8e 88 d3 8e dd d6 f1 25 be 5f a7 bd 4c cf 77 0e 04 2c cf 2f 33 fc b2 c1 b6 9e 3f 86 d6 d8 fe 60 13 d2 73 10 54 99 de 5e 09 f7 be 1e 87 ff 0a 4a d2 bb 70 78 88 7a 3d 08 5e a5 18 ea 40 a0 00 be 8e 58 1b f6 59 21 0c 4e 29 43 5f e1 eb 5f c3 cf f8 12 23 47 3f 68 14 4e 9d 65 e8 1b 35 d6 7f a2 a3 d7 d0 93 4f 28 8b 99 48 4e 79 4b 96 67 bb 27 13 00 f0 41 29 67 da 21 a8 bb 43 63 6e 8b c5 30 03 28 83 58 3e 75 2f 30 f2 73 97 8c bf 31 48 ce e4 e3 77 06 7d 58 0e 87 01 7a 0c 47 a6 b0 81 e9 31 2b 2f 17 48 43 62 8c c0 32 a3 a6 a1 7a 4f 66 7c b8 fa 17 49 54 c5 92 4e fb 42 6e 8b f2 5b 2f ed 3b a2 08 64 48 e9 61 8f 1d 92 aa 8b 6f 6d b0 90 c9 a7 2d 56 91 99 57 1e e5 ca 91 91 c9 dd 92 ec 44 f2 dc ed 8f f5 83 4b f4 6a 50 46 98 bf 34 96 a9 54 81 32 95 4c 23 cc fe 53 a4 85 99 78 bd 98 fc 52 ff f9 fd 37 9e 19 e2 38 89 f8 58 3f 43 17 69 1d 96 a7 d9 d2 d6 c5 ae f3 81 71 47 8d 6b 06 c8 3b bc 5d 74 31 2f 7b f3 43 9a 2a 3d 2e 00 3a 02 03 44 cd 3d 6c 01 dc d7 20 6d 3a 7d 0c c9 ee 09 60 05 cc a1 61 b5 7a 2b 3f 11 3c dc ed 3a a3 c1 af e2 d0 cb f8 dc 27 eb 4f d8 f1 c1 e5 03 76 c9 ac 44 6d 39 48 c8 de 3e b8 bf e8 03 4a af 63 51 b1 e2 6a bf 52 cd e6 90 89 07 a4 f5 4f 4e 35 86 ef 05 75 79 84 0a 6b 91 29 c8 f4 25 fa 08 5c aa a4 dd d4 66 c4 2e b5 67 5c 9f 3c dd 02 40 32 f0 bc 80 d8 c2 49 3d 1a 0d a1 dc 1c 82 50 43 f2 72 23 4f 60 ee 11 58 52 59 11 84 e0 a0 08 b3 23 18 e8 ef e5 a9 ca c5 f1 4c 5e 81 e2 4b 05 cc 86 c8 eb 7a fc 5e 2d a9 a5 e8 fd 4f 3b 76 c5 d8 f3 16 98 05 b8 31 e1 ec f8 4d cb 2c 51 e6 b3 0b 90 39 71 75 d2 51 9b 34 2d 25 6c fd f7 1e f4 eb e5 0e 46 cc 4a 93 47 5d e9 a1 d6 c5 ff ac 6b 9b 99 af 61 9a 1c 0e 61 53 17 a9 73 70 6b 4d 5c 9b 73 16 fa 32 77 23 e4 53 ff 29 53 cf 76 45 0f 4d ba 5b 2b 1d e8 35 ac 2f f6 2f 9b 44 4d 0e 4b de dd 11 b3 c3 df 06 fb ca 99 d2 3d 6e 08 27 59 12 a7 21 a9 0a 42 95 7f 7b c0 5d d7 76 bb f9 b4 7b c2 77 50 8c b9 c2 f1 b7 3c cf a9 9c a7 68 cf ea 2f 46 f8 df 40 20 fb fe 66 1e c4 8e 97 e7 63 5e 81 d7 62 06 7b 48 1d 5c c4 a5 af 11 06 ae 3f 21 0a a6 fe 77 80 b3 82 e2 b0 84 7c 6a 69 f4 e3 88 61 77 a1 fd ff e1 b5 ed 72 14 48 47 ff ff ad fb 52 56 37 fb e8 ed 10 e7 a3 02 29 d6 b2 9b 24 f3 1a c3 06 72 77 ec 88 5a a6 cb a5 a8 eb 9c c8 1b b3 14 5a 12 56 bf ca 72 80 35 b0 cd 0d a7 7b 08 f4 09 20 2a ef 2b 8e 1f 1d 3c 75 bc 81 83 44 a9 bb 6b 1c 15 5d c6 b9 e2 67 05 94 71 dd d3 cf e4 36 c0 51 b9 b9 35 de 5b 66 d0 cc 0e 77 46 84 71 a3 e0 25 8f 20 0f 25 96 58 2c 0f 62 b8 5a db 59 d6 3b b7 c5 e2 05 70 f1 70 aa 53 fe e0 d8 fe ec 64 1a 43 50 c4 10 7b 02 38 c9 bb e4 99 53 d7 fc 92 ac 37 19 ac de b8 f8 24 60 80 e1 dd 0c 43 e2 87 32 93 e6 58 2c 2a c7 c9 ed 76 c2 08 80 e4 f1 0f fa 20 a3 08 7a 33 98 5e f9 e6 d0 cf fb 3c cb e5 e0 0d f7 66 8b 98 b6 66 2f 50 1a e3 34 d4 d5 b2 6a 02 55 54 72 50 76 f2 aa b8 ef cc c6 e8 9e 61 85 1b 2f 43 e8 4a fa 33 e4 13 e9 8e 13 78 2e 2b 6a ab cb 19 e2 68 fc 0e f0 96 b8 47 56 2f 87 49 10 5a 71 c9 f7 bd dd d9 c2 ec 3a 08 e4 02 24 c4 fe 9a a4 35 30 b5 ef 25 5b c1 12 da fc 4a 87 44 cc a5 70 32 ca ba 6e ea 2f d2 49 9e 3a ea fe a1 a3 1a d0 8b da ca 36 04 aa fd a4 f2 07 b0 d7 b3 99 e7 f4 91 b3 59 44 87 79 dc b1 9a 84 c3 77 99 77 eb f5 d8 a7 04 d3 f0 08 e1 b1 f4 2d 16 c2 57 59 0f b2 a8 ca 8d 30 b5 78 54 ac af 80 f9 a8 8a 8c cf 0a 39 eb d4 17 e3 b7 ad f2 ad bd 27 61 21 c2 b6 b3 24 0f af 15 da 6d fa 8f 75 a5 b1 f2 02 fc 20 fc 82 a5 fd 73 50 03 f6 0c ca 4c 5e 68 36 03 21 09 6b 48 12 e6 1d 91 5e 77 ff d2 f7 28 f0 cd ff dd 79 9f 89 13 69 9f b3 76 6f 74 1b 7e a0 70 94 3d b1 69 cd 4b 42 d1 6a 51 1e 2b 97 b0 e2 df 13 84 1a 4a de 97 e0 b9 ff c7 5f f3 82 8e 30 de 87 eb 8b 00 a2 46 a6 8d ef 05 fd 17 a4 c5 af 14 48 fb 35 3f b2 e4 cd 71 53 1b 10 e7 26 1f 50 d4 75 ee 61 98 5d 29 59 e6 67 52 b2 fb d2 f1 fe 99 9d 13 34 ba ae fa ad 82 5e 93 a3 d7 ce 32 6a bc de db c5 30 2e 1b 0e ea ea 59 f9 3d 5b cb 5f a6 d2 20 b9 4f 27 7e 14 99 40 d9 f8 de 5c f4 a4 a0 1a 9b 83 0d bd 7a bb 81 15 67 99 d6 8f 11 4f 54 96 e6 d5 46 a1 cc 58 d0 c0 db b1 47 7f 16 cd d1 73 d3 e2 e9 8f a8 d5 19 de 94 4c 18 20 30 85 5d cb 87 9f 30 25 33 fc 5a 21 40 49 77 9b ad bc e5 9e 25 ca 03 5e 55 4c 93 84 ba 99 29 c6 1c 6b 42 ec a5 de b3 2f cc 51 50 2a 7b 13 ba 4e 6c 5d 1e 12 7d c3 3b 88 64 79 e5 75 d3 df 9a 31 94 29 87 bd da 3f 49 a4 79 b6 ea 9f d6 be 84 44 9b 08 16 5d 20 ec 9f 36 e1 3f 79 02 6b d0 4b ce f2 ba 58 35 76 43 22 5b 3d f5 96 d0 4a 2a 1c 18 fb ca 25 30 d7 95 96 4d 16 61 9b 9d 98 1a 37 ef 14 3b 68 f8 34 ca 43 f8 c6 a6 26 6f cc 12 40 f9 2c f8 42 fa a0 27 5f 06 7b d2 43 34 5c 9c f5 d8 35 1a 70 77 7d 69 94 31 bb 23 3f b6 37 4e ee c7 b8 d1 0b 91 03 9e cd 71 15 29 fe 9c 42 c8 77 ad 81 9c 6d 12 33 4d 15 a7 21 c6 c6 d9 b7 20 e1 dc bc 51 7a d6 16 08 04 4a 5a 63 27 83 cf ed 70 0c 87 5f 50 6c 33 7d ec 0a cc 6b 51 39 5c be c8 5d d9 21 a9 c6 60 dd 93 24 7a 8e 45 0a c8 bf b4 6b 43 15 68 76 a8 03 97 d8 b4 03 97 2b b9 91 96 a0 65 fc 2a ce fd 51 59 9f 0f 63 ce a4 bf 7b 34 76 3d 50 d7 b5 2a 00 94 3a 63 ff 4a 37 76 c1 49 00 79 b5 52 37 7d 59 38 f7 b7 45 2e 01 c5 ff d6 31 e8 e4 48 13 ea 25 c8 0e 78 6c 5b 96 69 01 f6 5c 88 ee 38 3a 65 a5 cc 79 59 f2 0b 96 4e 56 b8 2c ce 27 d7 20 96 0b c1 b6 19 99 ec 6b af 29 f7 ad f0 b4 71 0b 5a 86 f2 37 35 ab ef 25 45 f0 db 0f 1a f8 eb 22 b2 7c 92 09 9d 1a 58 a7 68 e5 79 9f 25 18 5c 71 63 7c dd 2a 16 57 04 9e 6f 9e 0a 69 ea f9 f7 1f 74 40 b0 73 6f 1b 85 b9 a3 d0 b7 73 79 a5 ae ae 29 e7 36 e0 73 8d 8d 91 d4 62 e5 9e a9 97 e5 90 ac 4e 7c 64 51 ce 29 c5 fc 35 4a 06 de 60 24 59 9d 33 f0 5b 4d ae b5 cc d7 ce c5 a7 8b d1 99 76 0b 55 bb e8 17 cc b7 42 93 b6 14 90 5c 5c d4 3f cd cc db 15 63 b2 d3 a4 eb 58 90 b9 5b 73 bf bd fa 1a 8c 8d d1 fc ec d8 ad a0 8e e6 d6 00 f3 43 3b d8 32 b3 e6 9f ee f0 25 f6 ec 62 ff 0b cf 4b 87 4d 78 d8 b3 a9 a4 a8 9c 9e d8 29 1b dd 6b 72 38 37 be 0f f5 e4 15 b1 d0 4c 51 5b 50 cd 4c 38 0d c4 fa 04 50 87 06 09 b3 0d 7f ed ff b9 57 1b f6 d3 b4 70 e3 91 4b ef e2 81 21 26 e1 e5 ba c0 d9 95 ca 00 76 b4 13 4c e0 c6 f1 65 e9 b3 c6 fd ea 9a 6a 16 03 ac 1d a7 05 d8 ef 14 18 32 a0 16 ea 0d b6 bf 89 85 d6 6b 38 ff 3f 48 6c 39 0a 69 e5 ee 04 f6 83 82 8f 2c 87 02 16 0e c8 ad d5 37 b1 ac 21 56 e0 00 f7 da 5c f3 e3 a6 71 00 57 17 0c 14 76 92 b2 e9 1d f0 8a ee 9e a9 2e d1 db 25 f1 4b 42 74 d5 09 5e d8 bb f1 7b e1 69 cf c8 bc 26 42 9c 93 c6 ec 6b c2 df 34 24 5f 41 46 58 58 23 e1 2c b6 02 74 1e 82 df 17 c8 f1 9f ce cc 3a 9d 6b 5c 36 ba 5b 00 13 de 88 8f 49 ab cd d4 51 a8 62 fd 97 38 a3 68 0a f2 da 1f 48 8b 67 04 c2 5c c7 8c a1 b7 cf 99 2e a1 25 4e 10 82 43 13 26 91 50 80 53 7a ad 79 a5 10 06 d2 a8 b3 7a e1 e6 53 8b 98 d3 3b da 2d 73 96 0d ab 60 88 6c 4a 9f f0 24 41 8a 7a 47 1e 72 70 98 a9 2a 7d fa 93 ac 16 a0 e8 75 93 95 91 cf c9 67 79 c2 02 67 2f 00 1f 8d ac 69 74 7a bd 04 80 79 22 87 23 0c b3 b8 12 32 34 da 63 44 58 d3 c7 14 3d 2f b6 c0 69 f0 fd 7f d4 cd 16 4d e4 94 69 4e d9 68 c9 6b 69 1e 70 23 05 6d 04 b7 87 9c 6b 0f 31 28 2d b4 4d f5 8e ad fc 7d 63 de 19 f9 2d 7d 5e 9e fc 01 e7 3a dd 7e 26 7b 48 ec 97 45 31 14 1f b1 ce 49 21 ed 23 cd ca 8f 2c 9f 54 cd 1a 82 9c 8e 5e 9f dd 35 ac e4 83 78 20 c5 2f a3 c8 96 00 95 d9 54 f1 7b 39 b9 4c 39 ad 1e 93 d3 a7 59 d4 49 77 9e b8 bb d5 00 0b 43 0e 07 12 8d 21 e9 80 b2 eb 97 ee 40 7a 4e df cc 52 40 15 a4 e4 96 fc 09 ef 59 7c fe 39 de 42 70 24 c6 34 3d 6d d7 79 c9 e0 70 f7 b1 11 d8 2c dd 6f e0 94 96 63 ec 2c 2c 70 a7 9c b0 5a 81 ac ce 02 2f 79 50 74 d6 ae 5e 7a 4d f0 ed 3b 0e 74 af a0 f3 1d c0 2a aa 9e 07 bc 5c ab 17 6b cb 3a a5 3c 4e eb 0a ca 00 52 05 9d 3c b7 8e c7 a3 2d b9 71 7f 6e 3e 70 58 4e 4f c3 f6 ab 6b d8 52 41 92 09 62 6b e2 fb 6d db 22 93 f3 57 3b 06 8b 0b e7 84 07 ed f5 72 9f 3d 58 0d 22 33 a1 28 bb 8e ca b2 2b ff b4 e1 ba aa 2a 36 15 a4 77 e2 6b 28 55 f4 0b c1 3a a9 ea fd 30 e1 84 d0 43 c9 43 1d e0 0e ae ce fb 7a 4f a4 40 84 b7 c2 c0 cf a8 7e 9c 2f 5c 38 78 0c 23 7a 09 65 94 46 0c 87 8e e3 ce 3c 49 47 5a a5 09 96 b4 c1 fe b6 c8 43 63 a3 0c fe f6 31 68 a3 08 df 6d cf e4 be d7 69 3e b0 d0 bc 3d 4a 1a d6 bd 67 9c f7 4c d6 69 67 f6 57 ec #0 [716044ms] <- syz_emit_ethernet=0xfc0 errno=14 cover=262143 03:35:01 executing program 0: syz_emit_ethernet(0xfc0, &(0x7f00000059c0)={@multicast, @dev, @val={@void, {0x8100, 0x0, 0x1}}, {@llc_tr={0x11, {@llc={0x0, 0x0, '\'', "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"}}}}}, 0x0) 2033/05/18 03:35:01 result hanged=false: [716084ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167697 #0 [716094ms] -> syz_emit_ethernet(0xfc0, 0x200059c0, 0x0) bb bb bb bb bb bb aa aa aa aa aa 00 81 00 08 00 00 11 00 00 27 3c 76 56 73 3d 89 00 90 0d c6 85 cb 4a e1 86 50 7b 70 bb bd dd c3 cf 47 ad 44 fd dd 17 2e 8b 4d 91 6b eb 68 2f b0 1c da 1f 35 c0 7d ab bf 23 de a1 ec 1f 0a 8f c6 1e 4f 2a c5 57 6b 67 b4 78 64 10 fc 2c b1 be f1 8e 94 4d b9 18 ed 06 d7 01 49 14 a3 63 28 2f 59 7a a3 d1 25 95 45 ee 84 ea fa a6 55 94 66 05 88 6b 4f 0c 02 61 6d 21 94 76 6d 8f 1f 6f 76 82 60 54 0c 83 6e 7b 11 cc c3 ce 41 dd 31 72 06 9a 5c e1 8e b9 1c 39 4c a3 99 98 77 d7 ac 46 11 69 12 9b cd 9d 59 b1 79 d9 4d 70 59 07 02 9f ae 82 c5 04 08 b3 72 fe ab 23 67 3d 59 e7 aa b0 af 8c 3c 5d 11 d4 1e 8b 75 24 44 b0 25 b9 52 77 87 19 71 10 84 13 47 44 38 8b 1e da 52 1c 14 76 b8 c5 64 4f c2 32 b5 1a 7b a2 32 55 77 28 f2 67 80 73 d4 31 1c b7 b7 b4 3c 84 d4 bc b5 18 08 69 98 0c 43 88 17 7c 17 46 83 7a 62 96 50 45 48 1f 7a 44 5d fe 21 36 98 17 9b 93 8d 28 7e 8b 06 cd a3 99 72 cb d9 3d bd 05 8c ef 72 b6 89 6f b5 11 a3 ee aa b1 16 52 5a 5b 19 c3 68 6c d0 17 cc cc 9e 12 51 dd e0 03 2a 55 c8 dd 0d 96 b8 b5 04 92 8b 75 65 5f 44 dd bf f6 8a 38 3b 2a be 5d 07 01 d2 3f f1 70 99 4d 86 4c 14 26 96 de 8d a8 fe 3e 8e 2f 2c 4b b6 f0 a1 73 e0 fd 4f 54 7f fc 06 a6 f6 9f 54 5c 6d ea b1 08 db df 50 bf 8c a1 d0 7c ca 53 ff 94 d2 ba 96 92 2f 7b 91 1c e1 76 c5 32 2c 50 52 ab a7 cd 6f 0f fb 99 7a 05 de 5d 69 38 a3 cb 9d 56 82 49 29 eb da 8a 03 1e 2c 5a a2 34 3c b3 10 e2 a0 9e af be 48 e7 6d 37 17 46 36 86 26 f1 ff d6 fe 56 3e ef 4d 52 62 77 96 98 35 6e 85 e4 1a 04 99 46 d2 be 74 ec cd ec 07 02 0a b7 ba 67 8c bf 45 22 c5 cf a8 58 ef f2 67 bb aa bd e2 54 d1 48 4f 8f 1e 59 6e 4c 1b 90 ee 74 3c 45 a9 9b 0c b9 4b 7a 32 4f 7f 81 6e b8 8c 25 2a 51 c9 31 ca dc 13 42 d6 8b 94 0e 3e b1 e7 c9 9e a2 d3 2f 2a f6 a9 7f 60 ea 94 80 72 87 f3 1c 81 bd be 6d 85 fb ab c4 4a 83 19 22 ff 59 cd e2 d9 a5 a7 62 11 e5 ed 52 e1 8e 56 aa 24 88 b8 b3 a0 2a ab 21 f2 ba b6 c5 2c fd 99 b2 c4 4e 66 35 b3 7b 3e 5b 40 81 7d 60 d3 52 97 f6 ac e6 5a fe 63 bc 1b 51 ff 74 f8 fb ee 7f 8a 0e 88 9c e5 ea e7 6e d6 a7 bb 2f 7b a3 aa 2e b3 9a 03 2e 61 78 c1 db 0c 91 71 4e be 97 12 02 fa e3 f4 f6 2c dd a2 77 f1 1e de e7 f9 61 e6 5c 15 d3 9a c4 1a 81 c0 92 67 fc 46 40 28 a7 df 6f d9 5f 75 fd c5 82 ef 09 39 c4 1f 5f ee a3 00 1d e0 dc 5e db c7 36 b6 ac 08 86 45 0b 5a 6d d2 50 bb 10 21 a3 54 c7 0b 3b 08 e1 c5 a9 be b5 80 1f 61 0e 85 44 c4 b4 49 1c 20 cd 02 5a 5d 9f d3 3e a9 f5 c9 49 fa 6a 5b 58 40 a7 59 da fb c2 8d ca 7c d5 89 74 77 98 24 eb d1 e6 f8 1e 8e 6a 06 a7 73 c4 32 94 71 de 9c b1 6b 3b 41 4e ef 5b 86 0f 17 b3 e8 90 ce fb 40 56 68 38 7e ec 28 5e 99 dc 8d c7 d6 ea af e5 84 01 31 92 9f a2 b2 62 79 87 08 ed de b5 72 d6 4c 72 b2 eb ea 29 62 05 99 65 09 b9 41 75 ce 00 d2 1b 6f 08 1f 14 f0 4f dd c8 91 27 da 43 da 6d 02 57 14 b1 27 1a bf 3b 66 5f 41 09 ac 35 55 0f 0f 06 aa c6 03 16 c7 53 57 08 42 f3 7a 58 b4 b2 b7 85 80 28 85 9c 33 a5 f9 72 0c c1 31 bb e4 65 0b 4d 51 71 f1 b6 2c 7e 8e 9c 3b 36 0d b3 54 34 df 75 b7 e2 8e 78 35 80 ae fa 83 ac b1 28 6c 18 c0 4e c2 94 48 fd 31 ca 1b bf 6c 28 b3 f4 f9 cc 28 e6 a8 8e 20 8c 49 9f ac db fc 30 9c ea 7d 98 b3 80 ff 07 1b 18 c5 f1 00 01 cc 4c 2c 02 19 19 fa 37 8b 5b 8c 6d 77 2e c5 7c b8 dc 14 64 a1 2d ed ec e7 be 24 84 a3 87 8a ad c9 ac 14 f6 a4 9d 9e 97 0c 50 89 f9 78 ab 81 d5 b2 ea 0d a1 bb ae 1e 4b dd d0 bc f7 75 cc 59 53 fa d5 3b c9 2c a6 4c 21 95 86 40 db 95 c2 19 fb fb e4 9f ef 93 d9 b3 fa bd f4 f7 c3 0e ed 2e 41 34 7d b9 3d a5 5a a3 66 56 02 da ee 31 d0 bc e8 d3 23 7e cd 29 ae 1b f5 0d be a4 36 a4 95 54 19 e7 77 71 cd 9a f8 51 9c 4c 39 e4 33 56 c7 da 72 d6 cf d9 c1 0c 78 0f d6 86 3f a7 d0 99 20 25 fa e0 b3 90 a0 52 d7 cd cd 74 30 c1 ae da 11 d6 70 2a 41 4c 47 3b 8d 58 5e e8 92 0d 72 ee 15 34 4f 1d 30 4a e9 6e 85 90 b6 6e 43 2b a7 7c 59 7b 27 4f ff 84 74 e8 08 af 1e d1 f7 64 0c d8 08 d2 45 f1 2f 92 0c 26 cf d4 dc 9f c1 09 40 f8 1f 49 a6 ce f5 c5 99 df e1 3a ff 8e 64 bd 9b 30 f4 ce 60 76 00 5f fd 63 3e 74 bf 12 71 56 da b0 d8 f3 fa e4 c0 43 58 df bc 91 eb 55 6a 42 85 cf 5d 8b db 4f 52 a0 2e e6 62 bf 54 e9 2e fe 4d 2c 83 f6 63 0c 3e a9 da 78 93 a6 d7 5c 2b b0 77 9d 78 c8 61 b2 10 c5 d5 d8 72 5b 27 d2 23 dc 17 64 47 1d 14 63 1b 79 90 90 38 e1 55 03 5b 2f fe 90 15 e1 7b 0a 81 29 64 a4 dc f5 d4 c8 c0 4e 55 63 e1 2c d7 37 fe c6 b3 a7 01 b3 e4 0d af dc d6 b1 bf 9a 39 be 5d 98 f5 66 4e 9a ed db 05 dd 32 a0 aa 3d c8 dd 19 0b e2 ab 36 aa bd d7 8e 88 d3 8e dd d6 f1 25 be 5f a7 bd 4c cf 77 0e 04 2c cf 2f 33 fc b2 c1 b6 9e 3f 86 d6 d8 fe 60 13 d2 73 10 54 99 de 5e 09 f7 be 1e 87 ff 0a 4a d2 bb 70 78 88 7a 3d 08 5e a5 18 ea 40 a0 00 be 8e 58 1b f6 59 21 0c 4e 29 43 5f e1 eb 5f c3 cf f8 12 23 47 3f 68 14 4e 9d 65 e8 1b 35 d6 7f a2 a3 d7 d0 93 4f 28 8b 99 48 4e 79 4b 96 67 bb 27 13 00 f0 41 29 67 da 21 a8 bb 43 63 6e 8b c5 30 03 28 83 58 3e 75 2f 30 f2 73 97 8c bf 31 48 ce e4 e3 77 06 7d 58 0e 87 01 7a 0c 47 a6 b0 81 e9 31 2b 2f 17 48 43 62 8c c0 32 a3 a6 a1 7a 4f 66 7c b8 fa 17 49 54 c5 92 4e fb 42 6e 8b f2 5b 2f ed 3b a2 08 64 48 e9 61 8f 1d 92 aa 8b 6f 6d b0 90 c9 a7 2d 56 91 99 57 1e e5 ca 91 91 c9 dd 92 ec 44 f2 dc ed 8f f5 83 4b f4 6a 50 46 98 bf 34 96 a9 54 81 32 95 4c 23 cc fe 53 a4 85 99 78 bd 98 fc 52 ff f9 fd 37 9e 19 e2 38 89 f8 58 3f 43 17 69 1d 96 a7 d9 d2 d6 c5 ae f3 81 71 47 8d 6b 06 c8 3b bc 5d 74 31 2f 7b f3 43 9a 2a 3d 2e 00 3a 02 03 44 cd 3d 6c 01 dc d7 20 6d 3a 7d 0c c9 ee 09 60 05 cc a1 61 b5 7a 2b 3f 11 3c dc ed 3a a3 c1 af e2 d0 cb f8 dc 27 eb 4f d8 f1 c1 e5 03 76 c9 ac 44 6d 39 48 c8 de 3e b8 bf e8 03 4a af 63 51 b1 e2 6a bf 52 cd e6 90 89 07 a4 f5 4f 4e 35 86 ef 05 75 79 84 0a 6b 91 29 c8 f4 25 fa 08 5c aa a4 dd d4 66 c4 2e b5 67 5c 9f 3c dd 02 40 32 f0 bc 80 d8 c2 49 3d 1a 0d a1 dc 1c 82 50 43 f2 72 23 4f 60 ee 11 58 52 59 11 84 e0 a0 08 b3 23 18 e8 ef e5 a9 ca c5 f1 4c 5e 81 e2 4b 05 cc 86 c8 eb 7a fc 5e 2d a9 a5 e8 fd 4f 3b 76 c5 d8 f3 16 98 05 b8 31 e1 ec f8 4d cb 2c 51 e6 b3 0b 90 39 71 75 d2 51 9b 34 2d 25 6c fd f7 1e f4 eb e5 0e 46 cc 4a 93 47 5d e9 a1 d6 c5 ff ac 6b 9b 99 af 61 9a 1c 0e 61 53 17 a9 73 70 6b 4d 5c 9b 73 16 fa 32 77 23 e4 53 ff 29 53 cf 76 45 0f 4d ba 5b 2b 1d e8 35 ac 2f f6 2f 9b 44 4d 0e 4b de dd 11 b3 c3 df 06 fb ca 99 d2 3d 6e 08 27 59 12 a7 21 a9 0a 42 95 7f 7b c0 5d d7 76 bb f9 b4 7b c2 77 50 8c b9 c2 f1 b7 3c cf a9 9c a7 68 cf ea 2f 46 f8 df 40 20 fb fe 66 1e c4 8e 97 e7 63 5e 81 d7 62 06 7b 48 1d 5c c4 a5 af 11 06 ae 3f 21 0a a6 fe 77 80 b3 82 e2 b0 84 7c 6a 69 f4 e3 88 61 77 a1 fd ff e1 b5 ed 72 14 48 47 ff ff ad fb 52 56 37 fb e8 ed 10 e7 a3 02 29 d6 b2 9b 24 f3 1a c3 06 72 77 ec 88 5a a6 cb a5 a8 eb 9c c8 1b b3 14 5a 12 56 bf ca 72 80 35 b0 cd 0d a7 7b 08 f4 09 20 2a ef 2b 8e 1f 1d 3c 75 bc 81 83 44 a9 bb 6b 1c 15 5d c6 b9 e2 67 05 94 71 dd d3 cf e4 36 c0 51 b9 b9 35 de 5b 66 d0 cc 0e 77 46 84 71 a3 e0 25 8f 20 0f 25 96 58 2c 0f 62 b8 5a db 59 d6 3b b7 c5 e2 05 70 f1 70 aa 53 fe e0 d8 fe ec 64 1a 43 50 c4 10 7b 02 38 c9 bb e4 99 53 d7 fc 92 ac 37 19 ac de b8 f8 24 60 80 e1 dd 0c 43 e2 87 32 93 e6 58 2c 2a c7 c9 ed 76 c2 08 80 e4 f1 0f fa 20 a3 08 7a 33 98 5e f9 e6 d0 cf fb 3c cb e5 e0 0d f7 66 8b 98 b6 66 2f 50 1a e3 34 d4 d5 b2 6a 02 55 54 72 50 76 f2 aa b8 ef cc c6 e8 9e 61 85 1b 2f 43 e8 4a fa 33 e4 13 e9 8e 13 78 2e 2b 6a ab cb 19 e2 68 fc 0e f0 96 b8 47 56 2f 87 49 10 5a 71 c9 f7 bd dd d9 c2 ec 3a 08 e4 02 24 c4 fe 9a a4 35 30 b5 ef 25 5b c1 12 da fc 4a 87 44 cc a5 70 32 ca ba 6e ea 2f d2 49 9e 3a ea fe a1 a3 1a d0 8b da ca 36 04 aa fd a4 f2 07 b0 d7 b3 99 e7 f4 91 b3 59 44 87 79 dc b1 9a 84 c3 77 99 77 eb f5 d8 a7 04 d3 f0 08 e1 b1 f4 2d 16 c2 57 59 0f b2 a8 ca 8d 30 b5 78 54 ac af 80 f9 a8 8a 8c cf 0a 39 eb d4 17 e3 b7 ad f2 ad bd 27 61 21 c2 b6 b3 24 0f af 15 da 6d fa 8f 75 a5 b1 f2 02 fc 20 fc 82 a5 fd 73 50 03 f6 0c ca 4c 5e 68 36 03 21 09 6b 48 12 e6 1d 91 5e 77 ff d2 f7 28 f0 cd ff dd 79 9f 89 13 69 9f b3 76 6f 74 1b 7e a0 70 94 3d b1 69 cd 4b 42 d1 6a 51 1e 2b 97 b0 e2 df 13 84 1a 4a de 97 e0 b9 ff c7 5f f3 82 8e 30 de 87 eb 8b 00 a2 46 a6 8d ef 05 fd 17 a4 c5 af 14 48 fb 35 3f b2 e4 cd 71 53 1b 10 e7 26 1f 50 d4 75 ee 61 98 5d 29 59 e6 67 52 b2 fb d2 f1 fe 99 9d 13 34 ba ae fa ad 82 5e 93 a3 d7 ce 32 6a bc de db c5 30 2e 1b 0e ea ea 59 f9 3d 5b cb 5f a6 d2 20 b9 4f 27 7e 14 99 40 d9 f8 de 5c f4 a4 a0 1a 9b 83 0d bd 7a bb 81 15 67 99 d6 8f 11 4f 54 96 e6 d5 46 a1 cc 58 d0 c0 db b1 47 7f 16 cd d1 73 d3 e2 e9 8f a8 d5 19 de 94 4c 18 20 30 85 5d cb 87 9f 30 25 33 fc 5a 21 40 49 77 9b ad bc e5 9e 25 ca 03 5e 55 4c 93 84 ba 99 29 c6 1c 6b 42 ec a5 de b3 2f cc 51 50 2a 7b 13 ba 4e 6c 5d 1e 12 7d c3 3b 88 64 79 e5 75 d3 df 9a 31 94 29 87 bd da 3f 49 a4 79 b6 ea 9f d6 be 84 44 9b 08 16 5d 20 ec 9f 36 e1 3f 79 02 6b d0 4b ce f2 ba 58 35 76 43 22 5b 3d f5 96 d0 4a 2a 1c 18 fb ca 25 30 d7 95 96 4d 16 61 9b 9d 98 1a 37 ef 14 3b 68 f8 34 ca 43 f8 c6 a6 26 6f cc 12 40 f9 2c f8 42 fa a0 27 5f 06 7b d2 43 34 5c 9c f5 d8 35 1a 70 77 7d 69 94 31 bb 23 3f b6 37 4e ee c7 b8 d1 0b 91 03 9e cd 71 15 29 fe 9c 42 c8 77 ad 81 9c 6d 12 33 4d 15 a7 21 c6 c6 d9 b7 20 e1 dc bc 51 7a d6 16 08 04 4a 5a 63 27 83 cf ed 70 0c 87 5f 50 6c 33 7d ec 0a cc 6b 51 39 5c be c8 5d d9 21 a9 c6 60 dd 93 24 7a 8e 45 0a c8 bf b4 6b 43 15 68 76 a8 03 97 d8 b4 03 97 2b b9 91 96 a0 65 fc 2a ce fd 51 59 9f 0f 63 ce a4 bf 7b 34 76 3d 50 d7 b5 2a 00 94 3a 63 ff 4a 37 76 c1 49 00 79 b5 52 37 7d 59 38 f7 b7 45 2e 01 c5 ff d6 31 e8 e4 48 13 ea 25 c8 0e 78 6c 5b 96 69 01 f6 5c 88 ee 38 3a 65 a5 cc 79 59 f2 0b 96 4e 56 b8 2c ce 27 d7 20 96 0b c1 b6 19 99 ec 6b af 29 f7 ad f0 b4 71 0b 5a 86 f2 37 35 ab ef 25 45 f0 db 0f 1a f8 eb 22 b2 7c 92 09 9d 1a 58 a7 68 e5 79 9f 25 18 5c 71 63 7c dd 2a 16 57 04 9e 6f 9e 0a 69 ea f9 f7 1f 74 40 b0 73 6f 1b 85 b9 a3 d0 b7 73 79 a5 ae ae 29 e7 36 e0 73 8d 8d 91 d4 62 e5 9e a9 97 e5 90 ac 4e 7c 64 51 ce 29 c5 fc 35 4a 06 de 60 24 59 9d 33 f0 5b 4d ae b5 cc d7 ce c5 a7 8b d1 99 76 0b 55 bb e8 17 cc b7 42 93 b6 14 90 5c 5c d4 3f cd cc db 15 63 b2 d3 a4 eb 58 90 b9 5b 73 bf bd fa 1a 8c 8d d1 fc ec d8 ad a0 8e e6 d6 00 f3 43 3b d8 32 b3 e6 9f ee f0 25 f6 ec 62 ff 0b cf 4b 87 4d 78 d8 b3 a9 a4 a8 9c 9e d8 29 1b dd 6b 72 38 37 be 0f f5 e4 15 b1 d0 4c 51 5b 50 cd 4c 38 0d c4 fa 04 50 87 06 09 b3 0d 7f ed ff b9 57 1b f6 d3 b4 70 e3 91 4b ef e2 81 21 26 e1 e5 ba c0 d9 95 ca 00 76 b4 13 4c e0 c6 f1 65 e9 b3 c6 fd ea 9a 6a 16 03 ac 1d a7 05 d8 ef 14 18 32 a0 16 ea 0d b6 bf 89 85 d6 6b 38 ff 3f 48 6c 39 0a 69 e5 ee 04 f6 83 82 8f 2c 87 02 16 0e c8 ad d5 37 b1 ac 21 56 e0 00 f7 da 5c f3 e3 a6 71 00 57 17 0c 14 76 92 b2 e9 1d f0 8a ee 9e a9 2e d1 db 25 f1 4b 42 74 d5 09 5e d8 bb f1 7b e1 69 cf c8 bc 26 42 9c 93 c6 ec 6b c2 df 34 24 5f 41 46 58 58 23 e1 2c b6 02 74 1e 82 df 17 c8 f1 9f ce cc 3a 9d 6b 5c 36 ba 5b 00 13 de 88 8f 49 ab cd d4 51 a8 62 fd 97 38 a3 68 0a f2 da 1f 48 8b 67 04 c2 5c c7 8c a1 b7 cf 99 2e a1 25 4e 10 82 43 13 26 91 50 80 53 7a ad 79 a5 10 06 d2 a8 b3 7a e1 e6 53 8b 98 d3 3b da 2d 73 96 0d ab 60 88 6c 4a 9f f0 24 41 8a 7a 47 1e 72 70 98 a9 2a 7d fa 93 ac 16 a0 e8 75 93 95 91 cf c9 67 79 c2 02 67 2f 00 1f 8d ac 69 74 7a bd 04 80 79 22 87 23 0c b3 b8 12 32 34 da 63 44 58 d3 c7 14 3d 2f b6 c0 69 f0 fd 7f d4 cd 16 4d e4 94 69 4e d9 68 c9 6b 69 1e 70 23 05 6d 04 b7 87 9c 6b 0f 31 28 2d b4 4d f5 8e ad fc 7d 63 de 19 f9 2d 7d 5e 9e fc 01 e7 3a dd 7e 26 7b 48 ec 97 45 31 14 1f b1 ce 49 21 ed 23 cd ca 8f 2c 9f 54 cd 1a 82 9c 8e 5e 9f dd 35 ac e4 83 78 20 c5 2f a3 c8 96 00 95 d9 54 f1 7b 39 b9 4c 39 ad 1e 93 d3 a7 59 d4 49 77 9e b8 bb d5 00 0b 43 0e 07 12 8d 21 e9 80 b2 eb 97 ee 40 7a 4e df cc 52 40 15 a4 e4 96 fc 09 ef 59 7c fe 39 de 42 70 24 c6 34 3d 6d d7 79 c9 e0 70 f7 b1 11 d8 2c dd 6f e0 94 96 63 ec 2c 2c 70 a7 9c b0 5a 81 ac ce 02 2f 79 50 74 d6 ae 5e 7a 4d f0 ed 3b 0e 74 af a0 f3 1d c0 2a aa 9e 07 bc 5c ab 17 6b cb 3a a5 3c 4e eb 0a ca 00 52 05 9d 3c b7 8e c7 a3 2d b9 71 7f 6e 3e 70 58 4e 4f c3 f6 ab 6b d8 52 41 92 09 62 6b e2 fb 6d db 22 93 f3 57 3b 06 8b 0b e7 84 07 ed f5 72 9f 3d 58 0d 22 33 a1 28 bb 8e ca b2 2b ff b4 e1 ba aa 2a 36 15 a4 77 e2 6b 28 55 f4 0b c1 3a a9 ea fd 30 e1 84 d0 43 c9 43 1d e0 0e ae ce fb 7a 4f a4 40 84 b7 c2 c0 cf a8 7e 9c 2f 5c 38 78 0c 23 7a 09 65 94 46 0c 87 8e e3 ce 3c 49 47 5a a5 09 96 b4 c1 fe b6 c8 43 63 a3 0c fe f6 31 68 a3 08 df 6d cf e4 be d7 69 3e b0 d0 bc 3d 4a 1a d6 bd 67 9c f7 4c d6 69 67 f6 57 ec #0 [716134ms] <- syz_emit_ethernet=0xfc0 errno=14 cover=262143 2033/05/18 03:35:01 result hanged=false: 2033/05/18 03:35:01 added new input for call #0 syz_emit_ethernet to corpus: syz_emit_ethernet(0xfc0, &(0x7f00000059c0)={@multicast, @dev, @val={@void, {0x8100, 0x0, 0x1}}, {@llc_tr={0x11, {@llc={0x0, 0x0, '\'', "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"}}}}}, 0x0) 03:35:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/protocols\x00') ftruncate(r0, 0x0) [716178ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167699 #0 [716187ms] -> syz_open_procfs(0x0, 0x20000240) #0 [716190ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2370 #0 [716190ms] -> ftruncate(0xffffffffffffffff, 0x0) #0 [716190ms] <- ftruncate=0xffffffffffffffff errno=9 cover=47 enabling collider #0 [716191ms] -> syz_open_procfs(0x0, 0x20000240) #0 [716191ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2400 03:35:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 2033/05/18 03:35:01 result hanged=false: [716211ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167701 #0 [716222ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [716226ms] <- openat=0x3 errno=14 cover=6859 #0 [716228ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [716230ms] <- openat=0xffffffffffffffff errno=2 cover=1188 #0 [716230ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [716231ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 enabling collider #0 [716231ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [716231ms] <- openat=0x3 errno=14 cover=1135 #0 [716232ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [716232ms] <- openat=0xffffffffffffffff errno=2 cover=1165 pthread_create failed (errno 11) 03:35:01 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x23, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, '-$+*/'}}, 0x23) 2033/05/18 03:35:01 result hanged=false: [716285ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167803 #0 [716295ms] -> pipe2$9p(0x20000000, 0x0) #0 [716297ms] <- pipe2$9p=0x0 errno=14 cover=2044 #0 [716299ms] -> write$P9_RGETLOCK(0x4, 0x20000040, 0x23) #0 [716302ms] <- write$P9_RGETLOCK=0x23 errno=14 cover=372 enabling collider #0 [716303ms] -> pipe2$9p(0x20000000, 0x0) #0 [716304ms] <- pipe2$9p=0x0 errno=14 cover=1264 #0 [716305ms] -> write$P9_RGETLOCK(0x4, 0x20000040, 0x23) #0 [716305ms] <- write$P9_RGETLOCK=0xffffffffffffffff errno=9 cover=48 03:35:01 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x10}, 0x10}}, 0x0) 2033/05/18 03:35:01 result hanged=false: [716325ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167805 #0 [716336ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [716336ms] <- socket$nl_audit=0x3 errno=14 cover=1408 #0 [716337ms] -> sendmsg$AUDIT_USER_AVC(0x3, 0x200003c0, 0x0) #0 [716338ms] <- sendmsg$AUDIT_USER_AVC=0x10 errno=14 cover=1465 enabling collider #0 [716339ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [716339ms] <- socket$nl_audit=0x3 errno=14 cover=1421 #0 [716340ms] -> sendmsg$AUDIT_USER_AVC(0x3, 0x200003c0, 0x0) #0 [716340ms] <- sendmsg$AUDIT_USER_AVC=0xffffffffffffffff errno=9 cover=53 03:35:01 executing program 0: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x44459cda, 0x10) 2033/05/18 03:35:01 result hanged=false: [716362ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167807 #0 [716372ms] -> splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x44459cda, 0x10) #0 [716373ms] <- splice=0xffffffffffffffff errno=22 cover=35 enabling collider #0 [716375ms] -> splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x44459cda, 0x10) #0 [716375ms] <- splice=0xffffffffffffffff errno=22 cover=35 03:35:01 executing program 0: setpgid(0x0, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x211080, 0x0) write$tcp_congestion(r0, &(0x7f0000000040)='bbr\x00', 0x4) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) waitid(0x1, 0x0, &(0x7f00000000c0), 0x4, &(0x7f0000000140)) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={0x0}}, 0x40c0) fork() r1 = getpid() r2 = fork() waitid(0x2, r2, &(0x7f0000000300), 0x2, &(0x7f0000000380)) r3 = getpgrp(r2) setpgid(r3, r1) clock_getres(0x5, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000780)='ns/cgroup\x00') 2033/05/18 03:35:01 result hanged=false: [716394ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167809 #0 [716404ms] -> setpgid(0x0, 0x0) #0 [716405ms] <- setpgid=0x0 errno=14 cover=149 #0 [716405ms] -> openat$hpet(0xffffffffffffff9c, 0x20000000, 0x211080, 0x0) #0 [716405ms] <- openat$hpet=0xffffffffffffffff errno=2 cover=1179 #0 [716405ms] -> write$tcp_congestion(0xffffffffffffffff, 0x20000040, 0x4) #0 [716406ms] <- write$tcp_congestion=0xffffffffffffffff errno=9 cover=47 #0 [716406ms] -> fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) #0 [716406ms] <- fsconfig$FSCONFIG_SET_FLAG=0xffffffffffffffff errno=22 cover=35 #0 [716406ms] -> getpgrp(0xffffffffffffffff) #0 [716406ms] <- getpgrp=0x28f81 errno=14 cover=48 #0 [716406ms] -> waitid(0x1, 0x0, 0x200000c0, 0x4, 0x20000140) #0 [716406ms] <- waitid=0xffffffffffffffff errno=22 cover=52 #0 [716406ms] -> sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x200002c0, 0x40c0) #0 [716406ms] <- sendmsg$GTP_CMD_GETPDP=0xffffffffffffffff errno=9 cover=52 #0 [716406ms] -> fork() #0 [716423ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [716424ms] -> getpid() #0 [716424ms] <- getpid=0x28f81 errno=14 cover=48 #0 [716424ms] -> fork() #0 [716442ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [716443ms] -> waitid(0x2, 0x0, 0x20000300, 0x2, 0x20000380) #0 [716443ms] <- waitid=0xffffffffffffffff errno=10 cover=315 #0 [716444ms] -> getpgrp(0x0) #0 [716444ms] <- getpgrp=0x28f81 errno=14 cover=48 #0 [716444ms] -> setpgid(0x28f81, 0x28f81) #0 [716444ms] <- setpgid=0x0 errno=14 cover=133 #0 [716444ms] -> clock_getres(0x5, 0x0) #0 [716444ms] <- clock_getres=0x0 errno=14 cover=43 #0 [716444ms] -> syz_open_procfs$namespace(0x28f81, 0x20000780) #0 [716444ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=2427 enabling collider #0 [716444ms] -> setpgid(0x0, 0x0) #0 [716444ms] <- setpgid=0x0 errno=14 cover=149 #0 [716445ms] -> openat$hpet(0xffffffffffffff9c, 0x20000000, 0x211080, 0x0) #0 [716445ms] <- openat$hpet=0xffffffffffffffff errno=2 cover=1156 pthread_create failed (errno 11) 03:35:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/if_inet6\x00') readv(r0, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) 2033/05/18 03:35:01 result hanged=false: [716496ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167913 #0 [716507ms] -> syz_open_procfs(0x0, 0x20000240) #0 [716507ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2408 #0 [716508ms] -> readv(0xffffffffffffffff, 0x20001540, 0x2) #0 [716508ms] <- readv=0xffffffffffffffff errno=9 cover=47 enabling collider #0 [716508ms] -> syz_open_procfs(0x0, 0x20000240) #0 [716510ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2406 03:35:01 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000003b00)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003740)={0x14}, 0x14}}, 0x0) syz_open_dev$hiddev(&(0x7f0000003c80), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 2033/05/18 03:35:01 result hanged=false: 2033/05/18 03:35:01 poll: candidates=8 inputs=0 signal=0 [716530ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167915 #0 [716541ms] -> syz_genetlink_get_family_id$ethtool(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [716544ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=9680 #0 [716546ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [716549ms] <- socket$nl_generic=0x3 errno=14 cover=1458 #0 [716550ms] -> sendmsg$ETHTOOL_MSG_WOL_SET(0x3, 0x20003b00, 0x0) #0 [716553ms] <- sendmsg$ETHTOOL_MSG_WOL_SET=0x14 errno=14 cover=1180 #0 [716553ms] -> syz_open_dev$hiddev(0x20003c80, 0x0, 0x0) #0 [716554ms] <- syz_open_dev$hiddev=0xffffffffffffffff errno=2 cover=1181 #0 [716554ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [716555ms] <- socket$inet6_udp=0x4 errno=14 cover=1694 enabling collider #0 [716556ms] -> syz_genetlink_get_family_id$ethtool(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [716557ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=7924 #0 [716558ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [716560ms] <- socket$nl_generic=0x3 errno=14 cover=1411 pthread_create failed (errno 11) 03:35:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) 2033/05/18 03:35:02 result hanged=false: [716614ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 168017 #0 [716624ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [716625ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1158 #0 [716626ms] -> sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, 0x20000540, 0x0) #0 [716626ms] <- sendmsg$IEEE802154_LLSEC_GETPARAMS=0xffffffffffffffff errno=9 cover=52 #0 [716626ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [716627ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1204 #0 [716627ms] -> syz_genetlink_get_family_id$ieee802154(0x20000ac0, 0xffffffffffffffff) syz_genetlink_get_family_id(802.15.4 MAC, -1) netlink: failed to get family id for 802.15.4 MAC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [716629ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=2 cover=8090 enabling collider #0 [716630ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [716630ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1205 #0 [716631ms] -> sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, 0x20000540, 0x0) #0 [716632ms] <- sendmsg$IEEE802154_LLSEC_GETPARAMS=0xffffffffffffffff errno=9 cover=52 pthread_create failed (errno 11) 03:35:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000007f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000007100)=""/67, 0x43}, 0xfffffff9}], 0x1, 0x0, &(0x7f0000008040)) syz_genetlink_get_family_id$smc(&(0x7f00000080c0), r0) 2033/05/18 03:35:02 result hanged=false: [716683ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 168119 #0 [716694ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [716695ms] <- socket$nl_generic=0x3 errno=14 cover=1437 #0 [716696ms] -> recvmmsg(0x3, 0x20007f00, 0x1, 0x0, 0x20008040) 2033/05/18 03:35:02 poll: candidates=0 inputs=0 signal=0 pthread_create failed (errno 11) 03:35:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x7f94cedf969ce946) 2033/05/18 03:35:03 result hanged=false: [717747ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 168221 #0 [717755ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [717757ms] <- syz_open_dev$tty20=0xffffffffffffffff errno=2 cover=1192 #0 [717758ms] -> ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x7f94cedf969ce946) #0 [717758ms] <- ioctl$TCXONC=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [717760ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [717761ms] <- syz_open_dev$tty20=0xffffffffffffffff errno=2 cover=1177 #0 [717762ms] -> ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x7f94cedf969ce946) #0 [717762ms] <- ioctl$TCXONC=0xffffffffffffffff errno=9 cover=45 03:35:03 executing program 0: syz_open_dev$sg(0xffffffffffffffff, 0x0, 0x0) setitimer(0x2, 0x0, &(0x7f00000026c0)) 2033/05/18 03:35:03 result hanged=false: [717781ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 168223 #0 [717789ms] -> syz_open_dev$sg(0xffffffffffffffff, 0x0, 0x0) SIGSEGV on 0xffffffffffffffc0, skipping #0 [717789ms] <- syz_open_dev$sg=0xffffffffffffffff errno=14 cover=1027 #0 [717790ms] -> setitimer(0x2, 0x0, 0x200026c0) #0 [717790ms] <- setitimer=0x0 errno=14 cover=779 enabling collider #0 [717790ms] -> syz_open_dev$sg(0xffffffffffffffff, 0x0, 0x0) SIGSEGV on 0xffffffffffffffc0, skipping #0 [717790ms] <- syz_open_dev$sg=0xffffffffffffffff errno=14 cover=722 2033/05/18 03:35:03 result hanged=false: 03:35:03 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='ext2\x00', 0x0, 0x0) [717805ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 168225 #0 [717814ms] -> mkdirat(0xffffffffffffff9c, 0x200000c0, 0x0) #0 [717814ms] <- mkdirat=0x0 errno=14 cover=11414 #0 [717815ms] -> mount(0x20000080, 0x200001c0, 0x20000200, 0x0, 0x0) #0 [717815ms] <- mount=0xffffffffffffffff errno=2 cover=2460 enabling collider #0 [717815ms] -> mkdirat(0xffffffffffffff9c, 0x200000c0, 0x0) #0 [717815ms] <- mkdirat=0xffffffffffffffff errno=17 cover=572 2033/05/18 03:35:03 result hanged=false: 03:35:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0xdfd, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) [717830ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 168227 #0 [717838ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000300) #0 [717839ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=4745 #0 [717840ms] -> chdir(0x20000040) #0 [717840ms] <- chdir=0xffffffffffffffff errno=2 cover=906 #0 [717840ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [717840ms] <- openat=0x3 errno=14 cover=6728 #0 [717841ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [717841ms] <- openat=0xffffffffffffffff errno=2 cover=1166 #0 [717841ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0x3, 0x0, 0xdfd, 0x0) #0 [717841ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [717841ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [717841ms] <- openat=0x4 errno=14 cover=1038 #0 [717841ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [717841ms] <- openat=0x5 errno=14 cover=6374 #0 [717842ms] -> sendfile(0x5, 0x4, 0x0, 0x7ffffff9) #0 [717842ms] <- sendfile=0x0 errno=14 cover=1647 enabling collider #0 [717842ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000300) #0 [717843ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=4891 #0 [717843ms] -> chdir(0x20000040) #0 [717843ms] <- chdir=0xffffffffffffffff errno=20 cover=536 pthread_create failed (errno 11) 03:35:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) dup2(r1, r0) 2033/05/18 03:35:03 result hanged=false: [717884ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 168329 #0 [717896ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [717901ms] <- perf_event_open=0x3 errno=14 cover=8852 #0 [717902ms] -> creat(0x200000c0, 0x0) #0 [717903ms] <- creat=0x4 errno=14 cover=12483 #0 [717904ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [717905ms] <- openat$vga_arbiter=0xffffffffffffffff errno=2 cover=3870 #0 [717905ms] -> openat$dir(0xffffffffffffff9c, 0x200001c0, 0x0, 0x0) #0 [717906ms] <- openat$dir=0x5 errno=14 cover=2714 #0 [717907ms] -> dup2(0x5, 0xffffffffffffffff) #0 [717907ms] <- dup2=0xffffffffffffffff errno=9 cover=39 enabling collider #0 [717920ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [717921ms] <- perf_event_open=0x3 errno=14 cover=8186 #0 [717922ms] -> creat(0x200000c0, 0x0) #0 [717923ms] <- creat=0x4 errno=14 cover=9206 pthread_create failed (errno 11) 03:35:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x80000001, 0x4) 2033/05/18 03:35:03 result hanged=false: 2033/05/18 03:35:03 poll: candidates=8 inputs=0 signal=0 [717991ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 168431 #0 [717999ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [718000ms] <- socket$nl_netfilter=0x3 errno=14 cover=1427 #0 [718000ms] -> setsockopt$sock_int(0x3, 0x1, 0x6, 0x200000c0, 0x4) #0 [718000ms] <- setsockopt$sock_int=0x0 errno=14 cover=134 enabling collider #0 [718000ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [718000ms] <- socket$nl_netfilter=0x3 errno=14 cover=1404 2033/05/18 03:35:03 result hanged=false: 03:35:03 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000008580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000008980)) [718015ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 168433 #0 [718022ms] -> recvmmsg(0xffffffffffffffff, 0x20008580, 0x1, 0x0, 0x0) #0 [718025ms] <- recvmmsg=0xffffffffffffffff errno=9 cover=54 #0 [718027ms] -> prctl$PR_GET_PDEATHSIG(0x2, 0x20008980) #0 [718028ms] <- prctl$PR_GET_PDEATHSIG=0x0 errno=22 cover=48 enabling collider #0 [718029ms] -> recvmmsg(0xffffffffffffffff, 0x20008580, 0x1, 0x0, 0x0) #0 [718029ms] <- recvmmsg=0xffffffffffffffff errno=9 cover=54 03:35:03 executing program 0: r0 = inotify_init1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x16000100) inotify_add_watch(r0, &(0x7f0000000180)='.\x00', 0x6) creat(&(0x7f0000000080)='./file0\x00', 0x0) 2033/05/18 03:35:03 result hanged=false: [718050ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 168435 #0 [718057ms] -> inotify_init1(0x0) #0 [718059ms] <- inotify_init1=0x3 errno=14 cover=593 #0 [718062ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [718063ms] <- openat=0x4 errno=14 cover=6914 #0 [718065ms] -> inotify_add_watch(0x3, 0x20000100, 0x16000100) #0 [718065ms] <- inotify_add_watch=0x1 errno=14 cover=1121 #0 [718066ms] -> inotify_add_watch(0x3, 0x20000180, 0x6) #0 [718066ms] <- inotify_add_watch=0x2 errno=14 cover=949 #0 [718066ms] -> creat(0x20000080, 0x0) #0 [718068ms] <- creat=0x5 errno=14 cover=13610 enabling collider #0 [718073ms] -> inotify_init1(0x0) #0 [718073ms] <- inotify_init1=0x3 errno=14 cover=603 #0 [718074ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [718074ms] <- openat=0xffffffffffffffff errno=17 cover=993 pthread_create failed (errno 11) 2033/05/18 03:35:03 result hanged=false: 03:35:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)) [718118ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 168537 #0 [718128ms] -> syz_mount_image$ext4(0x20000080, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x20001240) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' syz_mount_image > mount error: 22 #0 [718130ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=2411 enabling collider #0 [718130ms] -> syz_mount_image$ext4(0x20000080, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x20001240) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' syz_mount_image > mount error: 22 #0 [718131ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=2386 03:35:03 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_SPLICE, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:35:03 result hanged=false: [718150ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 168539 #0 [718160ms] -> syz_io_uring_setup(0x4d4f, 0x20000080, 0x200a0000, 0x20ffc000, 0x20000200, 0x20000140) #0 [718166ms] <- syz_io_uring_setup=0x3 errno=14 cover=17934 #0 [718166ms] -> syz_io_uring_submit(0x200a0000, 0x20ffc000, 0x200001c0, 0x0) #0 [718166ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [718166ms] -> mmap$IORING_OFF_SQ_RING(0x20ffc000, 0x4000, 0x100000e, 0x13, 0x3, 0x0) #0 [718167ms] <- mmap$IORING_OFF_SQ_RING=0x20ffc000 errno=14 cover=1950 #0 [718167ms] -> syz_io_uring_submit(0x20ffc000, 0x20ffc000, 0x20000100, 0x4) #0 [718167ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [718167ms] -> io_uring_enter(0x3, 0x58ab, 0x0, 0x0, 0x0, 0x0) #0 [718167ms] <- io_uring_enter=0x2 errno=14 cover=405 enabling collider #0 [718167ms] -> syz_io_uring_setup(0x4d4f, 0x20000080, 0x200a0000, 0x20ffc000, 0x20000200, 0x20000140) #0 [718169ms] <- syz_io_uring_setup=0x3 errno=14 cover=27833 #0 [718169ms] -> syz_io_uring_submit(0x200a0000, 0x20ffc000, 0x200001c0, 0x0) #0 [718169ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 pthread_create failed (errno 11) 03:35:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000000)=""/132, 0x84) 2033/05/18 03:35:03 result hanged=false: [718213ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 168641 #0 [718223ms] -> syz_open_procfs(0x0, 0x200000c0) #0 [718227ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2418 #0 [718228ms] -> getdents(0xffffffffffffffff, 0x20000000, 0x84) #0 [718228ms] <- getdents=0xffffffffffffffff errno=9 cover=46 enabling collider #0 [718228ms] -> syz_open_procfs(0x0, 0x200000c0) #0 [718228ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2391 03:35:03 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x224, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x3f000000) 2033/05/18 03:35:03 result hanged=false: [718245ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 168643 #0 [718254ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [718256ms] <- perf_event_open=0x3 errno=14 cover=8480 #0 [718257ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [718260ms] <- perf_event_open=0x4 errno=14 cover=76822 #0 [718261ms] -> dup3(0x3, 0x4, 0x3f000000) #0 [718261ms] <- dup3=0xffffffffffffffff errno=22 cover=35 enabling collider #0 [718292ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [718293ms] <- perf_event_open=0x3 errno=14 cover=8372 #0 [718294ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [718297ms] <- perf_event_open=0x4 errno=14 cover=76657 pthread_create failed (errno 11) 03:35:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r1, &(0x7f0000001780)=[{&(0x7f0000000180)="6dee8e204b6a2f4e271d0e4a1fcb1ce3e4793ee70bc47bf95511035001ca1a60e1ae3b3d59a653cf0e40e7cf92844c55e026cac2b754d54db8d5ec094331d3ca89c864e9a611c637bd51d37e036da1bec9a273dc5900f3a35658ebdb1b743e8448e7e4fb4a07d0dc6985a6ae847165a7b4821d0b49f8bc68801ce9b01184ee5639d2179ccb2f525abbea588c8194817c282231ac7f79b4eb3dccf6479f8a35b5b31855951f967fe8e555d0659590f2c5ce75be38827bace81453daacc3b4213fc5e373f8d5902fd89384be4da50397d2a3", 0xd1}, {&(0x7f0000000280)="6822ac9abf9216c04757d17f0f6eab373a8e147f7d865412641515d5b9d3633a8f0b4086b22f72ac609205871710a9611e67f377cb9f2900c40ad50a1239d8b60d198ff0ba6a4de4976848b843c69dc47a43d55499ed9db01048a35819d1e8f2a21aa2cfd94b4e32ed359c9f9641ba416bf5c48fc42209b366dc8215616e9c12db48fbceb16e7344335b4f8a0bc9ff7b35dd48d2ada4fd665ae9fcdb3f075a7370c66000d5a02f31268a5e9080eac66b6a99ebd36ea47cb02eef048f460e86c45af0f9c95687c0199288ad1bd30c25a87f467ef90bcdbfbdbcef58ff70a97526f526c0dad49eb2f1a43dd5323bb7eb7ce6", 0xf1}, {&(0x7f0000000500)="d60aa62df344abda0c27a976af5f410971a4a2e76ec3863d126a90ea302d62a0bf23ff321826774312f963afbf605c09569b92588a4c2d9def033fd0a6ebe3b0551eef0764e1079e0d328ea560bcfff58b8bb0be081c82a08519943ccae70b1c1be910a1bf5cbb9ba10b1f86170fc75c812de12bb54afa8af81ee712da6796bc38f0ff55373b49c5f336eebdb8df8c83d93a55ce42eeaef004f08ee87c0b9722ecc0b992104f3e33044ab00b40b1d79ee4b1f4ff31754ade8a7a45b419c3966f41bc70c1b573df3eb64aad7dc040e7a4a95aadc0e102b98e58abf82cd52128b71b2906c387344777bd46e87fa972ead552f7a9db32fa74a0e755a5bf2dc50229607a4d37620ae589b459c33475a2b95871bfbbb8b1e19ae5ac24c474a501b9fcf3c930247bef3fae6043170f64e419a06cb66a9ebc4edb2b5b688f83453f48415e260027e87d12fc13ae3bc24b52d4f7042fcbb3bc8621cd82812b63358f94927949d856c19fef26a8b80bfc5e7781caae32aa57f891dccb0a4d425a152c8e44e3d6404641cb1fb35e5c59771e1bed48ecab9d5fe73dc261d69d970c24ab565723033a19d818f9c029dca69b020cfb528c39a451fa590882faa20e2b4e1605708b82620448d5cd63af736de8cebc926fba8fee5ef752127680718b187284cfabc6b20e149c64171bfcf5bdd475d1efda258e6e391ed6bf5340bdc21e5cf1459879505d04c52fd6b4a841c815868ec6d7ca8fac74c2c19a65747ac42dce617627fcee6feaa7b671e1f433e81f659fcb1084b4e3c3ac290a13ba85eb9656e2de256d2c73278e154d4cd5d18e84a9061a1ddf1118a565beaf4db3fe2a221223a8ab02ab5dbef768602df52bf7dbc2769906371b31461948dd019038a23b2ac01740eead64c27e70d5eec46dfd02ba7135e5e0752fcb936f690fb79e2c006301cb4367dcb20141efdbcf936442f7c923a1e2e2d3c143355bb87fdabd1871830d28173c9dda64aeb6f4aa8d1929263a1673869e6dae174f4260c5829786474f6579ca60bae42699401706ac6e2e43f8fe08a9e51b8051034a541b0c8add3ae00cf3db9ade207f895d09c39df1c903cf348f29496e508f790f0d612eeef6e2d81cfd07943b5161e8a1ff51af21f7846eb5051f82aaae51ec6144ca8ded60be408d56e63a8a776af7f4a1c85aa305940840b7301c1707a62202b534a17a91bc4aac307a982d487baf4a4763a67633a0c4cc7c196abd630fa0924d0d52baa09ddc7c738dd0683fac3659f63d44a848061f446083f7594b2010599b315654f1424203b2940be09d1848a56b7cbdf360785337f8cf73328f6f8762bc5e51bfc777875db61a2cbb2983e225816037e5ba77e805d8d649e6f4d3f68a81fef7d0733e53c95a565ddeb4efe36ef6be22db0fa4623dae6576fd1acc635ba1eda3437b52ef4f562bac20355969fc0b7ef8b226e046db5f80153f2f1bd891df0466ac1c1819d4a51babab7398644673bdd49cd6c59e6b8cb897829948b3fb187fc23b3a6a093e60ccd291bf4ab5037c41c04bc1d58f30677c74a8c49640b647e2861cc262864ed931807a1bcdd5f8b65e766a90174a1184fb0944a10a3c4ab0bcdd6ba401013bf47908daa70bc6127442413ad9053da88cf741b32becd6416cb1c3303e9ee9fe6aceaf6a80d9355ea57002e5d89a495c2092a5248602d6f7f31f7be715739cfbe2fb7ad1f187d7e890b28a489a8aee2063ed365d0243cbc0261299da21e537ff46c684ada97243cb78466cf5d22daf89af3bcc8ca9475f4c7dad5d4fdb72a52e80164228ff5bbb3f2b3552e53b4476903138ff6d636bb5217be53c1024a9ed6ef39b1defa4ddd2cd3b6c1d8fd3572e8c5b43885ac3c2dbc50cf5555ae4262b1836ec727ca93289cb01c4eef07f326911e746e753e2c2950a1f88cc9e85a1e2830b025a95284df44a7ae5d34f1f9296167722a0d10995dde25ae54c6d4c6934481918365aa589ac3c9b60ddd4f012b7075a7723b62c936c0add022fa1f91993948ec681b91d22e17709c655c8c547dfa12e86e5b711a3dceb9247eb93a1234779d6b8bfee9f354d1d5a9995af88da4018154db8dee0921a25f6e26c2be6770661ad3356760a389cc2fe6bbae2e0402a98833d20cfcebaccdffccf9a5e381431621dbb1b69a4f2eccbc93aa1bdc82ea99efdf448d19887be789d7cf41a5dc3a22cab5df429f146903682b3cbf6870dafc5453c8212c39a6853cc333c91ce272189e2b8223c49a730d2832ed064ff4763d97eacea8d480c8e2ab9a5086a436f81bf3c93661dac4cbfa088173bf27ecc7d420421418ab100ded34ee091f06739673b3123ce13696edb50a02e822332ebd4c101b09bd0a35984c4bb5d9c183ef95018d32c09e301e297e94b9d4df0778949fb10036f45505ed9285990e3172b4c95b8d2af010184e69c924909b27babec34cb75dffd60f9db80fdda38053ab08a1534911d2860e9a6a48f67371d4531231f9258efe78163e0790973c19cf981ca3e946732a8a1a90418724fffb573f9817051f4c3dfa16c7be9dfea4422b631642a8c9978c53a596f6f4e2a28c58fa44ce3061ae1baf66cbc07b6491c8decdcbf0df58cc9ea2b850765e09a39280fbe7eb0d0c4af45cc83a9f3ae80e07eacd6a475e4efc0d5e9e8044bb9600b8a44afb9ffb2f83c01ca88616e3b86c427609c6b3b70dd2211e56883cd1a406c70654895c5c27fba7d92d54533e845f58966495d030aae732d44032c258589aa4e1b4aa80a385ebb7feba696ecb672183bd3925a0c55fd6b98979344a8530d2ddf03a9c1620ddb72800b9661c9f6789676fee4e0354ee3ac3aa3eaa5171b5eb70df54d689170abb5d354f456b1819196d9165fc4b7ad59daa805a4445883cfc88a6241616b6d1b4deab94485efabb93a92579740fb460ab4b27ed7b999447980f3aa90717d3fd95256a6cc749566319653ab06aaad913a7058c52f087e052104fe6e2d07589032ac99b9e552e662b035976023f0e0ce8bdf18eabe7074bce8219e46db804373d938926d70a77ce9365525e80752e6ab10ec65f3111898f0ee52bbaf6d4b3180ad5f35d47fd0d7994e7dfd3f8c691ea87ba1f7c7390617b717165a88aead3781b6980076509156de2a9215918bcc6747cbc5d82c38653775cdae0aba9f0f9c11763ef649987217f7349f1d473c10fd9431aa86ea7a72b16925fab9a9eab8a136fe7e7cddfc6e6ad379facf4cee9d80649cb499d5368b40fd1fdf87509fa9bfc7b0c920f8637d6db213b3e0b5aed61a3d1d1c4e6e9fe01839b46cb63d44cc0b70260714ab5a57b7737c7ebaa434a6a50f5c01b2404d7103fc9e4edc84cf263c068021f2bba5a812f2c7befd80386c9bbfc3da4e43bdfec4366165a890e29442d5926b818465a74f5e010bd7d0aa050cddeb9e72ebdce0f6a611fce4c935eb58008ccbe3d2b018cfe20d7c3f986f7a41bd4a988bbadbe5b172d2778cbcbd3d3ae257c16d7b702db4979895c3302d239227428b82e97a9b4bb7eab5d6c54b8b7f6084cd90618da6a1be3af50ea725db80793387235ecd658c5863a40466dd02d37c4eae3d5b2fad5af75fae610306eec34faa2bc27f0a22f4f37ec7161af4f9d5df1f1ca03f6c2341b2155ab219aaacfebc324960b33c0cd17adff3b6897710e4f5b09d27e5d068d791cf2b6a9a1d791aef1c61aaff517273152b8a74080dc51651c53056a697fef2949377653b4986d496e1282696fffe2ce2ba52203ee1a3d9b70cad9393c9ada97e71f3bc40d0dddb4c8944e9583effecc9dff5b568412844e52f42453f607246273d65a8eb74e37c9371e49012da2e1df1e60cea6c9fc70b736ae451710cc24762a769d8b0ac9e0bc6c270ab2bebe5ea9db837db9eb070976b60d4f8f291f684820c109ede1731368f4de9c0a17926979011f6a57cf3565c2dd9695ca32fa5ffdbd560e490cffcaa4f1e457677624665710eb9370fb03e707ae7aba2131160011f869359a1e65b41a1a5f848d9a4a3980f612015522946be75fb2893f9255403051afd3bf39a75a415a03688a25782d2fc8c88d45553bfaf196d993ea76dbb45ec0ffbd663a58e2ab3065e058d32d7fc12741ac805e5084e855f01208a146db040959a08ce15fbe1f7d45b1c3374e1e65eea2731000cdc4e02549eef44b0f57269489a99ea0ee737a1e7e28392b0636ee57619ea7711b1eafdb463a036bbec21e4afe48c23d93b86ce4eb9270f6fd1f8a9c850faba45ee739e3144f411d33b43eba8900786a3bd4d830ad2c0d5d3879c967ef0dad3c97031c35b30bb70b94908a40c508e14f73414a6c564233789e117d152611ca1ce09df02108cc0e7a417defe06d1ea64334265b20569951cae5c18ebd55c59a42c65bcc56f3559d67f4562d3056fc73a2da9c0f1fd1f87605eb2ac66aa1e6318f56ef1f3c4dd92b74fb27931aaed8bda43170e5a45301848ca62afc4b42515ca5d7b6d4acfa79d71b1748a116d263473b1e3c581cec0b55d96e5e890334c247fdff9f09295fc40ec9b4b73b68955c24f7a27cb6b63ff9d41b6230a9df3bca2a6b02539fcd13e891a90a3f8025cdb5533fee547cb25dbfaa035e7cedc37cf236dc6b3f3937be24cf0bc194f699d8590ca98203bfde21b9d3310bf0423e05ef849aee7a27dc64f1220481aafd9fb26dc4eb74603a2a8ec42969fd73aeeb0f7bd2edb02a77f8b16d530f9d143be3b2a12c83fdad0a172bcb7accc8eb59735e2709bd5caadc587fe5c261233de24fc743b70d562f509af2fd7d3fd17d573c9aaecba9189d69a5b59c2b7065e8d81c68eaf3315a0bd10383a55f5feb52488ebe2fd3c19b391f605e7432aa9cb8235580dc7fc269e1d1342188141154983eb3282795eba7058c0aa61b9dab199ea028d6f3fbff4840e91c91d9e986e6e47ff3e5daa160e2a403904a2a70bfcfc101a99c91f4834dad8405ad7cbbbf28db56c1d25e13a3c4d6aa6cc46650e0de52764773f9d3868a8aac7ee9715c0d2a3783991cf869da7e7238f9bd25f4d2883284cbd7a490730e6898a6049e1c284b6ff25f3e59eedffa143b7064822fe83c1bcead33d1a976a62d1f638b3264501f27a0b0f35e457b7b37801e567cd8be7107a5d273d681358234eb798", 0xe3f}], 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 2033/05/18 03:35:03 result hanged=false: [718374ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 168745 #0 [718382ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [718384ms] <- socket$inet6_udplite=0x3 errno=14 cover=1635 #0 [718386ms] -> pipe2(0x20000480, 0x0) #0 [718387ms] <- pipe2=0x0 errno=14 cover=1940 #0 [718388ms] -> writev(0x5, 0x20001780, 0x3) #0 [718390ms] <- writev=0x1001 errno=14 cover=534 #0 [718390ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [718391ms] <- close_range=0x0 errno=14 cover=3983 enabling collider #0 [718391ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [718392ms] <- socket$inet6_udplite=0x3 errno=14 cover=1634 #0 [718392ms] -> pipe2(0x20000480, 0x0) #0 [718393ms] <- pipe2=0x0 errno=14 cover=1211 pthread_create failed (errno 11) 03:35:03 executing program 0: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x58, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000000080), 0x4) 2033/05/18 03:35:03 result hanged=false: 2033/05/18 03:35:03 poll: candidates=8 inputs=0 signal=0 [718447ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 168847 #0 [718456ms] -> sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x20000200, 0x0) #0 [718456ms] <- sendmsg$DEVLINK_CMD_TRAP_SET=0xffffffffffffffff errno=9 cover=52 #0 [718458ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [718458ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1701 #0 [718458ms] -> setsockopt$inet6_int(0x3, 0x29, 0x40, 0x20000080, 0x4) #0 [718458ms] <- setsockopt$inet6_int=0xffffffffffffffff errno=12 cover=230 enabling collider #0 [718459ms] -> sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x20000200, 0x0) #0 [718459ms] <- sendmsg$DEVLINK_CMD_TRAP_SET=0xffffffffffffffff errno=9 cover=52 #0 [718460ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [718462ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1797 pthread_create failed (errno 11) 03:35:03 executing program 0: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000140)=@ctrl_frame=@cf_end_cf_ack={{}, {0x4c}}, 0x10) syz_80211_inject_frame(&(0x7f0000000180), &(0x7f00000001c0)=@ctrl_frame=@rts={{}, {0x7}, @broadcast, @broadcast}, 0x10) 2033/05/18 03:35:03 result hanged=false: [718514ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 168949 #0 [718523ms] -> syz_80211_join_ibss(0x20000040, 0x20000080, 0x6, 0x0) [ 1468.504354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1468.505925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 #0 [718533ms] <- syz_80211_join_ibss=0x0 errno=0 cover=44389 [ 1468.511983] ------------[ cut here ]------------ [ 1468.513385] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 1468.515495] WARNING: CPU: 0 PID: 298622 at net/mac80211/rate.c:375 __rate_control_send_low+0x4be/0x680 [ 1468.517454] Modules linked in: [ 1468.518175] CPU: 0 PID: 298622 Comm: syz-executor.0 Not tainted 5.10.78 #1 [ 1468.519655] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1468.522050] RIP: 0010:__rate_control_send_low+0x4be/0x680 [ 1468.523230] Code: 14 48 89 44 24 18 e8 f1 61 90 fd 44 8b 44 24 2c 45 89 e9 44 89 e1 48 8b 74 24 18 44 89 f2 48 c7 c7 00 1b 75 84 e8 eb d5 1c 00 <0f> 0b e9 29 fe ff ff e8 c6 61 90 fd 48 8b 44 24 10 48 8d 78 7f 48 [ 1468.527078] RSP: 0018:ffff88806ce08db8 EFLAGS: 00010282 [ 1468.528256] RAX: 0000000000000000 RBX: ffff88800dded7a8 RCX: 0000000000000000 [ 1468.530635] RDX: ffff888030bb9940 RSI: ffffffff81290d43 RDI: ffffed100d9c11a9 [ 1468.532181] RBP: ffff888031bdb1e8 R08: 0000000000000001 R09: ffff88806ce2fb4f [ 1468.533707] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1468.535232] R13: 0000000000000000 R14: 00000000ffffffff R15: 0000000000000000 [ 1468.536795] FS: 00007fe19b695700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1468.538505] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1468.539765] CR2: 00007fe19e22f000 CR3: 000000003bdfe000 CR4: 0000000000350ef0 [ 1468.541302] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1468.542815] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1468.544347] Call Trace: [ 1468.544922] [ 1468.545410] rate_control_send_low+0x1f5/0x600 [ 1468.546411] rate_control_get_rate+0x18b/0x510 [ 1468.547422] ieee80211_tx_h_rate_ctrl+0x956/0x1650 [ 1468.548499] ? ieee80211_beacon_protect+0x390/0x390 [ 1468.549608] ? unwind_next_frame+0x10b5/0x1aa0 [ 1468.550574] ? ieee80211_tx_h_select_key+0x25f/0x1590 [ 1468.551748] invoke_tx_handlers_early+0xb23/0x2520 [ 1468.552825] ieee80211_tx+0x244/0x410 [ 1468.553662] ? ieee80211_tx_prepare_skb+0x430/0x430 [ 1468.554773] ? __ieee80211_tx+0x610/0x610 [ 1468.555690] ? ieee80211_skb_resize+0x116/0x5f0 [ 1468.556713] ieee80211_xmit+0x222/0x2b0 [ 1468.557557] __ieee80211_subif_start_xmit+0x748/0xc30 [ 1468.558686] ? ieee80211_clear_fast_xmit+0x110/0x110 [ 1468.559824] ieee80211_subif_start_xmit+0x126/0xf40 [ 1468.560913] ? skb_csum_hwoffload_help+0xe0/0xe0 [ 1468.561948] ? __ieee80211_subif_start_xmit+0xc30/0xc30 [ 1468.563100] ? lock_acquire+0x197/0x490 [ 1468.563997] ? sch_direct_xmit+0x314/0x780 [ 1468.564927] ? lock_release+0x6b0/0x6b0 [ 1468.565822] dev_hard_start_xmit+0x1ba/0x800 [ 1468.566797] sch_direct_xmit+0x262/0x780 [ 1468.567701] ? find_held_lock+0x2c/0x110 [ 1468.568549] ? dev_watchdog+0xba0/0xba0 [ 1468.569418] ? pfifo_fast_dequeue+0x6d0/0xad0 [ 1468.570408] __qdisc_run+0x4b3/0x1640 [ 1468.571276] __dev_queue_xmit+0xd9a/0x27f0 [ 1468.572215] ? neigh_resolve_output+0x511/0x820 [ 1468.573232] ? find_held_lock+0x2c/0x110 [ 1468.574133] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1468.575146] ? memcpy+0x39/0x60 [ 1468.575894] ? eth_header+0x163/0x1f0 [ 1468.576737] neigh_resolve_output+0x511/0x820 [ 1468.577734] ip6_finish_output2+0xc3f/0x22c0 [ 1468.578698] ? ip6_mtu+0x1ae/0x360 [ 1468.579465] ? ip6_frag_next+0xb30/0xb30 [ 1468.580348] ? find_held_lock+0x2c/0x110 [ 1468.581259] __ip6_finish_output.part.0+0x4fc/0xb60 [ 1468.582352] ip6_output+0x47b/0xb80 [ 1468.583173] ? __ip6_finish_output.part.0+0xb60/0xb60 [ 1468.584295] ? NF_HOOK.constprop.0+0x221/0x4e0 [ 1468.585300] ? ip6_output+0xb80/0xb80 [ 1468.586141] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1468.587263] ? nf_hook_slow+0xf8/0x1e0 [ 1468.588140] NF_HOOK.constprop.0+0x10a/0x4e0 [ 1468.589112] ? igmp6_group_queried+0x370/0x370 [ 1468.590117] ? sf_setstate+0x7f0/0x7f0 [ 1468.590985] ? icmp6_dst_alloc+0x42f/0x650 [ 1468.591939] mld_sendpack+0x609/0xc20 [ 1468.592799] ? NF_HOOK.constprop.0+0x4e0/0x4e0 [ 1468.593820] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1468.594948] ? __local_bh_enable_ip+0x9d/0xf0 [ 1468.595948] mld_ifc_timer_expire+0x609/0xf10 [ 1468.596954] ? mld_send_initial_cr.part.0+0x150/0x150 [ 1468.598075] call_timer_fn+0x182/0x580 [ 1468.598936] ? del_timer_sync+0x270/0x270 [ 1468.599857] ? lock_downgrade+0x6d0/0x6d0 [ 1468.600767] ? _find_next_bit.constprop.0+0x19d/0x1f0 [ 1468.601892] ? mld_send_initial_cr.part.0+0x150/0x150 [ 1468.603009] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1468.604169] ? mld_send_initial_cr.part.0+0x150/0x150 [ 1468.605288] __run_timers.part.0+0x666/0x9d0 [ 1468.606275] ? call_timer_fn+0x580/0x580 [ 1468.607181] ? clockevents_program_event+0x136/0x360 [ 1468.608296] ? tick_program_event+0xa1/0x130 [ 1468.609276] run_timer_softirq+0x80/0x120 [ 1468.610189] __do_softirq+0x1b6/0x86a [ 1468.611045] asm_call_irq_on_stack+0x12/0x20 [ 1468.612024] [ 1468.612510] do_softirq_own_stack+0x80/0xa0 [ 1468.613448] irq_exit_rcu+0x110/0x1a0 [ 1468.614296] sysvec_apic_timer_interrupt+0x43/0xa0 [ 1468.615372] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1468.616521] RIP: 0010:debug_check_no_locks_freed+0x2e/0x190 [ 1468.617742] Code: c0 bc 42 47 85 48 ba 00 00 00 00 00 fc ff df 41 56 48 89 c1 83 e0 07 49 89 f6 41 55 48 c1 e9 03 83 c0 03 41 54 49 89 fc 55 53 <65> 4c 8b 2c 25 80 ef 01 00 48 83 ec 08 0f b6 14 11 38 d0 7c 08 84 [ 1468.621626] RSP: 0018:ffff888043f0fcd8 EFLAGS: 00000202 [ 1468.622787] RAX: 0000000000000007 RBX: ffff888035080168 RCX: 1ffffffff0a8e857 [ 1468.624327] RDX: dffffc0000000000 RSI: 0000000000000040 RDI: ffff888035080168 [ 1468.625848] RBP: ffffffff84695e00 R08: 0000000000000002 R09: 0000000000000000 [ 1468.627398] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888035080168 [ 1468.628932] R13: 0000000000000002 R14: 0000000000000040 R15: 0000000000000000 [ 1468.630527] ? lockdep_init_map_type+0x2c3/0x770 [ 1468.631603] __raw_spin_lock_init+0x1c/0x110 [ 1468.632526] sk_init_common+0x17c/0x620 [ 1468.633408] sock_init_data+0x1b/0xcd0 [ 1468.634266] __netlink_create+0x7f/0x2c0 [ 1468.635157] netlink_create+0x3ac/0x5e0 [ 1468.636052] __sock_create+0x355/0x760 [ 1468.636906] ? vfs_write+0x7d7/0xa50 [ 1468.637731] __sys_socket+0xef/0x200 [ 1468.638508] ? fput_many+0x2f/0x1a0 [ 1468.639315] ? move_addr_to_kernel+0x70/0x70 [ 1468.640329] ? ksys_write+0x1a5/0x250 [ 1468.641195] __x64_sys_socket+0x6e/0xb0 [ 1468.642074] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1468.643192] do_syscall_64+0x33/0x40 [ 1468.644033] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1468.645144] RIP: 0033:0x7fe19e121197 [ 1468.645963] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1468.649847] RSP: 002b:00007fe19b6940c8 EFLAGS: 00000287 ORIG_RAX: 0000000000000029 [ 1468.651487] RAX: ffffffffffffffda RBX: 00007fe19e232f60 RCX: 00007fe19e121197 [ 1468.653030] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1468.654561] RBP: 00007fe19e179f6d R08: 0000000000000000 R09: 0000000000000000 [ 1468.656112] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 [ 1468.657675] R13: 0000000000000036 R14: 00000000200000c0 R15: 0000000000022000 [ 1468.659231] irq event stamp: 5296 [ 1468.660026] hardirqs last enabled at (5306): [] console_unlock+0x926/0xb30 [ 1468.661834] hardirqs last disabled at (5315): [] console_unlock+0x832/0xb30 [ 1468.663652] softirqs last enabled at (3808): [] netlink_release+0xd2e/0x1c70 [ 1468.665537] softirqs last disabled at (3973): [] asm_call_irq_on_stack+0x12/0x20 [ 1468.667440] ---[ end trace 4a46a5c6056d3902 ]--- #0 [718534ms] -> syz_80211_inject_frame(0x200000c0, 0x20000100, 0x36) [ 1468.671334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium #0 [718697ms] <- syz_80211_inject_frame=0x0 errno=0 cover=15423 #0 [718697ms] -> syz_80211_inject_frame(0x20000000, 0x20000140, 0x10) hwsim_inject_frame failed: Invalid argument [ 1468.676153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium syz_80211_inject_frame: failed to inject message, ret -22 #0 [718702ms] <- syz_80211_inject_frame=0xffffffffffffffff errno=22 cover=19516 #0 [718702ms] -> syz_80211_inject_frame(0x20000180, 0x200001c0, 0x10) [ 1468.680342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium #0 [718706ms] <- syz_80211_inject_frame=0x0 errno=0 cover=13327 enabling collider #0 [719006ms] -> syz_80211_join_ibss(0x20000040, 0x20000080, 0x6, 0x0) nl80211_join_ibss failed: Operation already in progress nl80211_setup_ibss_interface: nl80211_join_ibss failed for wlan0, ret -114 syz_80211_join_ibss: failed set up IBSS network for wlan0 #0 [719009ms] <- syz_80211_join_ibss=0xffffffffffffffff errno=114 cover=23014 #0 [719010ms] -> syz_80211_inject_frame(0x200000c0, 0x20000100, 0x36) [ 1468.988825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium #0 [719015ms] <- syz_80211_inject_frame=0x0 errno=0 cover=13406 pthread_create failed (errno 11) 03:35:04 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000), 0x4) 2033/05/18 03:35:04 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [719069ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169051 #0 [719079ms] -> socket$packet(0x11, 0x3, 0x300) #0 [719082ms] <- socket$packet=0x3 errno=14 cover=1753 #0 [719084ms] -> setsockopt$packet_int(0x3, 0x107, 0xa, 0x20000000, 0x4) #0 [719085ms] <- setsockopt$packet_int=0x0 errno=14 cover=138 enabling collider #0 [719090ms] -> socket$packet(0x11, 0x3, 0x300) #0 [719090ms] <- socket$packet=0x3 errno=14 cover=1771 #0 [719091ms] -> setsockopt$packet_int(0x3, 0x107, 0xa, 0x20000000, 0x4) #0 [719091ms] <- setsockopt$packet_int=0xffffffffffffffff errno=9 cover=51 03:35:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() 2033/05/18 03:35:04 result hanged=false: [719114ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169053 #0 [719123ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [719128ms] <- perf_event_open=0x3 errno=14 cover=9827 #0 [719128ms] -> getuid() #0 [719128ms] <- getuid=0x0 errno=14 cover=72 enabling collider #0 [719140ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [719141ms] <- perf_event_open=0x3 errno=14 cover=8668 #0 [719141ms] -> getuid() #0 [719141ms] <- getuid=0x0 errno=14 cover=43 2033/05/18 03:35:04 result hanged=false: 03:35:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c90000000200000000000020801000470001200f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[]) creat(0x0, 0x0) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=""/233) [719173ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169055 #0 [719184ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) #0 [719188ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=5130 #0 [719189ms] -> creat(0x0, 0x0) #0 [719189ms] <- creat=0xffffffffffffffff errno=14 cover=628 #0 [719189ms] -> statfs(0x200000c0, 0x20000240) #0 [719189ms] <- statfs=0xffffffffffffffff errno=2 cover=906 enabling collider #0 [719189ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) #0 [719190ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=4969 #0 [719190ms] -> creat(0x0, 0x0) #0 [719190ms] <- creat=0xffffffffffffffff errno=14 cover=617 pthread_create failed (errno 11) 03:35:04 executing program 0: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff) 2033/05/18 03:35:04 result hanged=false: [719243ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169157 #0 [719252ms] -> syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [719253ms] <- syz_genetlink_get_family_id$ethtool=0xffffffffffffffff errno=14 cover=4340 #0 [719254ms] -> syz_genetlink_get_family_id$nl80211(0x20000e80, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [719255ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11757 enabling collider #0 [719255ms] -> syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [719256ms] <- syz_genetlink_get_family_id$ethtool=0xffffffffffffffff errno=14 cover=2470 2033/05/18 03:35:04 result hanged=false: 03:35:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') [719276ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169159 #0 [719285ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [719289ms] <- perf_event_open=0x3 errno=14 cover=8490 #0 [719290ms] -> creat(0x200000c0, 0x0) #0 [719291ms] <- creat=0x4 errno=14 cover=12578 #0 [719292ms] -> link(0x20000040, 0x20000080) #0 [719293ms] <- link=0x0 errno=14 cover=6799 enabling collider #0 [719302ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [719303ms] <- perf_event_open=0x3 errno=14 cover=8475 #0 [719305ms] -> creat(0x200000c0, 0x0) #0 [719307ms] <- creat=0x4 errno=14 cover=9120 pthread_create failed (errno 11) 2033/05/18 03:35:04 result hanged=false: 03:35:04 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f0000000080)={{}, 'port0\x00'}) [719380ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169261 #0 [719390ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [719391ms] <- openat$sndseq=0xffffffffffffffff errno=2 cover=1198 #0 [719391ms] -> ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0x40605346, 0x20000080) #0 [719391ms] <- ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [719391ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [719392ms] <- openat$sndseq=0xffffffffffffffff errno=2 cover=1186 2033/05/18 03:35:04 result hanged=false: 03:35:04 executing program 0: syz_emit_ethernet(0x12, &(0x7f0000000040)={@multicast, @broadcast, @val={@void}, {@generic={0x8864}}}, 0x0) 2033/05/18 03:35:04 poll: candidates=8 inputs=0 signal=0 [719412ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169263 #0 [719420ms] -> syz_emit_ethernet(0x12, 0x20000040, 0x0) bb bb bb bb bb bb ff ff ff ff ff ff 81 00 00 00 88 64 #0 [719425ms] <- syz_emit_ethernet=0x12 errno=14 cover=6370 enabling collider #0 [719425ms] -> syz_emit_ethernet(0x12, 0x20000040, 0x0) bb bb bb bb bb bb ff ff ff ff ff ff 81 00 00 00 88 64 #0 [719426ms] <- syz_emit_ethernet=0x12 errno=14 cover=6171 2033/05/18 03:35:04 result hanged=false: 03:35:04 executing program 0: setgroups(0x2, &(0x7f0000000780)=[0x0, 0x0]) [719446ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169265 #0 [719455ms] -> setgroups(0x2, 0x20000780) #0 [719455ms] <- setgroups=0x0 errno=14 cover=593 enabling collider #0 [719456ms] -> setgroups(0x2, 0x20000780) #0 [719456ms] <- setgroups=0x0 errno=14 cover=530 2033/05/18 03:35:04 result hanged=false: 03:35:04 executing program 0: syz_mount_image$iso9660(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x0, &(0x7f0000000980), 0x0, &(0x7f0000000a00)={[{}, {@mode}, {@nojoliet}, {@cruft}], [{@subj_user}]}) [719479ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169267 #0 [719488ms] -> syz_mount_image$iso9660(0x20000640, 0x20000680, 0x0, 0x0, 0x20000980, 0x0, 0x20000a00) #0 [719494ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=2 cover=3274 enabling collider #0 [719495ms] -> syz_mount_image$iso9660(0x20000640, 0x20000680, 0x0, 0x0, 0x20000980, 0x0, 0x20000a00) #0 [719496ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=2 cover=3375 2033/05/18 03:35:04 result hanged=false: 03:35:04 executing program 0: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x4c401, 0x2) setresuid(0xffffffffffffffff, r0, 0x0) syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x5, &(0x7f0000000980)=[{&(0x7f0000000200)="1d88112530a336eba48946f32674b32dde4144bdf2d31c36d7f24eabc813a4c98791f6abdec865b67acd03ae8ea8bdd03cc890e2f048c18ed004e7402c29be5f8c3c2cb8559ca8271f16acb1c6d447ca764ffe2c1d199c0a4f7e33b32177785fb7e224f1282185a6e93be3c826f2f2dbb9d77f8f5398851be0228a7a592b7b480303e4398b30c9", 0x87, 0x7f}, {&(0x7f00000002c0)="9b13f249820dbfae2eed7a28a38a31f1860d6082ed9f4f09f1864dc1c1aa148ac2ef921cdd6791c5440ba29ea7dcd2f8fd22146b11d94b1cdf6c2cf5b0c57bbab067b8a4d30974b787c317844be2c4bb4aed87a8cb81c90581ebe213c843f106047b3379af4381e755bde04f9addabc06cc028ff41b62499b2f271c7c0049d403927ea033f9430ed", 0x88, 0x3}, {&(0x7f0000000380)="868f543322c350af8490f5f3ce77d01277f9b8a23b7e28549d5bcb37075de79686c3166774279a72e7d141bb240f7e1a4b7e17c7972f73ae069775c0689f3c43f71c6c479e7fa53a6499cd45223b6d2f0478af8cb9a989d5562d370c2adca9dc05898b1852d5c5b737f65e86659c323f2443d7050858e2", 0xffffffffffffff72, 0x8001}, {&(0x7f0000000400)="7218ede0e482df79add95f647a4e53253b7006e098214077c9c37246faa4c59a4bdfa7f584eadd24b9d9be01b27cac409ce2de09b299edcf902e351023a065da1d25d3ded84a124f76f20a38efc2ca9dfe2633c46fc28c00660335b90a04f6df5af683f571952dc83d903be03f17b7a58ccb8537b105944d13a9591e525ed307d1c0b147125600c4ed1040cd3fd4a73de0966e4ccb4ae08318f1fc0920b995a6f9c0dc9a290fb3c3df69e8fae1fad223f3b15aacda5806e6b61f92d7a77d8f0538d48f3cf83a665f5390dd69e6dc526a213961293a729cdc1156e8780d36df37b7956f5a6a810f404f2431e59bd2997919cd196e099a9653873cdd9eb28f", 0xfe, 0x4}, {&(0x7f0000000500)="a5010a39331e4e37b2898275c11619fefd1eeac82c0d1385f1c6b2dc1d94f809b9a7e76105a63a6dec97a14b235e36481c70f905dc63395addf8f4449fc71795e262c39d55e56dd440dfed7530181d61e50ac07e636c33db79f3", 0x5a, 0x4}], 0x51, &(0x7f0000000600)={[{'[}/'}], [{@euid_gt}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80'}}, {@obj_role={'obj_role', 0x3d, '-@\x00'}}, {@appraise}, {@measure}, {@obj_type}, {@fsname={'fsname', 0x3d, ':\xfa}!'}}, {@subj_type={'subj_type', 0x3d, '-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80'}}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000000140)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x40, 0x0, 0x0) mq_timedreceive(r1, 0x0, 0x2000, 0x0, 0x0) r2 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) [719517ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169269 #0 [719527ms] -> stat(0x20001cc0, 0x20001c00) #0 [719529ms] <- stat=0x0 errno=14 cover=544 #0 [719531ms] -> openat$dir(0xffffffffffffff9c, 0x20000580, 0x4c401, 0x2) #0 [719534ms] <- openat$dir=0xffffffffffffffff errno=2 cover=1391 #0 [719534ms] -> setresuid(0xffffffffffffffff, 0x41ed, 0x0) #0 [719534ms] <- setresuid=0x0 errno=14 cover=398 #0 [719535ms] -> syz_mount_image$nfs4(0x20000080, 0x200000c0, 0x8, 0x5, 0x20000980, 0x51, 0x20000600) #0 [719639ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=2 cover=262143 #0 [719642ms] -> openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [719642ms] <- openat=0xffffffffffffffff errno=14 cover=672 #0 [719642ms] -> open(0x0, 0x0, 0x0) #0 [719642ms] <- open=0xffffffffffffffff errno=14 cover=617 #0 [719642ms] -> mount(0x0, 0x0, 0x0, 0x0, 0x0) #0 [719642ms] <- mount=0xffffffffffffffff errno=14 cover=613 #0 [719643ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [719643ms] <- perf_event_open=0xffffffffffffffff errno=13 cover=158 #0 [719643ms] -> mq_open(0x20000140, 0x40, 0x0, 0x0) #0 [719643ms] <- mq_open=0xffffffffffffffff errno=13 cover=530 #0 [719643ms] -> mq_timedreceive(0xffffffffffffffff, 0x0, 0x2000, 0x0, 0x0) #0 [719643ms] <- mq_timedreceive=0xffffffffffffffff errno=9 cover=50 #0 [719643ms] -> mq_open(0x20005c00, 0x42, 0x0, 0x0) #0 [719643ms] <- mq_open=0xffffffffffffffff errno=13 cover=524 #0 [719643ms] -> mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) #0 [719643ms] <- mq_timedsend=0xffffffffffffffff errno=9 cover=51 enabling collider #0 [719644ms] -> stat(0x20001cc0, 0x20001c00) #0 [719644ms] <- stat=0x0 errno=14 cover=542 #0 [719644ms] -> openat$dir(0xffffffffffffff9c, 0x20000580, 0x4c401, 0x2) #0 [719645ms] <- openat$dir=0xffffffffffffffff errno=2 cover=909 pthread_create failed (errno 11) 03:35:05 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x2c932, 0xffffffffffffffff, 0x10000000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 2033/05/18 03:35:05 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [719705ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169371 #0 [719714ms] -> mmap$IORING_OFF_SQES(0x20ffb000, 0x4000, 0x0, 0x2c932, 0xffffffffffffffff, 0x10000000) #0 [719719ms] <- mmap$IORING_OFF_SQES=0x20ffb000 errno=14 cover=1485 #0 [719719ms] -> pkey_mprotect(0x20ffe000, 0x2000, 0x2, 0xffffffffffffffff) #0 [719719ms] <- pkey_mprotect=0x0 errno=14 cover=441 enabling collider #0 [719720ms] -> mmap$IORING_OFF_SQES(0x20ffb000, 0x4000, 0x0, 0x2c932, 0xffffffffffffffff, 0x10000000) #0 [719720ms] <- mmap$IORING_OFF_SQES=0x20ffb000 errno=14 cover=1282 03:35:05 executing program 0: execveat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) 2033/05/18 03:35:05 result hanged=false: [719740ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169373 #0 [719749ms] -> execveat(0xffffffffffffff9c, 0x200000c0, 0x0, 0x0, 0x0) #0 [719751ms] <- execveat=0xffffffffffffffff errno=2 cover=6336 enabling collider #0 [719752ms] -> execveat(0xffffffffffffff9c, 0x200000c0, 0x0, 0x0, 0x0) #0 [719754ms] <- execveat=0xffffffffffffffff errno=2 cover=5660 03:35:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) 2033/05/18 03:35:05 result hanged=false: [719774ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169375 #0 [719784ms] -> socket$netlink(0x10, 0x3, 0x9) #0 [719787ms] <- socket$netlink=0x3 errno=14 cover=1430 [ 1469.764802] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=299048 comm=syz-executor.0 #0 [719788ms] -> sendmsg$GTP_CMD_DELPDP(0x3, 0x20000a80, 0x0) #0 [719792ms] <- sendmsg$GTP_CMD_DELPDP=0x14 errno=14 cover=4050 enabling collider #0 [719793ms] -> socket$netlink(0x10, 0x3, 0x9) #0 [719794ms] <- socket$netlink=0x3 errno=14 cover=1548 03:35:05 executing program 0: syz_io_uring_setup(0x690c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x22c}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 2033/05/18 03:35:05 result hanged=false: [719815ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169377 #0 [719825ms] -> syz_io_uring_setup(0x690c, 0x20000300, 0x20ffc000, 0x20ffc000, 0x20000380, 0x200003c0) #0 [719830ms] <- syz_io_uring_setup=0x3 errno=14 cover=21237 enabling collider #0 [719831ms] -> syz_io_uring_setup(0x690c, 0x20000300, 0x20ffc000, 0x20ffc000, 0x20000380, 0x200003c0) #0 [719833ms] <- syz_io_uring_setup=0x3 errno=14 cover=28520 2033/05/18 03:35:05 result hanged=false: 03:35:05 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 2033/05/18 03:35:05 poll: candidates=8 inputs=0 signal=0 [719858ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169379 #0 [719866ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [719868ms] <- openat=0x3 errno=14 cover=6704 #0 [719869ms] -> stat(0x20000600, 0x20001c00) #0 [719869ms] <- stat=0x0 errno=14 cover=920 #0 [719869ms] -> setresuid(0xffffffffffffffff, 0x8000, 0x0) #0 [719869ms] <- setresuid=0x0 errno=14 cover=376 #0 [719870ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [719871ms] <- socket$inet6_tcp=0x4 errno=14 cover=1777 #0 [719871ms] -> setsockopt$inet6_IPV6_HOPOPTS(0x4, 0x29, 0x36, 0x0, 0x0) #0 [719871ms] <- setsockopt$inet6_IPV6_HOPOPTS=0xffffffffffffffff errno=1 cover=203 enabling collider #0 [719872ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [719872ms] <- openat=0xffffffffffffffff errno=17 cover=1033 #0 [719873ms] -> stat(0x20000600, 0x20001c00) #0 [719873ms] <- stat=0x0 errno=14 cover=660 pthread_create failed (errno 11) 03:35:05 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0009e6", 0x0, 0x0, 0x0, @empty, @empty}}}}}}}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 2033/05/18 03:35:05 result hanged=false: [719919ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169481 #0 [719928ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [719929ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1701 #0 [719930ms] -> syz_emit_ethernet(0x66, 0x20000080, 0x0) 01 80 c2 00 00 00 aa aa aa aa aa 00 86 dd 60 96 15 3f 00 30 3a 00 20 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 00 74 aa 00 00 00 00 60 00 09 e6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 #0 [719932ms] <- syz_emit_ethernet=0x66 errno=14 cover=34838 #0 [719932ms] -> ioctl$sock_TIOCINQ(0x3, 0x541b, 0x20000000) #0 [719932ms] <- ioctl$sock_TIOCINQ=0x0 errno=14 cover=151 enabling collider #0 [719933ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [719933ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1732 #0 [719934ms] -> syz_emit_ethernet(0x66, 0x20000080, 0x0) 01 80 c2 00 00 00 aa aa aa aa aa 00 86 dd 60 96 15 3f 00 30 3a 00 20 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 00 74 aa 00 00 00 00 60 00 09 e6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 #0 [719935ms] <- syz_emit_ethernet=0x66 errno=14 cover=31046 pthread_create failed (errno 11) 03:35:05 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0009e6", 0x0, 0x0, 0x0, @empty, @empty}}}}}}}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 2033/05/18 03:35:05 result hanged=false: 2033/05/18 03:35:05 #0: triaging type=7 2033/05/18 03:35:05 triaging input for call #1 syz_emit_ethernet (new signal=5) iptable filter/10: resetting iptable mangle/10: resetting [719980ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169583 #0 [719988ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [719988ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1709 #0 [719989ms] -> syz_emit_ethernet(0x66, 0x20000080, 0x0) 01 80 c2 00 00 00 aa aa aa aa aa 00 86 dd 60 96 15 3f 00 30 3a 00 20 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 00 74 aa 00 00 00 00 60 00 09 e6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 #0 [719991ms] <- syz_emit_ethernet=0x66 errno=14 cover=31199 #0 [719994ms] -> ioctl$sock_TIOCINQ(0x3, 0x541b, 0x20000000) #0 [719994ms] <- ioctl$sock_TIOCINQ=0x0 errno=14 cover=135 03:35:05 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0009e6", 0x0, 0x0, 0x0, @empty, @empty}}}}}}}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 2033/05/18 03:35:05 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [720015ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169585 #0 [720025ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [720028ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1698 #0 [720030ms] -> syz_emit_ethernet(0x66, 0x20000080, 0x0) 01 80 c2 00 00 00 aa aa aa aa aa 00 86 dd 60 96 15 3f 00 30 3a 00 20 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 00 74 aa 00 00 00 00 60 00 09 e6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 #0 [720035ms] <- syz_emit_ethernet=0x66 errno=14 cover=32188 #0 [720037ms] -> ioctl$sock_TIOCINQ(0x3, 0x541b, 0x20000000) #0 [720039ms] <- ioctl$sock_TIOCINQ=0x0 errno=14 cover=135 2033/05/18 03:35:05 result hanged=false: 03:35:05 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0009e6", 0x0, 0x0, 0x0, @empty, @empty}}}}}}}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) iptable filter/10: resetting iptable mangle/10: resetting [720057ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169587 #0 [720067ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [720071ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1709 #0 [720072ms] -> syz_emit_ethernet(0x66, 0x20000080, 0x0) 01 80 c2 00 00 00 aa aa aa aa aa 00 86 dd 60 96 15 3f 00 30 3a 00 20 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 00 74 aa 00 00 00 00 60 00 09 e6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 #0 [720074ms] <- syz_emit_ethernet=0x66 errno=14 cover=32080 #0 [720076ms] -> ioctl$sock_TIOCINQ(0x3, 0x541b, 0x20000000) #0 [720076ms] <- ioctl$sock_TIOCINQ=0x0 errno=14 cover=135 2033/05/18 03:35:05 result hanged=false: 2033/05/18 03:35:05 added new input for call #1 syz_emit_ethernet to corpus: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0009e6", 0x0, 0x0, 0x0, @empty, @empty}}}}}}}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) iptable filter/10: resetting iptable mangle/10: resetting 03:35:05 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') [720096ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169589 #0 [720106ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [720109ms] <- openat=0x3 errno=14 cover=6866 #0 [720110ms] -> creat(0x20000080, 0x0) #0 [720111ms] <- creat=0x4 errno=14 cover=6719 #0 [720111ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [720437ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [720439ms] -> rename(0x200000c0, 0x20000140) #0 [720497ms] <- rename=0x0 errno=14 cover=262143 enabling collider #0 [720501ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [720503ms] <- openat=0x3 errno=14 cover=1190 #0 [720504ms] -> creat(0x20000080, 0x0) #0 [720505ms] <- creat=0x4 errno=14 cover=6725 pthread_create failed (errno 11) 2033/05/18 03:35:06 result hanged=false: 2033/05/18 03:35:06 #0: triaging type=7 2033/05/18 03:35:06 triaging input for call #3 rename (new signal=2) 03:35:06 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') [720639ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169691 #0 [720649ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [720650ms] <- openat=0x3 errno=14 cover=6718 #0 [720652ms] -> creat(0x20000080, 0x0) #0 [720653ms] <- creat=0x4 errno=14 cover=6720 #0 [720654ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [720974ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [720994ms] -> rename(0x200000c0, 0x20000140) #0 [721045ms] <- rename=0x0 errno=14 cover=262143 03:35:06 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 2033/05/18 03:35:06 result hanged=false: [721201ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169693 #0 [721210ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [721212ms] <- openat=0x3 errno=14 cover=6721 #0 [721212ms] -> creat(0x20000080, 0x0) #0 [721213ms] <- creat=0x4 errno=14 cover=6759 #0 [721214ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [721533ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [721552ms] -> rename(0x200000c0, 0x20000140) #0 [721607ms] <- rename=0x0 errno=14 cover=262143 03:35:07 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 2033/05/18 03:35:07 result hanged=false: [721724ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169695 #0 [721736ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [721739ms] <- openat=0x3 errno=14 cover=6697 #0 [721741ms] -> creat(0x20000080, 0x0) #0 [721742ms] <- creat=0x4 errno=14 cover=6721 #0 [721743ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [722063ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [722086ms] -> rename(0x200000c0, 0x20000140) #0 [722141ms] <- rename=0x0 errno=14 cover=262143 2033/05/18 03:35:07 result hanged=false: 2033/05/18 03:35:07 added new input for call #3 rename to corpus: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 03:35:07 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 2033/05/18 03:35:07 #0: triaging type=7 2033/05/18 03:35:07 triaging input for call #2 pwrite64 (new signal=1) [722268ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169697 #0 [722278ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [722282ms] <- openat=0x3 errno=14 cover=6683 #0 [722285ms] -> creat(0x20000080, 0x0) #0 [722286ms] <- creat=0x4 errno=14 cover=6762 #0 [722287ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [722725ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [722750ms] -> rename(0x200000c0, 0x20000140) #0 [722807ms] <- rename=0x0 errno=14 cover=262143 03:35:08 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 2033/05/18 03:35:08 result hanged=false: [722928ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169699 #0 [722944ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [722945ms] <- openat=0x3 errno=14 cover=6809 #0 [722947ms] -> creat(0x20000080, 0x0) #0 [722947ms] <- creat=0x4 errno=14 cover=6659 #0 [722949ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [723385ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [723404ms] -> rename(0x200000c0, 0x20000140) #0 [723457ms] <- rename=0x0 errno=14 cover=262143 03:35:08 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 2033/05/18 03:35:08 result hanged=false: [723594ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169701 #0 [723605ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [723610ms] <- openat=0x3 errno=14 cover=6748 #0 [723612ms] -> creat(0x20000080, 0x0) #0 [723616ms] <- creat=0x4 errno=14 cover=6806 #0 [723617ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [724046ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [724067ms] -> rename(0x200000c0, 0x20000140) #0 [724121ms] <- rename=0x0 errno=14 cover=262143 2033/05/18 03:35:09 result hanged=false: 2033/05/18 03:35:09 added new input for call #2 pwrite64 to corpus: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 03:35:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) [724245ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169703 #0 [724255ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [724268ms] <- perf_event_open=0x3 errno=14 cover=9411 #0 [724269ms] -> prlimit64(0x0, 0x0, 0x0, 0x0) #0 [724269ms] <- prlimit64=0x0 errno=14 cover=89 enabling collider #0 [724279ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [724284ms] <- perf_event_open=0x3 errno=14 cover=8214 #0 [724285ms] -> prlimit64(0x0, 0x0, 0x0, 0x0) #0 [724286ms] <- prlimit64=0x0 errno=14 cover=60 2033/05/18 03:35:09 result hanged=false: 03:35:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='check=strict']) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) [724313ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169705 #0 [724323ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) #0 [724329ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=4975 #0 [724329ms] -> chdir(0x20000040) #0 [724329ms] <- chdir=0xffffffffffffffff errno=2 cover=953 #0 [724329ms] -> creat(0x20000180, 0x0) #0 [724330ms] <- creat=0x3 errno=14 cover=6460 #0 [724330ms] -> mkdir(0x20000140, 0x0) #0 [724330ms] <- mkdir=0xffffffffffffffff errno=17 cover=577 enabling collider #0 [724331ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) #0 [724331ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=4952 #0 [724332ms] -> chdir(0x20000040) #0 [724332ms] <- chdir=0xffffffffffffffff errno=20 cover=550 pthread_create failed (errno 11) 03:35:09 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') dup2(r0, r1) 2033/05/18 03:35:09 result hanged=false: [724388ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169807 #0 [724397ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [724398ms] <- perf_event_open=0x3 errno=14 cover=8559 #0 [724399ms] -> syz_open_procfs(0x0, 0x20000000) #0 [724399ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=7628 #0 [724400ms] -> dup2(0x3, 0xffffffffffffffff) #0 [724400ms] <- dup2=0xffffffffffffffff errno=9 cover=39 enabling collider #0 [724412ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [724413ms] <- perf_event_open=0x3 errno=14 cover=8559 #0 [724413ms] -> syz_open_procfs(0x0, 0x20000000) #0 [724413ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=7701 pthread_create failed (errno 11) 2033/05/18 03:35:09 result hanged=false: 03:35:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "5a329fe4bd51dc4e62aaeabcd5ee5dd5"}]}, 0x30}}, 0x0) [724474ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169909 #0 [724481ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [724481ms] <- socket$netlink=0x3 errno=14 cover=1421 #0 [724483ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [724483ms] <- socket$nl_generic=0x4 errno=14 cover=1401 #0 [724484ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [724485ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12260 #0 [724486ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x20000400) #0 [724486ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=192 #0 [724486ms] -> sendmsg$NL80211_CMD_DEL_PMKSA(0x4, 0x20000480, 0x0) #0 [724487ms] <- sendmsg$NL80211_CMD_DEL_PMKSA=0x30 errno=14 cover=2013 enabling collider #0 [724488ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [724489ms] <- socket$netlink=0x3 errno=14 cover=1426 #0 [724490ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [724491ms] <- socket$nl_generic=0x4 errno=14 cover=1428 pthread_create failed (errno 11) 03:35:09 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB='t']) umount2(&(0x7f0000000080)='./file0\x00', 0x4) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, &(0x7f0000002640), 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xc) 2033/05/18 03:35:09 result hanged=false: [724538ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 170011 #0 [724547ms] -> syz_mount_image$ext4(0x0, 0x200001c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [724551ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12400 #0 [724552ms] -> mount(0x0, 0x20000180, 0x20000040, 0x0, 0x0) #0 [724554ms] <- mount=0x0 errno=14 cover=13243 #0 [724554ms] -> mount$9p_fd(0x0, 0x200000c0, 0x200002c0, 0x0, 0x20001cc0) #0 [724554ms] <- mount$9p_fd=0xffffffffffffffff errno=22 cover=2646 #0 [724554ms] -> umount2(0x20000080, 0x4) #0 [724554ms] <- umount2=0xffffffffffffffff errno=11 cover=687 #0 [724555ms] -> syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x20002640, 0x0, 0x0) #0 [724555ms] <- syz_mount_image$msdos=0xffffffffffffffff errno=2 cover=3344 #0 [724555ms] -> umount2(0x20000000, 0xc) #0 [724557ms] <- umount2=0x0 errno=14 cover=10685 enabling collider #0 [724557ms] -> syz_mount_image$ext4(0x0, 0x200001c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [724557ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1376 #0 [724557ms] -> mount(0x0, 0x20000180, 0x20000040, 0x0, 0x0) #0 [724559ms] <- mount=0x0 errno=14 cover=13420 pthread_create failed (errno 11) 03:35:10 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)) syz_mount_image$ext4(&(0x7f00000012c0)='ext2\x00', &(0x7f0000001300)='./file0/file0\x00', 0x0, 0x2, &(0x7f0000002600)=[{&(0x7f0000001380)="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", 0xffe, 0x3}, {&(0x7f0000002580)='W', 0x1, 0x7fff}], 0x0, &(0x7f00000026c0)) 2033/05/18 03:35:10 result hanged=false: umount(./5734/file0) 2033/05/18 03:35:10 poll: candidates=8 inputs=0 signal=0 [724608ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 170113 #0 [724615ms] -> getresuid(0x20000040, 0x20000080, 0x200000c0) #0 [724617ms] <- getresuid=0x0 errno=14 cover=783 #0 [724619ms] -> syz_mount_image$ext4(0x20000100, 0x20000140, 0x0, 0x0, 0x0, 0x0, 0x20000480) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='ext2' flags=0 opts=',errors=continue' syz_mount_image > mount error: 22 #0 [724622ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=2414 #0 [724622ms] -> syz_mount_image$ext4(0x200012c0, 0x20001300, 0x0, 0x2, 0x20002600, 0x0, 0x200026c0) #0 [724625ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=2 cover=7005 enabling collider #0 [724626ms] -> getresuid(0x20000040, 0x20000080, 0x200000c0) #0 [724626ms] <- getresuid=0x0 errno=14 cover=81 #0 [724627ms] -> syz_mount_image$ext4(0x20000100, 0x20000140, 0x0, 0x0, 0x0, 0x0, 0x20000480) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file0' fs='ext2' flags=0 opts=',errors=continue' syz_mount_image > mount error: 22 #0 [724627ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=2354 pthread_create failed (errno 11) 03:35:10 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_names\x00') preadv(r0, &(0x7f0000002400)=[{&(0x7f0000000140)=""/203, 0xcb}], 0x1, 0x0, 0x0) 2033/05/18 03:35:10 result hanged=false: [724691ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 170215 #0 [724699ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000000) #0 [724700ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=5384 #0 [724701ms] -> preadv(0xffffffffffffffff, 0x20002400, 0x1, 0x0, 0x0) #0 [724701ms] <- preadv=0xffffffffffffffff errno=9 cover=47 enabling collider #0 [724701ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000000) #0 [724701ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=2414 03:35:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3cd04d6b66732e66617400020801090470000000f801", 0x17}, {0x0, 0x0, 0x1000a04}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) pwrite64(r0, &(0x7f0000000080)='*', 0x1, 0x0) unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 2033/05/18 03:35:10 result hanged=false: [724719ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 170217 #0 [724728ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000180) #0 [724729ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=4664 #0 [724730ms] -> chdir(0x20000040) #0 [724730ms] <- chdir=0xffffffffffffffff errno=2 cover=919 #0 [724731ms] -> open(0x20000040, 0x1a18c1, 0x0) #0 [724732ms] <- open=0x3 errno=14 cover=6370 #0 [724733ms] -> pwrite64(0x3, 0x20000080, 0x1, 0x0) #0 [724738ms] <- pwrite64=0x1 errno=14 cover=9461 #0 [724739ms] -> unshare(0x28020600) #0 [724744ms] <- unshare=0x0 errno=14 cover=28352 #0 [724745ms] -> acct(0x20000040) #0 [724746ms] <- acct=0x0 errno=14 cover=1713 #0 [724746ms] -> unshare(0x48020200) [ 1474.746225] Process accounting resumed #0 [724771ms] <- unshare=0x0 errno=14 cover=189734 enabling collider #0 [724774ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000180) #0 [724779ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=5090 #0 [724780ms] -> chdir(0x20000040) #0 [724780ms] <- chdir=0xffffffffffffffff errno=20 cover=529 pthread_create failed (errno 11) 03:35:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3cd04d6b66732e66617400020801090470000000f801", 0x17}, {0x0, 0x0, 0x1000a04}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) pwrite64(r0, &(0x7f0000000080)='*', 0x1, 0x0) unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 2033/05/18 03:35:10 result hanged=false: 2033/05/18 03:35:10 #0: triaging type=7 2033/05/18 03:35:10 triaging input for call #6 unshare (new signal=2) [724827ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 170319 #0 [724839ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000180) #0 [724840ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=4560 #0 [724840ms] -> chdir(0x20000040) #0 [724841ms] <- chdir=0xffffffffffffffff errno=2 cover=920 #0 [724842ms] -> open(0x20000040, 0x1a18c1, 0x0) #0 [724843ms] <- open=0x3 errno=14 cover=6352 #0 [724843ms] -> pwrite64(0x3, 0x20000080, 0x1, 0x0) #0 [724849ms] <- pwrite64=0x1 errno=14 cover=9196 #0 [724851ms] -> unshare(0x28020600) #0 [724856ms] <- unshare=0x0 errno=14 cover=28356 #0 [724858ms] -> acct(0x20000040) #0 [724859ms] <- acct=0x0 errno=14 cover=1942 #0 [724859ms] -> unshare(0x48020200) [ 1474.870217] Process accounting resumed #0 [724895ms] <- unshare=0x0 errno=14 cover=192260 03:35:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3cd04d6b66732e66617400020801090470000000f801", 0x17}, {0x0, 0x0, 0x1000a04}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) pwrite64(r0, &(0x7f0000000080)='*', 0x1, 0x0) unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 2033/05/18 03:35:10 result hanged=false: [724944ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 170321 #0 [724959ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000180) #0 [724964ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=4986 #0 [724967ms] -> chdir(0x20000040) #0 [724968ms] <- chdir=0xffffffffffffffff errno=2 cover=895 #0 [724968ms] -> open(0x20000040, 0x1a18c1, 0x0) #0 [724969ms] <- open=0x3 errno=14 cover=6329 #0 [724973ms] -> pwrite64(0x3, 0x20000080, 0x1, 0x0) #0 [724979ms] <- pwrite64=0x1 errno=14 cover=9068 #0 [724980ms] -> unshare(0x28020600) #0 [724983ms] <- unshare=0x0 errno=14 cover=28157 #0 [724985ms] -> acct(0x20000040) #0 [724985ms] <- acct=0x0 errno=14 cover=1730 #0 [724985ms] -> unshare(0x48020200) [ 1474.990111] Process accounting resumed #0 [725014ms] <- unshare=0x0 errno=14 cover=191113 2033/05/18 03:35:10 result hanged=false: 03:35:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3cd04d6b66732e66617400020801090470000000f801", 0x17}, {0x0, 0x0, 0x1000a04}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) pwrite64(r0, &(0x7f0000000080)='*', 0x1, 0x0) unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) [725046ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 170323 #0 [725054ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000180) #0 [725057ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=4990 #0 [725059ms] -> chdir(0x20000040) #0 [725059ms] <- chdir=0xffffffffffffffff errno=2 cover=903 #0 [725061ms] -> open(0x20000040, 0x1a18c1, 0x0) #0 [725063ms] <- open=0x3 errno=14 cover=6433 #0 [725064ms] -> pwrite64(0x3, 0x20000080, 0x1, 0x0) #0 [725080ms] <- pwrite64=0x1 errno=14 cover=9369 #0 [725081ms] -> unshare(0x28020600) #0 [725086ms] <- unshare=0x0 errno=14 cover=28185 #0 [725089ms] -> acct(0x20000040) #0 [725090ms] <- acct=0x0 errno=14 cover=1965 #0 [725091ms] -> unshare(0x48020200) [ 1475.099558] Process accounting resumed #0 [725124ms] <- unshare=0x0 errno=14 cover=191736 2033/05/18 03:35:10 result hanged=false: 2033/05/18 03:35:10 added new input for call #6 unshare to corpus: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3cd04d6b66732e66617400020801090470000000f801", 0x17}, {0x0, 0x0, 0x1000a04}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) pwrite64(r0, &(0x7f0000000080)='*', 0x1, 0x0) unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 2033/05/18 03:35:10 #0: triaging type=7 2033/05/18 03:35:10 triaging input for call #3 pwrite64 (new signal=2) 03:35:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3cd04d6b66732e66617400020801090470000000f801", 0x17}, {0x0, 0x0, 0x1000a04}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) pwrite64(r0, &(0x7f0000000080)='*', 0x1, 0x0) unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) [725178ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 170325 #0 [725188ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000180) #0 [725189ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=4691 #0 [725190ms] -> chdir(0x20000040) #0 [725190ms] <- chdir=0xffffffffffffffff errno=2 cover=923 #0 [725190ms] -> open(0x20000040, 0x1a18c1, 0x0) #0 [725191ms] <- open=0x3 errno=14 cover=6373 #0 [725191ms] -> pwrite64(0x3, 0x20000080, 0x1, 0x0) #0 [725200ms] <- pwrite64=0x1 errno=14 cover=9243 #0 [725201ms] -> unshare(0x28020600) #0 [725205ms] <- unshare=0x0 errno=14 cover=28473 #0 [725207ms] -> acct(0x20000040) #0 [725207ms] <- acct=0x0 errno=14 cover=1712 #0 [725207ms] -> unshare(0x48020200) [ 1475.216518] Process accounting resumed #0 [725241ms] <- unshare=0x0 errno=14 cover=190447 03:35:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3cd04d6b66732e66617400020801090470000000f801", 0x17}, {0x0, 0x0, 0x1000a04}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) pwrite64(r0, &(0x7f0000000080)='*', 0x1, 0x0) unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 2033/05/18 03:35:10 result hanged=false: [725268ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 170327 #0 [725276ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000180) #0 [725280ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=5033 #0 [725283ms] -> chdir(0x20000040) #0 [725283ms] <- chdir=0xffffffffffffffff errno=2 cover=909 #0 [725284ms] -> open(0x20000040, 0x1a18c1, 0x0) #0 [725284ms] <- open=0x3 errno=14 cover=6385 #0 [725288ms] -> pwrite64(0x3, 0x20000080, 0x1, 0x0) #0 [725292ms] <- pwrite64=0x1 errno=14 cover=9001 #0 [725293ms] -> unshare(0x28020600) #0 [725298ms] <- unshare=0x0 errno=14 cover=28495 #0 [725301ms] -> acct(0x20000040) #0 [725302ms] <- acct=0x0 errno=14 cover=1998 #0 [725305ms] -> unshare(0x48020200) [ 1475.307643] Process accounting resumed #0 [725332ms] <- unshare=0x0 errno=14 cover=221272 2033/05/18 03:35:10 result hanged=false: 03:35:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3cd04d6b66732e66617400020801090470000000f801", 0x17}, {0x0, 0x0, 0x1000a04}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) pwrite64(r0, &(0x7f0000000080)='*', 0x1, 0x0) unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) [725371ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 170329 #0 [725380ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000180) #0 [725380ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=2 cover=4757 #0 [725381ms] -> chdir(0x20000040) #0 [725381ms] <- chdir=0xffffffffffffffff errno=2 cover=906 #0 [725381ms] -> open(0x20000040, 0x1a18c1, 0x0) #0 [725381ms] <- open=0x3 errno=14 cover=6424 #0 [725382ms] -> pwrite64(0x3, 0x20000080, 0x1, 0x0) #0 [725385ms] <- pwrite64=0x1 errno=14 cover=9265 #0 [725387ms] -> unshare(0x28020600) #0 [725390ms] <- unshare=0x0 errno=14 cover=28373 #0 [725392ms] -> acct(0x20000040) #0 [725392ms] <- acct=0x0 errno=14 cover=1710 #0 [725392ms] -> unshare(0x48020200) [ 1475.389715] Process accounting resumed #0 [725415ms] <- unshare=0x0 errno=14 cover=203876 2033/05/18 03:35:10 result hanged=false: 2033/05/18 03:35:10 added new input for call #3 pwrite64 to corpus: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3cd04d6b66732e66617400020801090470000000f801", 0x17}, {0x0, 0x0, 0x1000a04}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) pwrite64(r0, &(0x7f0000000080)='*', 0x1, 0x0) unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 03:35:10 executing program 0: r0 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/178, 0x20ca, 0x37dc12502000000, &(0x7f0000000180)) [725482ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 170331 #0 [725488ms] -> mq_open(0x20005c00, 0x42, 0x0, 0x0) #0 [725489ms] <- mq_open=0x3 errno=14 cover=918 #0 [725491ms] -> mq_timedsend(0x3, 0x0, 0x0, 0x0, 0x0) #0 [725491ms] <- mq_timedsend=0x0 errno=14 cover=331 #0 [725491ms] -> mq_timedreceive(0x3, 0x20000280, 0x20ca, 0x37dc12502000000, 0x20000180) #0 [725491ms] <- mq_timedreceive=0xffffffffffffffff errno=14 cover=320 enabling collider #0 [725492ms] -> mq_open(0x20005c00, 0x42, 0x0, 0x0) #0 [725493ms] <- mq_open=0x3 errno=14 cover=915 #0 [725493ms] -> mq_timedsend(0x3, 0x0, 0x0, 0x0, 0x0) #0 [725493ms] <- mq_timedsend=0x0 errno=14 cover=331 pthread_create failed (errno 11) 03:35:10 executing program 0: bind$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x1f, 0x2, 0x0, 0xf0ff}]}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) 2033/05/18 03:35:10 result hanged=false: [725546ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 170433 #0 [725555ms] -> bind$packet(0xffffffffffffffff, 0x0, 0x0) #0 [725555ms] <- bind$packet=0xffffffffffffffff errno=9 cover=48 #0 [725557ms] -> bind$packet(0xffffffffffffffff, 0x0, 0x0) #0 [725559ms] <- bind$packet=0xffffffffffffffff errno=9 cover=48 #0 [725560ms] -> bind$packet(0xffffffffffffffff, 0x0, 0x0) #0 [725562ms] <- bind$packet=0xffffffffffffffff errno=9 cover=48 #0 [725562ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x200001c0) #0 [725563ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0xffffffffffffffff errno=22 cover=1380 #0 [725563ms] -> ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) #0 [725563ms] <- ioctl$SIOCGSTAMPNS=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [725563ms] -> bind$packet(0xffffffffffffffff, 0x0, 0x0) #0 [725563ms] <- bind$packet=0xffffffffffffffff errno=9 cover=48 #0 [725564ms] -> bind$packet(0xffffffffffffffff, 0x0, 0x0) #0 [725564ms] <- bind$packet=0xffffffffffffffff errno=9 cover=48 pthread_create failed (errno 11) 03:35:11 executing program 0: clock_settime(0x0, &(0x7f0000000a00)) 2033/05/18 03:35:11 result hanged=false: [725608ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 170535 #0 [725616ms] -> clock_settime(0x0, 0x20000a00) #0 [725617ms] <- clock_settime=0xffffffffffffffff errno=22 cover=519 enabling collider #0 [725619ms] -> clock_settime(0x0, 0x20000a00) #0 [725619ms] <- clock_settime=0xffffffffffffffff errno=22 cover=476 03:35:11 executing program 0: io_uring_setup(0x465c, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000001840)=0x0) io_submit(r0, 0x0, 0x0) 2033/05/18 03:35:11 result hanged=false: [725636ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 170537 #0 [725644ms] -> io_uring_setup(0x465c, 0x20000000) #0 [725646ms] <- io_uring_setup=0x3 errno=14 cover=5878 #0 [725647ms] -> io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [725647ms] <- io_uring_register$IORING_REGISTER_BUFFERS=0xffffffffffffffff errno=9 cover=46 #0 [725648ms] -> io_setup(0x7, 0x20001840) #0 [725648ms] <- io_setup=0x0 errno=14 cover=2938 #0 [725649ms] -> io_submit(0x7fe19e216000, 0x0, 0x0) #0 [725649ms] <- io_submit=0x0 errno=14 cover=349 enabling collider #0 [725649ms] -> io_uring_setup(0x465c, 0x20000000) #0 [725650ms] <- io_uring_setup=0x3 errno=14 cover=5201 #0 [725651ms] -> io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [725651ms] <- io_uring_register$IORING_REGISTER_BUFFERS=0xffffffffffffffff errno=9 cover=46 pthread_create failed (errno 11) 2033/05/18 03:35:11 result hanged=false: 03:35:11 executing program 0: mlockall(0x3) syz_open_pts(0xffffffffffffffff, 0x103000) syz_open_dev$hiddev(0x0, 0x4, 0x200) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) syz_open_dev$loop(0x0, 0x0, 0xb0040) [725710ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 170639 #0 [725719ms] -> mlockall(0x3) #0 [725919ms] <- mlockall=0x0 errno=14 cover=262143 #0 [725922ms] -> syz_open_pts(0xffffffffffffffff, 0x103000) #0 [725925ms] <- syz_open_pts=0xffffffffffffffff errno=9 cover=45 #0 [725925ms] -> syz_open_dev$hiddev(0x0, 0x4, 0x200) SIGSEGV on (nil), skipping #0 [725925ms] <- syz_open_dev$hiddev=0xffffffffffffffff errno=14 cover=782 #0 [725926ms] -> ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) #0 [725926ms] <- ioctl$HIDIOCGCOLLECTIONINFO=0xffffffffffffffff errno=9 cover=45 #0 [725926ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000280) #0 [725926ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=2354 #0 [725926ms] -> syz_open_dev$loop(0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [725926ms] <- syz_open_dev$loop=0xffffffffffffffff errno=14 cover=782 #0 [725926ms] -> ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) #0 [725926ms] <- ioctl$BLKROSET=0xffffffffffffffff errno=9 cover=45 #0 [725926ms] -> syz_open_dev$loop(0x0, 0x0, 0xb0040) SIGSEGV on (nil), skipping #0 [725927ms] <- syz_open_dev$loop=0xffffffffffffffff errno=14 cover=782 enabling collider #0 [725927ms] -> mlockall(0x3) #0 [725981ms] <- mlockall=0x0 errno=14 cover=262143 #0 [725984ms] -> syz_open_pts(0xffffffffffffffff, 0x103000) #0 [725984ms] <- syz_open_pts=0xffffffffffffffff errno=9 cover=45 pthread_create failed (errno 11) 03:35:11 executing program 0: mlockall(0x3) syz_open_pts(0xffffffffffffffff, 0x103000) syz_open_dev$hiddev(0x0, 0x4, 0x200) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) syz_open_dev$loop(0x0, 0x0, 0xb0040) 2033/05/18 03:35:11 result hanged=false: 2033/05/18 03:35:11 #0: triaging type=7 2033/05/18 03:35:11 triaging input for call #0 mlockall (new signal=4) [726130ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 170741 #0 [726140ms] -> mlockall(0x3) #0 [726340ms] <- mlockall=0x0 errno=14 cover=262143 #0 [726357ms] -> syz_open_pts(0xffffffffffffffff, 0x103000) #0 [726357ms] <- syz_open_pts=0xffffffffffffffff errno=9 cover=45 #0 [726357ms] -> syz_open_dev$hiddev(0x0, 0x4, 0x200) SIGSEGV on (nil), skipping #0 [726358ms] <- syz_open_dev$hiddev=0xffffffffffffffff errno=14 cover=782 #0 [726358ms] -> ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) #0 [726358ms] <- ioctl$HIDIOCGCOLLECTIONINFO=0xffffffffffffffff errno=9 cover=45 #0 [726359ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000280) #0 [726360ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=2404 #0 [726361ms] -> syz_open_dev$loop(0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [726361ms] <- syz_open_dev$loop=0xffffffffffffffff errno=14 cover=850 #0 [726361ms] -> ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) #0 [726361ms] <- ioctl$BLKROSET=0xffffffffffffffff errno=9 cover=45 #0 [726361ms] -> syz_open_dev$loop(0x0, 0x0, 0xb0040) SIGSEGV on (nil), skipping #0 [726362ms] <- syz_open_dev$loop=0xffffffffffffffff errno=14 cover=838 2033/05/18 03:35:11 result hanged=false: 03:35:11 executing program 0: mlockall(0x3) syz_open_pts(0xffffffffffffffff, 0x103000) syz_open_dev$hiddev(0x0, 0x4, 0x200) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) syz_open_dev$loop(0x0, 0x0, 0xb0040) [726468ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 170743 #0 [726478ms] -> mlockall(0x3) #0 [726683ms] <- mlockall=0x0 errno=14 cover=262143 #0 [726701ms] -> syz_open_pts(0xffffffffffffffff, 0x103000) #0 [726703ms] <- syz_open_pts=0xffffffffffffffff errno=9 cover=45 #0 [726704ms] -> syz_open_dev$hiddev(0x0, 0x4, 0x200) SIGSEGV on (nil), skipping #0 [726706ms] <- syz_open_dev$hiddev=0xffffffffffffffff errno=14 cover=786 #0 [726707ms] -> ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) #0 [726707ms] <- ioctl$HIDIOCGCOLLECTIONINFO=0xffffffffffffffff errno=9 cover=45 #0 [726707ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000280) #0 [726708ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=2420 #0 [726708ms] -> syz_open_dev$loop(0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [726708ms] <- syz_open_dev$loop=0xffffffffffffffff errno=14 cover=786 #0 [726709ms] -> ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) #0 [726709ms] <- ioctl$BLKROSET=0xffffffffffffffff errno=9 cover=45 #0 [726709ms] -> syz_open_dev$loop(0x0, 0x0, 0xb0040) SIGSEGV on (nil), skipping #0 [726709ms] <- syz_open_dev$loop=0xffffffffffffffff errno=14 cover=786 2033/05/18 03:35:12 result hanged=false: 03:35:12 executing program 0: mlockall(0x3) syz_open_pts(0xffffffffffffffff, 0x103000) syz_open_dev$hiddev(0x0, 0x4, 0x200) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) syz_open_dev$loop(0x0, 0x0, 0xb0040) [726816ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 170745 #0 [726827ms] -> mlockall(0x3) #0 [727030ms] <- mlockall=0x0 errno=14 cover=262143 #0 [727047ms] -> syz_open_pts(0xffffffffffffffff, 0x103000) #0 [727047ms] <- syz_open_pts=0xffffffffffffffff errno=9 cover=45 #0 [727047ms] -> syz_open_dev$hiddev(0x0, 0x4, 0x200) SIGSEGV on (nil), skipping #0 [727047ms] <- syz_open_dev$hiddev=0xffffffffffffffff errno=14 cover=782 #0 [727048ms] -> ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) #0 [727048ms] <- ioctl$HIDIOCGCOLLECTIONINFO=0xffffffffffffffff errno=9 cover=45 #0 [727048ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000280) #0 [727050ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=5158 #0 [727051ms] -> syz_open_dev$loop(0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [727051ms] <- syz_open_dev$loop=0xffffffffffffffff errno=14 cover=794 #0 [727051ms] -> ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) #0 [727051ms] <- ioctl$BLKROSET=0xffffffffffffffff errno=9 cover=45 #0 [727052ms] -> syz_open_dev$loop(0x0, 0x0, 0xb0040) SIGSEGV on (nil), skipping #0 [727052ms] <- syz_open_dev$loop=0xffffffffffffffff errno=14 cover=782 2033/05/18 03:35:12 result hanged=false: 2033/05/18 03:35:12 added new input for call #0 mlockall to corpus: mlockall(0x3) syz_open_pts(0xffffffffffffffff, 0x103000) syz_open_dev$hiddev(0x0, 0x4, 0x200) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) syz_open_dev$loop(0x0, 0x0, 0xb0040) 03:35:12 executing program 0: syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000a80)={0x2, &(0x7f0000000a40)=[{}, {}]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [727165ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2033/05/18 03:35:12 poll: candidates=8 inputs=0 signal=0 spawned worker pid 170747 #0 [727176ms] -> syz_genetlink_get_family_id$devlink(0x20000140, 0xffffffffffffffff) syz_genetlink_get_family_id(devlink, -1) netlink: failed to get family id for devlink: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [727192ms] <- syz_genetlink_get_family_id$devlink=0xffffffffffffffff errno=2 cover=11155 #0 [727193ms] -> fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) #0 [727193ms] <- fcntl$addseals=0xffffffffffffffff errno=9 cover=45 #0 [727193ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000a80) #0 [727193ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0xffffffffffffffff errno=22 cover=1338 #0 [727193ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [727194ms] <- syz_init_net_socket$nl_generic=0xffffffffffffffff errno=2 cover=1186 #0 [727195ms] -> sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, 0x20002480, 0x10) #0 [727195ms] <- sendmsg$NL802154_CMD_NEW_SEC_DEV=0xffffffffffffffff errno=9 cover=52 #0 [727195ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [727197ms] <- syz_init_net_socket$802154_dgram=0xffffffffffffffff errno=2 cover=1237 enabling collider #0 [727197ms] -> syz_genetlink_get_family_id$devlink(0x20000140, 0xffffffffffffffff) syz_genetlink_get_family_id(devlink, -1) netlink: failed to get family id for devlink: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [727212ms] <- syz_genetlink_get_family_id$devlink=0xffffffffffffffff errno=2 cover=8288 #0 [727213ms] -> fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) #0 [727213ms] <- fcntl$addseals=0xffffffffffffffff errno=9 cover=45 pthread_create failed (errno 11) 2033/05/18 03:35:12 result hanged=false: 03:35:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) io_submit(r1, 0x1, &(0x7f0000000680)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000240)='x', 0x1}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) [727265ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 170849 #0 [727274ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [727278ms] <- openat=0x3 errno=14 cover=6838 #0 [727280ms] -> io_setup(0x5, 0x20000080) #0 [727282ms] <- io_setup=0x0 errno=14 cover=2546 #0 [727284ms] -> io_submit(0x7fe19e216000, 0x1, 0x200008c0) #0 [727289ms] <- io_submit=0x1 errno=14 cover=11355 #0 [727291ms] -> io_submit(0x7fe19e216000, 0x1, 0x20000680) #0 [727294ms] <- io_submit=0x1 errno=14 cover=2393 #0 [727295ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [727295ms] <- openat=0x4 errno=14 cover=1115 #0 [727295ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [727295ms] <- openat=0x5 errno=14 cover=1115 #0 [727295ms] -> sendfile(0x5, 0x4, 0x0, 0x7ffffff9) #0 [727745ms] <- sendfile=0x800000 errno=14 cover=262143 enabling collider #0 [727750ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [727751ms] <- openat=0x3 errno=14 cover=1132 #0 [727751ms] -> io_setup(0x5, 0x20000080) #0 [727751ms] <- io_setup=0xffffffffffffffff errno=22 cover=40 pthread_create failed (errno 11) 2033/05/18 03:35:13 result hanged=false: 2033/05/18 03:35:13 #0: triaging type=7 2033/05/18 03:35:13 triaging input for call #6 sendfile (new signal=2) 03:35:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) io_submit(r1, 0x1, &(0x7f0000000680)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000240)='x', 0x1}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) [727815ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 170951 #0 [727825ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [727825ms] <- openat=0x3 errno=14 cover=7258 #0 [727826ms] -> io_setup(0x5, 0x20000080) #0 [727827ms] <- io_setup=0x0 errno=14 cover=2531 #0 [727827ms] -> io_submit(0x7fe19e216000, 0x1, 0x200008c0) #0 [727832ms] <- io_submit=0x1 errno=14 cover=10917 #0 [727834ms] -> io_submit(0x7fe19e216000, 0x1, 0x20000680) #0 [727834ms] <- io_submit=0x1 errno=14 cover=2460 #0 [727834ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [727834ms] <- openat=0x4 errno=14 cover=1126 #0 [727835ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [727835ms] <- openat=0x5 errno=14 cover=1115 #0 [727835ms] -> sendfile(0x5, 0x4, 0x0, 0x7ffffff9) #0 [728272ms] <- sendfile=0x800000 errno=14 cover=262143 2033/05/18 03:35:13 result hanged=false: 03:35:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) io_submit(r1, 0x1, &(0x7f0000000680)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000240)='x', 0x1}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) [728328ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 170953 #0 [728339ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [728341ms] <- openat=0x3 errno=14 cover=6811 #0 [728342ms] -> io_setup(0x5, 0x20000080) #0 [728342ms] <- io_setup=0x0 errno=14 cover=2505 #0 [728342ms] -> io_submit(0x7fe19e216000, 0x1, 0x200008c0) #0 [728347ms] <- io_submit=0x1 errno=14 cover=10803 #0 [728349ms] -> io_submit(0x7fe19e216000, 0x1, 0x20000680) #0 [728349ms] <- io_submit=0x1 errno=14 cover=2434 #0 [728349ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [728349ms] <- openat=0x4 errno=14 cover=1126 #0 [728350ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [728350ms] <- openat=0x5 errno=14 cover=1129 #0 [728350ms] -> sendfile(0x5, 0x4, 0x0, 0x7ffffff9) VM DIAGNOSIS: 16:30:13 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8226d24c RDI=ffffffff876c9080 RBP=ffffffff876c9040 RSP=ffff88806ce08770 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0ed925b R14=fffffbfff0ed9212 R15=dffffc0000000000 RIP=ffffffff8226d2a0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe19b695700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe19e22f000 CR3=000000003bdfe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=8100000000000000 4007 FPR6=8740000000000000 4008 FPR7=8740000000000000 4008 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000ff0000 YMM01=0000000000000000 0000000000000000 2525252525252525 2525252525252525 YMM02=0000000000000000 0000000000000000 0000000000000000 00000000ff000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000ff0000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffffffff83da28b0 RBX=ffff888008533280 RCX=ffffffff83d8ab68 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83da2c6f RBP=ffffed10010a6650 RSP=ffff88800857fe78 R8 =0000000000000001 R9 =ffff88806cf3406b R10=ffffed100d9e680d R11=0000000000000001 R12=0000000000000001 R13=ffffffff85473288 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83da28be RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000003c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4be12a17e0 CR3=000000002fee8000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=8100000000000000 4007 FPR6=8740000000000000 4008 FPR7=8740000000000000 4008 YMM00=0000000000000000 0000000000000000 0000000000000000 000000000000ff00 YMM01=0000000000000000 0000000000000000 2525252525252525 2525252525252525 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 000000000000ff00 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000