, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sysfs$2(0x2, 0x0, &(0x7f0000001200)=""/4096) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) r1 = getpgrp(r0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, &(0x7f0000000240)) 2021/11/11 12:42:48 #0: triaging type=7 12:42:48 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sysfs$2(0x2, 0x0, &(0x7f0000001200)=""/4096) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) r1 = getpgrp(r0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, &(0x7f0000000240)) 2021/11/11 12:42:48 triaging input for call #2 fork (new signal=3) [61799ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 585 #0 [61823ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) #0 [61833ms] <- perf_event_open=0xffffffffffffffff errno=95 cover=9109 #0 [61834ms] -> sysfs$2(0x2, 0x0, 0x20001200) #0 [61834ms] <- sysfs$2=0x0 errno=14 cover=412 #0 [61834ms] -> fork() #0 [61843ms] <- fork=0x24b errno=14 #0 [61843ms] <- fork=0x0 errno=14 cover=243736 cover=241974 #0 [61857ms] -> ptrace$setopts(0x4206, 0x24b, 0x0, 0x0) #0 [61859ms] <- ptrace$setopts=0x0 errno=14 cover=186 #0 [61860ms] -> tkill(0x24b, 0x12) #0 [61860ms] <- tkill=0x0 errno=14 cover=397 #0 [61861ms] -> getpgrp(0x24b) #0 [61861ms] <- getpgrp=0x249 errno=14 cover=48 #0 [61861ms] -> waitid(0x2, 0x249, 0x200001c0, 0x2, 0x20000240) #0 [61861ms] <- waitid=0x0 errno=14 cover=679 12:42:48 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sysfs$2(0x2, 0x0, &(0x7f0000001200)=""/4096) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) r1 = getpgrp(r0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, &(0x7f0000000240)) 2021/11/11 12:42:48 result hanged=false: [61903ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 588 #0 [61925ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) #0 [61937ms] <- perf_event_open=0xffffffffffffffff errno=95 cover=9395 #0 [61938ms] -> sysfs$2(0x2, 0x0, 0x20001200) #0 [61938ms] <- sysfs$2=0x0 errno=14 cover=358 #0 [61938ms] -> fork() #0 [61946ms] <- fork=0x24e errno=14 cover=242277 #0 [61946ms] <- fork=0x0 errno=14 cover=244531 #0 [61958ms] -> ptrace$setopts(0x4206, 0x24e, 0x0, 0x0) #0 [61958ms] <- ptrace$setopts=0x0 errno=14 cover=186 #0 [61958ms] -> tkill(0x24e, 0x12) #0 [61958ms] <- tkill=0x0 errno=14 cover=378 #0 [61959ms] -> getpgrp(0x24e) #0 [61959ms] <- getpgrp=0x24c errno=14 cover=48 #0 [61959ms] -> waitid(0x2, 0x24c, 0x200001c0, 0x2, 0x20000240) #0 [61960ms] <- waitid=0x0 errno=14 cover=605 12:42:48 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sysfs$2(0x2, 0x0, &(0x7f0000001200)=""/4096) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) r1 = getpgrp(r0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, &(0x7f0000000240)) 2021/11/11 12:42:48 result hanged=false: [62002ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 591 #0 [62030ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) #0 [62043ms] <- perf_event_open=0xffffffffffffffff errno=95 cover=9106 #0 [62044ms] -> sysfs$2(0x2, 0x0, 0x20001200) #0 [62044ms] <- sysfs$2=0x0 errno=14 cover=358 #0 [62045ms] -> fork() #0 [62052ms] <- fork=0x251 errno=14 cover=242131 #0 [62053ms] <- fork=0x0 errno=14 cover=244803 #0 [62065ms] -> ptrace$setopts(0x4206, 0x251, 0x0, 0x0) #0 [62069ms] <- ptrace$setopts=0x0 errno=14 cover=186 #0 [62069ms] -> tkill(0x251, 0x12) #0 [62069ms] <- tkill=0x0 errno=14 cover=392 #0 [62069ms] -> getpgrp(0x251) #0 [62069ms] <- getpgrp=0x24f errno=14 cover=48 #0 [62070ms] -> waitid(0x2, 0x24f, 0x200001c0, 0x2, 0x20000240) #0 [62070ms] <- waitid=0x0 errno=14 cover=619 2021/11/11 12:42:49 result hanged=false: 2021/11/11 12:42:49 added new input for call #2 fork to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sysfs$2(0x2, 0x0, &(0x7f0000001200)=""/4096) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) r1 = getpgrp(r0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, &(0x7f0000000240)) 12:42:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sysfs$2(0x2, 0x0, &(0x7f0000001200)=""/4096) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) r1 = getpgrp(r0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, &(0x7f0000000240)) 2021/11/11 12:42:49 #0: triaging type=7 2021/11/11 12:42:49 triaging input for call #1 sysfs$2 (new signal=19) [62117ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 594 #0 [62136ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) #0 [62144ms] <- perf_event_open=0xffffffffffffffff errno=95 cover=8976 #0 [62145ms] -> sysfs$2(0x2, 0x0, 0x20001200) #0 [62145ms] <- sysfs$2=0x0 errno=14 cover=412 #0 [62145ms] -> fork() #0 [62159ms] <- fork=0x254 errno=14 cover=242516 #0 [62160ms] <- fork=0x0 errno=14 cover=245360 #0 [62172ms] -> ptrace$setopts(0x4206, 0x254, 0x0, 0x0) #0 [62173ms] <- ptrace$setopts=0x0 errno=14 cover=186 #0 [62173ms] -> tkill(0x254, 0x12) #0 [62173ms] <- tkill=0x0 errno=14 cover=368 #0 [62174ms] -> getpgrp(0x254) #0 [62174ms] <- getpgrp=0x252 errno=14 cover=48 #0 [62174ms] -> waitid(0x2, 0x252, 0x200001c0, 0x2, 0x20000240) #0 [62174ms] <- waitid=0x0 errno=14 cover=605 2021/11/11 12:42:49 result hanged=false: 12:42:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sysfs$2(0x2, 0x0, &(0x7f0000001200)=""/4096) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) r1 = getpgrp(r0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, &(0x7f0000000240)) [62218ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 597 #0 [62243ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) #0 [62254ms] <- perf_event_open=0xffffffffffffffff errno=95 cover=9369 #0 [62255ms] -> sysfs$2(0x2, 0x0, 0x20001200) #0 [62255ms] <- sysfs$2=0x0 errno=14 cover=358 #0 [62255ms] -> fork() #0 [62265ms] <- fork=0x257 errno=14 cover=242265 #0 [62265ms] <- fork=0x0 errno=14 cover=243906 #0 [62278ms] -> ptrace$setopts(0x4206, 0x257, 0x0, 0x0) #0 [62279ms] <- ptrace$setopts=0x0 errno=14 cover=186 #0 [62279ms] -> tkill(0x257, 0x12) #0 [62279ms] <- tkill=0x0 errno=14 cover=393 #0 [62279ms] -> getpgrp(0x257) #0 [62279ms] <- getpgrp=0x255 errno=14 cover=48 #0 [62280ms] -> waitid(0x2, 0x255, 0x200001c0, 0x2, 0x20000240) #0 [62280ms] <- waitid=0x0 errno=14 cover=605 2021/11/11 12:42:49 result hanged=false: 12:42:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sysfs$2(0x2, 0x0, &(0x7f0000001200)=""/4096) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) r1 = getpgrp(r0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, &(0x7f0000000240)) [62323ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 600 #0 [62343ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) #0 [62355ms] <- perf_event_open=0xffffffffffffffff errno=95 cover=9443 #0 [62356ms] -> sysfs$2(0x2, 0x0, 0x20001200) #0 [62356ms] <- sysfs$2=0x0 errno=14 cover=358 #0 [62356ms] -> fork() #0 [62377ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [62392ms] -> ptrace$setopts(0x4206, 0x0, 0x0, 0x0) #0 [62392ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=61 #0 [62393ms] -> tkill(0x0, 0x12) #0 [62393ms] <- tkill=0xffffffffffffffff errno=22 cover=34 #0 [62393ms] -> getpgrp(0x0) #0 [62393ms] <- getpgrp=0x258 errno=14 cover=48 #0 [62393ms] -> waitid(0x2, 0x258, 0x200001c0, 0x2, 0x20000240) #0 [62393ms] <- waitid=0xffffffffffffffff errno=10 cover=328 2021/11/11 12:42:49 result hanged=false: 2021/11/11 12:42:49 added new input for call #1 sysfs$2 to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sysfs$2(0x2, 0x0, &(0x7f0000001200)=""/4096) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) r1 = getpgrp(r0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, &(0x7f0000000240)) 12:42:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) close(r1) openat(r0, &(0x7f0000000040)='./file0\x00', 0x40001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [62442ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 603 #0 [62463ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [62464ms] <- openat=0x3 errno=14 cover=2688 #0 [62465ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [62466ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=569 #0 [62467ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [62475ms] <- perf_event_open=0x4 errno=14 cover=20456 #0 [62476ms] -> ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) #0 [62476ms] <- ioctl$PERF_EVENT_IOC_SET_OUTPUT=0xffffffffffffffff errno=9 cover=45 #0 [62477ms] -> close(0x4) #0 [62483ms] <- close=0x0 errno=14 cover=17831 #0 [62484ms] -> openat(0x3, 0x20000040, 0x40001, 0x0) #0 [62484ms] <- openat=0xffffffffffffffff errno=20 cover=778 #0 [62484ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [62485ms] <- socket$nl_generic=0x4 errno=14 cover=1433 enabling collider #0 [62485ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [62485ms] <- openat=0x3 errno=14 cover=2109 #0 [62486ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [62488ms] <- perf_event_open=0x4 errno=14 cover=19011 pthread_create failed (errno 11) 2021/11/11 12:42:49 result hanged=false: 2021/11/11 12:42:49 #0: triaging type=7 2021/11/11 12:42:49 triaging input for call #4 close (new signal=63) 12:42:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) close(r1) openat(r0, &(0x7f0000000040)='./file0\x00', 0x40001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [62583ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 705 #0 [62603ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [62604ms] <- openat=0x3 errno=14 cover=2730 #0 [62605ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [62605ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=569 #0 [62606ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [62614ms] <- perf_event_open=0x4 errno=14 cover=20765 #0 [62616ms] -> ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) #0 [62616ms] <- ioctl$PERF_EVENT_IOC_SET_OUTPUT=0xffffffffffffffff errno=9 cover=45 #0 [62616ms] -> close(0x4) #0 [62626ms] <- close=0x0 errno=14 cover=18080 #0 [62628ms] -> openat(0x3, 0x20000040, 0x40001, 0x0) #0 [62628ms] <- openat=0xffffffffffffffff errno=20 cover=787 #0 [62628ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [62628ms] <- socket$nl_generic=0x4 errno=14 cover=1378 12:42:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) close(r1) openat(r0, &(0x7f0000000040)='./file0\x00', 0x40001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2021/11/11 12:42:49 result hanged=false: [62673ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 707 #0 [62691ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [62692ms] <- openat=0x3 errno=14 cover=2687 #0 [62699ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [62700ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=580 #0 [62700ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [62705ms] <- perf_event_open=0x4 errno=14 cover=20614 #0 [62707ms] -> ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) #0 [62707ms] <- ioctl$PERF_EVENT_IOC_SET_OUTPUT=0xffffffffffffffff errno=9 cover=45 #0 [62707ms] -> close(0x4) #0 [62720ms] <- close=0x0 errno=14 cover=17948 #0 [62721ms] -> openat(0x3, 0x20000040, 0x40001, 0x0) #0 [62721ms] <- openat=0xffffffffffffffff errno=20 cover=723 #0 [62721ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [62722ms] <- socket$nl_generic=0x4 errno=14 cover=1411 12:42:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) close(r1) openat(r0, &(0x7f0000000040)='./file0\x00', 0x40001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2021/11/11 12:42:49 result hanged=false: [62766ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 709 #0 [62786ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [62788ms] <- openat=0x3 errno=14 cover=2724 #0 [62790ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [62790ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=671 #0 [62793ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [62806ms] <- perf_event_open=0x4 errno=14 cover=20666 #0 [62808ms] -> ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) #0 [62808ms] <- ioctl$PERF_EVENT_IOC_SET_OUTPUT=0xffffffffffffffff errno=9 cover=45 #0 [62809ms] -> close(0x4) #0 [62821ms] <- close=0x0 errno=14 cover=18007 #0 [62823ms] -> openat(0x3, 0x20000040, 0x40001, 0x0) #0 [62823ms] <- openat=0xffffffffffffffff errno=20 cover=842 #0 [62824ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [62824ms] <- socket$nl_generic=0x4 errno=14 cover=1455 2021/11/11 12:42:49 result hanged=false: 2021/11/11 12:42:49 added new input for call #4 close to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) close(r1) openat(r0, &(0x7f0000000040)='./file0\x00', 0x40001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 12:42:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) close(r1) openat(r0, &(0x7f0000000040)='./file0\x00', 0x40001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2021/11/11 12:42:49 #0: triaging type=7 2021/11/11 12:42:49 triaging input for call #1 perf_event_open (new signal=1) [62872ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 711 #0 [62890ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [62891ms] <- openat=0x3 errno=14 cover=2735 #0 [62892ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [62892ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=569 #0 [62892ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [62898ms] <- perf_event_open=0x4 errno=14 cover=20608 #0 [62903ms] -> ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) #0 [62903ms] <- ioctl$PERF_EVENT_IOC_SET_OUTPUT=0xffffffffffffffff errno=9 cover=45 #0 [62903ms] -> close(0x4) #0 [62909ms] <- close=0x0 errno=14 cover=17920 #0 [62911ms] -> openat(0x3, 0x20000040, 0x40001, 0x0) #0 [62911ms] <- openat=0xffffffffffffffff errno=20 cover=788 #0 [62912ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [62912ms] <- socket$nl_generic=0x4 errno=14 cover=1455 2021/11/11 12:42:49 result hanged=false: 12:42:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) close(r1) openat(r0, &(0x7f0000000040)='./file0\x00', 0x40001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [62958ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 713 #0 [62977ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [62978ms] <- openat=0x3 errno=14 cover=2779 #0 [62981ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [62981ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=569 #0 [62990ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [62997ms] <- perf_event_open=0x4 errno=14 cover=20810 #0 [62999ms] -> ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) #0 [63000ms] <- ioctl$PERF_EVENT_IOC_SET_OUTPUT=0xffffffffffffffff errno=9 cover=45 #0 [63001ms] -> close(0x4) #0 [63014ms] <- close=0x0 errno=14 cover=18029 #0 [63016ms] -> openat(0x3, 0x20000040, 0x40001, 0x0) #0 [63017ms] <- openat=0xffffffffffffffff errno=20 cover=777 #0 [63017ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [63017ms] <- socket$nl_generic=0x4 errno=14 cover=1468 2021/11/11 12:42:50 result hanged=false: 12:42:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) close(r1) openat(r0, &(0x7f0000000040)='./file0\x00', 0x40001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) iptable filter/10: resetting iptable mangle/10: resetting [63064ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 715 #0 [63084ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [63085ms] <- openat=0x3 errno=14 cover=2793 #0 [63085ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [63086ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=569 #0 [63086ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [63095ms] <- perf_event_open=0x4 errno=14 cover=20760 #0 [63096ms] -> ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) #0 [63097ms] <- ioctl$PERF_EVENT_IOC_SET_OUTPUT=0xffffffffffffffff errno=9 cover=45 #0 [63097ms] -> close(0x4) #0 [63103ms] <- close=0x0 errno=14 cover=17967 #0 [63105ms] -> openat(0x3, 0x20000040, 0x40001, 0x0) #0 [63105ms] <- openat=0xffffffffffffffff errno=20 cover=789 #0 [63106ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [63106ms] <- socket$nl_generic=0x4 errno=14 cover=1439 2021/11/11 12:42:50 result hanged=false: 2021/11/11 12:42:50 added new input for call #1 perf_event_open to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) close(r1) openat(r0, &(0x7f0000000040)='./file0\x00', 0x40001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 12:42:50 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) [63153ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 717 #0 [63179ms] -> prctl$PR_CAPBSET_READ(0x17, 0x0) #0 [63179ms] <- prctl$PR_CAPBSET_READ=0x1 errno=22 cover=43 enabling collider #0 [63180ms] -> prctl$PR_CAPBSET_READ(0x17, 0x0) #0 [63180ms] <- prctl$PR_CAPBSET_READ=0x1 errno=22 cover=43 2021/11/11 12:42:50 result hanged=false: 2021/11/11 12:42:50 #0: triaging type=7 2021/11/11 12:42:50 triaging input for call #0 prctl$PR_CAPBSET_READ (new signal=4) 12:42:50 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) [63226ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 719 #0 [63246ms] -> prctl$PR_CAPBSET_READ(0x17, 0x0) #0 [63248ms] <- prctl$PR_CAPBSET_READ=0x1 errno=22 cover=43 12:42:50 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) 2021/11/11 12:42:50 result hanged=false: [63292ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 721 #0 [63310ms] -> prctl$PR_CAPBSET_READ(0x17, 0x0) #0 [63310ms] <- prctl$PR_CAPBSET_READ=0x1 errno=22 cover=43 12:42:50 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) 2021/11/11 12:42:50 result hanged=false: [63358ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 723 #0 [63377ms] -> prctl$PR_CAPBSET_READ(0x17, 0x0) #0 [63377ms] <- prctl$PR_CAPBSET_READ=0x1 errno=22 cover=43 2021/11/11 12:42:50 result hanged=false: 2021/11/11 12:42:50 added new input for call #0 prctl$PR_CAPBSET_READ to corpus: prctl$PR_CAPBSET_READ(0x17, 0x0) 12:42:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x8801) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) [63425ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 725 #0 [63446ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [63446ms] <- socket$inet6_udp=0x3 errno=14 cover=1720 #0 [63447ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x65, 0x20000040, 0x4) #0 [63447ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=105 #0 [63448ms] -> sendmsg$inet6(0x3, 0x20000080, 0x8801) #0 [63449ms] <- sendmsg$inet6=0x0 errno=14 cover=1239 #0 [63449ms] -> sendmsg$inet(0x3, 0x20000680, 0x0) #0 [63449ms] <- sendmsg$inet=0x0 errno=14 cover=1836 enabling collider #0 [63451ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [63452ms] <- socket$inet6_udp=0x3 errno=14 cover=1817 #0 [63456ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x65, 0x20000040, 0x4) #0 [63456ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=105 pthread_create failed (errno 11) 2021/11/11 12:42:50 result hanged=false: 2021/11/11 12:42:50 #0: triaging type=7 12:42:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x8801) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 2021/11/11 12:42:50 triaging input for call #3 sendmsg$inet (new signal=17) iptable filter/10: resetting iptable mangle/10: resetting [63533ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 827 #0 [63554ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [63555ms] <- socket$inet6_udp=0x3 errno=14 cover=6222 #0 [63558ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x65, 0x20000040, 0x4) #0 [63559ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=105 #0 [63560ms] -> sendmsg$inet6(0x3, 0x20000080, 0x8801) #0 [63560ms] <- sendmsg$inet6=0x0 errno=14 cover=1109 #0 [63561ms] -> sendmsg$inet(0x3, 0x20000680, 0x0) #0 [63561ms] <- sendmsg$inet=0x0 errno=14 cover=735 12:42:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x8801) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 2021/11/11 12:42:50 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [63606ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 829 #0 [63625ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [63626ms] <- socket$inet6_udp=0x3 errno=14 cover=1706 #0 [63627ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x65, 0x20000040, 0x4) #0 [63627ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=105 #0 [63627ms] -> sendmsg$inet6(0x3, 0x20000080, 0x8801) #0 [63627ms] <- sendmsg$inet6=0x0 errno=14 cover=1081 #0 [63628ms] -> sendmsg$inet(0x3, 0x20000680, 0x0) #0 [63628ms] <- sendmsg$inet=0x0 errno=14 cover=723 12:42:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x8801) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 2021/11/11 12:42:50 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [63676ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 831 #0 [63697ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [63697ms] <- socket$inet6_udp=0x3 errno=14 cover=1684 #0 [63698ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x65, 0x20000040, 0x4) #0 [63698ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=105 #0 [63698ms] -> sendmsg$inet6(0x3, 0x20000080, 0x8801) #0 [63698ms] <- sendmsg$inet6=0x0 errno=14 cover=1138 #0 [63698ms] -> sendmsg$inet(0x3, 0x20000680, 0x0) #0 [63698ms] <- sendmsg$inet=0x0 errno=14 cover=723 2021/11/11 12:42:50 result hanged=false: 2021/11/11 12:42:50 added new input for call #3 sendmsg$inet to corpus: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x8801) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 2021/11/11 12:42:50 #0: triaging type=7 12:42:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x8801) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 2021/11/11 12:42:50 triaging input for call #2 sendmsg$inet6 (new signal=7) iptable filter/10: resetting iptable mangle/10: resetting [63748ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 833 #0 [63767ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [63767ms] <- socket$inet6_udp=0x3 errno=14 cover=1753 #0 [63768ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x65, 0x20000040, 0x4) #0 [63769ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=105 #0 [63769ms] -> sendmsg$inet6(0x3, 0x20000080, 0x8801) #0 [63769ms] <- sendmsg$inet6=0x0 errno=14 cover=1198 #0 [63770ms] -> sendmsg$inet(0x3, 0x20000680, 0x0) #0 [63770ms] <- sendmsg$inet=0x0 errno=14 cover=719 2021/11/11 12:42:50 result hanged=false: 12:42:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x8801) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) iptable filter/10: resetting iptable mangle/10: resetting [63820ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 835 #0 [63838ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [63838ms] <- socket$inet6_udp=0x3 errno=14 cover=1720 #0 [63839ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x65, 0x20000040, 0x4) #0 [63839ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=105 #0 [63839ms] -> sendmsg$inet6(0x3, 0x20000080, 0x8801) #0 [63840ms] <- sendmsg$inet6=0x0 errno=14 cover=1103 #0 [63840ms] -> sendmsg$inet(0x3, 0x20000680, 0x0) #0 [63840ms] <- sendmsg$inet=0x0 errno=14 cover=723 2021/11/11 12:42:50 result hanged=false: 12:42:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x8801) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) iptable filter/10: resetting iptable mangle/10: resetting [63886ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 837 #0 [63904ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [63905ms] <- socket$inet6_udp=0x3 errno=14 cover=1728 #0 [63906ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x65, 0x20000040, 0x4) #0 [63906ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=105 #0 [63908ms] -> sendmsg$inet6(0x3, 0x20000080, 0x8801) #0 [63908ms] <- sendmsg$inet6=0x0 errno=14 cover=1070 #0 [63913ms] -> sendmsg$inet(0x3, 0x20000680, 0x0) #0 [63913ms] <- sendmsg$inet=0x0 errno=14 cover=723 2021/11/11 12:42:50 result hanged=false: 2021/11/11 12:42:50 added new input for call #2 sendmsg$inet6 to corpus: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x8801) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 2021/11/11 12:42:50 #0: triaging type=7 2021/11/11 12:42:50 triaging input for call #1 setsockopt$inet6_udp_int (new signal=2) 12:42:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x8801) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) iptable filter/10: resetting iptable mangle/10: resetting [63964ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 839 #0 [63992ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [63992ms] <- socket$inet6_udp=0x3 errno=14 cover=1684 #0 [63993ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x65, 0x20000040, 0x4) #0 [63993ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=105 #0 [63993ms] -> sendmsg$inet6(0x3, 0x20000080, 0x8801) #0 [63993ms] <- sendmsg$inet6=0x0 errno=14 cover=1081 #0 [63994ms] -> sendmsg$inet(0x3, 0x20000680, 0x0) #0 [63994ms] <- sendmsg$inet=0x0 errno=14 cover=723 2021/11/11 12:42:50 result hanged=false: 12:42:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x8801) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) iptable filter/10: resetting iptable mangle/10: resetting [64040ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 841 #0 [64061ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [64061ms] <- socket$inet6_udp=0x3 errno=14 cover=1739 #0 [64063ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x65, 0x20000040, 0x4) #0 [64063ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=105 #0 [64064ms] -> sendmsg$inet6(0x3, 0x20000080, 0x8801) #0 [64064ms] <- sendmsg$inet6=0x0 errno=14 cover=1106 #0 [64064ms] -> sendmsg$inet(0x3, 0x20000680, 0x0) #0 [64064ms] <- sendmsg$inet=0x0 errno=14 cover=723 2021/11/11 12:42:51 result hanged=false: 12:42:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x8801) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) iptable filter/10: resetting iptable mangle/10: resetting [64110ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 843 #0 [64132ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [64132ms] <- socket$inet6_udp=0x3 errno=14 cover=1698 #0 [64133ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x65, 0x20000040, 0x4) #0 [64133ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=105 #0 [64133ms] -> sendmsg$inet6(0x3, 0x20000080, 0x8801) #0 [64133ms] <- sendmsg$inet6=0x0 errno=14 cover=1092 #0 [64134ms] -> sendmsg$inet(0x3, 0x20000680, 0x0) #0 [64135ms] <- sendmsg$inet=0x0 errno=14 cover=765 2021/11/11 12:42:51 result hanged=false: 2021/11/11 12:42:51 added new input for call #1 setsockopt$inet6_udp_int to corpus: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x8801) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 12:42:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x8801) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 2021/11/11 12:42:51 #0: triaging type=7 2021/11/11 12:42:51 triaging input for call #0 socket$inet6_udp (new signal=2) iptable filter/10: resetting iptable mangle/10: resetting [64183ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 845 #0 [64202ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [64202ms] <- socket$inet6_udp=0x3 errno=14 cover=1742 #0 [64203ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x65, 0x20000040, 0x4) #0 [64203ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=105 #0 [64203ms] -> sendmsg$inet6(0x3, 0x20000080, 0x8801) #0 [64204ms] <- sendmsg$inet6=0x0 errno=14 cover=1092 #0 [64207ms] -> sendmsg$inet(0x3, 0x20000680, 0x0) #0 [64207ms] <- sendmsg$inet=0x0 errno=14 cover=737 2021/11/11 12:42:51 result hanged=false: 12:42:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x8801) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) iptable filter/10: resetting iptable mangle/10: resetting [64258ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 847 #0 [64282ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [64282ms] <- socket$inet6_udp=0x3 errno=14 cover=1700 #0 [64284ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x65, 0x20000040, 0x4) #0 [64284ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=105 #0 [64284ms] -> sendmsg$inet6(0x3, 0x20000080, 0x8801) #0 [64285ms] <- sendmsg$inet6=0x0 errno=14 cover=1117 #0 [64290ms] -> sendmsg$inet(0x3, 0x20000680, 0x0) #0 [64290ms] <- sendmsg$inet=0x0 errno=14 cover=723 12:42:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x8801) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 2021/11/11 12:42:51 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [64337ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 849 #0 [64360ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [64360ms] <- socket$inet6_udp=0x3 errno=14 cover=1731 #0 [64362ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x65, 0x20000040, 0x4) #0 [64362ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=105 #0 [64363ms] -> sendmsg$inet6(0x3, 0x20000080, 0x8801) #0 [64363ms] <- sendmsg$inet6=0x0 errno=14 cover=1092 #0 [64364ms] -> sendmsg$inet(0x3, 0x20000680, 0x0) #0 [64364ms] <- sendmsg$inet=0x0 errno=14 cover=723 2021/11/11 12:42:51 result hanged=false: 2021/11/11 12:42:51 added new input for call #0 socket$inet6_udp to corpus: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x8801) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 12:42:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000002880)='ext4\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x18082a, &(0x7f0000000200)={[{@nojournal_checksum}]}) iptable filter/10: resetting iptable mangle/10: resetting [64417ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 851 #0 [64436ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [64442ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=15075 #0 [64443ms] -> mount$9p_unix(0x20000180, 0x20002f00, 0x0, 0x1f3000, 0x0) #0 [64443ms] <- mount$9p_unix=0x0 errno=14 cover=2797 #0 [64444ms] -> syz_mount_image$ext4(0x20002880, 0x20000000, 0x0, 0x0, 0x0, 0x18082a, 0x20000200) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='ext4' flags=1574954 opts='nojournal_checksum,,errors=continue' [ 2969.909437] EXT4-fs (sda): changing journal_checksum during remount not supported; ignoring [ 2969.913726] EXT4-fs (sda): re-mounted. Opts: nojournal_checksum,,errors=continue #0 [64455ms] <- syz_mount_image$ext4=0x3 errno=0 cover=42857 enabling collider #0 [64460ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [64461ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1347 #0 [64462ms] -> mount$9p_unix(0x20000180, 0x20002f00, 0x0, 0x1f3000, 0x0) #0 [64462ms] <- mount$9p_unix=0x0 errno=14 cover=2664 pthread_create failed (errno 11) 2021/11/11 12:42:51 result hanged=false: 2021/11/11 12:42:51 #0: triaging type=7 2021/11/11 12:42:51 triaging input for call #2 syz_mount_image$ext4 (new signal=10) 12:42:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000002880)='ext4\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x18082a, &(0x7f0000000200)={[{@nojournal_checksum}]}) umount(./294/file0) umount(./294/file0) [64516ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 953 #0 [64522ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [64525ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12930 #0 [64527ms] -> mount$9p_unix(0x20000180, 0x20002f00, 0x0, 0x1f3000, 0x0) #0 [64528ms] <- mount$9p_unix=0x0 errno=14 cover=2808 #0 [64529ms] -> syz_mount_image$ext4(0x20002880, 0x20000000, 0x0, 0x0, 0x0, 0x18082a, 0x20000200) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='ext4' flags=1574954 opts='nojournal_checksum,,errors=continue' [ 2969.990773] EXT4-fs (sda): changing journal_checksum during remount not supported; ignoring [ 2969.992636] EXT4-fs (sda): re-mounted. Opts: nojournal_checksum,,errors=continue #0 [64533ms] <- syz_mount_image$ext4=0x3 errno=0 cover=9294 2021/11/11 12:42:51 result hanged=false: 12:42:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000002880)='ext4\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x18082a, &(0x7f0000000200)={[{@nojournal_checksum}]}) umount(./295/file0) [64557ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 955 #0 [64566ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [64568ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12861 #0 [64570ms] -> mount$9p_unix(0x20000180, 0x20002f00, 0x0, 0x1f3000, 0x0) #0 [64572ms] <- mount$9p_unix=0x0 errno=14 cover=2861 #0 [64573ms] -> syz_mount_image$ext4(0x20002880, 0x20000000, 0x0, 0x0, 0x0, 0x18082a, 0x20000200) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='ext4' flags=1574954 opts='nojournal_checksum,,errors=continue' [ 2970.035534] EXT4-fs (sda): changing journal_checksum during remount not supported; ignoring [ 2970.037467] EXT4-fs (sda): re-mounted. Opts: nojournal_checksum,,errors=continue #0 [64579ms] <- syz_mount_image$ext4=0x3 errno=0 cover=9417 2021/11/11 12:42:51 result hanged=false: 12:42:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000002880)='ext4\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x18082a, &(0x7f0000000200)={[{@nojournal_checksum}]}) umount(./296/file0) [64600ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 957 #0 [64606ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [64608ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12949 #0 [64611ms] -> mount$9p_unix(0x20000180, 0x20002f00, 0x0, 0x1f3000, 0x0) #0 [64611ms] <- mount$9p_unix=0x0 errno=14 cover=2798 #0 [64612ms] -> syz_mount_image$ext4(0x20002880, 0x20000000, 0x0, 0x0, 0x0, 0x18082a, 0x20000200) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='ext4' flags=1574954 opts='nojournal_checksum,,errors=continue' [ 2970.073828] EXT4-fs (sda): changing journal_checksum during remount not supported; ignoring [ 2970.076055] EXT4-fs (sda): re-mounted. Opts: nojournal_checksum,,errors=continue #0 [64620ms] <- syz_mount_image$ext4=0x3 errno=0 cover=9307 umount(./297/file0) 2021/11/11 12:42:51 result hanged=false: 2021/11/11 12:42:51 added new input for call #2 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000002880)='ext4\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x18082a, &(0x7f0000000200)={[{@nojournal_checksum}]}) 12:42:51 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) [64647ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 959 #0 [64657ms] -> creat(0x20000000, 0x0) #0 [64658ms] <- creat=0x3 errno=14 cover=6716 #0 [64659ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [64659ms] <- perf_event_open=0x4 errno=14 cover=6612 #0 [64660ms] -> pwrite64(0x3, 0x0, 0x0, 0x0) #0 [64660ms] <- pwrite64=0x0 errno=14 cover=170 enabling collider #0 [64671ms] -> creat(0x20000000, 0x0) #0 [64672ms] <- creat=0x3 errno=14 cover=5039 #0 [64672ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [64674ms] <- perf_event_open=0x4 errno=14 cover=6655 pthread_create failed (errno 11) 2021/11/11 12:42:51 result hanged=false: 2021/11/11 12:42:51 #0: triaging type=7 2021/11/11 12:42:51 triaging input for call #2 pwrite64 (new signal=1) 12:42:51 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) [64738ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1061 #0 [64745ms] -> creat(0x20000000, 0x0) #0 [64747ms] <- creat=0x3 errno=14 cover=6677 #0 [64748ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [64750ms] <- perf_event_open=0x4 errno=14 cover=7035 #0 [64751ms] -> pwrite64(0x3, 0x0, 0x0, 0x0) #0 [64751ms] <- pwrite64=0x0 errno=14 cover=170 12:42:51 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) 2021/11/11 12:42:51 result hanged=false: [64778ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1063 #0 [64790ms] -> creat(0x20000000, 0x0) #0 [64790ms] <- creat=0x3 errno=14 cover=6858 #0 [64792ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [64793ms] <- perf_event_open=0x4 errno=14 cover=7064 #0 [64794ms] -> pwrite64(0x3, 0x0, 0x0, 0x0) #0 [64794ms] <- pwrite64=0x0 errno=14 cover=170 2021/11/11 12:42:51 result hanged=false: 12:42:51 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) [64821ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1065 #0 [64829ms] -> creat(0x20000000, 0x0) #0 [64829ms] <- creat=0x3 errno=14 cover=6861 #0 [64832ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [64833ms] <- perf_event_open=0x4 errno=14 cover=6677 #0 [64836ms] -> pwrite64(0x3, 0x0, 0x0, 0x0) #0 [64838ms] <- pwrite64=0x0 errno=14 cover=170 2021/11/11 12:42:51 result hanged=false: 2021/11/11 12:42:51 added new input for call #2 pwrite64 to corpus: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) 12:42:51 executing program 0: syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x90000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfb, 0x10}, 0xc) lsetxattr$security_capability(0x0, &(0x7f0000000600), 0x0, 0x0, 0x0) chown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) mount$9p_rdma(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x1, &(0x7f0000000a40)={'trans=rdma,', {}, 0x2c, {[{@sq}, {@common=@afid}]}}) [64871ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1067 #0 [64881ms] -> syz_mount_image$nfs4(0x20000000, 0x20000040, 0x0, 0x0, 0x20000100, 0x90000, 0x0) SIGSEGV on (nil), skipping #0 [64885ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=20708 #0 [64887ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [64888ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=6352 #0 [64888ms] -> bind$netlink(0xffffffffffffffff, 0x20000440, 0xc) #0 [64888ms] <- bind$netlink=0xffffffffffffffff errno=9 cover=48 #0 [64888ms] -> lsetxattr$security_capability(0x0, 0x20000600, 0x0, 0x0, 0x0) #0 [64888ms] <- lsetxattr$security_capability=0xffffffffffffffff errno=14 cover=648 #0 [64889ms] -> chown(0x20000700, 0x0, 0x0) #0 [64890ms] <- chown=0x0 errno=14 cover=1448 #0 [64890ms] -> syz_genetlink_get_family_id$ieee802154(0x20000800, 0x6) syz_genetlink_get_family_id(802.15.4 MAC, 6) #0 [64891ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5319 #0 [64892ms] -> mount$9p_rdma(0x20000980, 0x200009c0, 0x20000a00, 0x1, 0x20000a40) [ 2970.355022] 9pnet: Could not find request transport: rdma #0 [64895ms] <- mount$9p_rdma=0xffffffffffffffff errno=22 cover=4940 enabling collider #0 [64897ms] -> syz_mount_image$nfs4(0x20000000, 0x20000040, 0x0, 0x0, 0x20000100, 0x90000, 0x0) SIGSEGV on (nil), skipping #0 [64910ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=17 cover=15233 #0 [64910ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [64913ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5634 pthread_create failed (errno 11) 12:42:51 executing program 0: syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x90000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfb, 0x10}, 0xc) lsetxattr$security_capability(0x0, &(0x7f0000000600), 0x0, 0x0, 0x0) chown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) mount$9p_rdma(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x1, &(0x7f0000000a40)={'trans=rdma,', {}, 0x2c, {[{@sq}, {@common=@afid}]}}) 2021/11/11 12:42:51 result hanged=false: 2021/11/11 12:42:51 #0: triaging type=7 2021/11/11 12:42:51 triaging input for call #4 chown (new signal=8) [64981ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1169 #0 [64992ms] -> syz_mount_image$nfs4(0x20000000, 0x20000040, 0x0, 0x0, 0x20000100, 0x90000, 0x0) SIGSEGV on (nil), skipping #0 [64998ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=20575 #0 [65001ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [65003ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=6361 #0 [65005ms] -> bind$netlink(0xffffffffffffffff, 0x20000440, 0xc) #0 [65005ms] <- bind$netlink=0xffffffffffffffff errno=9 cover=48 #0 [65006ms] -> lsetxattr$security_capability(0x0, 0x20000600, 0x0, 0x0, 0x0) #0 [65006ms] <- lsetxattr$security_capability=0xffffffffffffffff errno=14 cover=619 #0 [65006ms] -> chown(0x20000700, 0x0, 0x0) #0 [65007ms] <- chown=0x0 errno=14 cover=1416 #0 [65008ms] -> syz_genetlink_get_family_id$ieee802154(0x20000800, 0x6) syz_genetlink_get_family_id(802.15.4 MAC, 6) #0 [65009ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5277 #0 [65010ms] -> mount$9p_rdma(0x20000980, 0x200009c0, 0x20000a00, 0x1, 0x20000a40) [ 2970.472474] 9pnet: Could not find request transport: rdma #0 [65012ms] <- mount$9p_rdma=0xffffffffffffffff errno=22 cover=4974 12:42:52 executing program 0: syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x90000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfb, 0x10}, 0xc) lsetxattr$security_capability(0x0, &(0x7f0000000600), 0x0, 0x0, 0x0) chown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) mount$9p_rdma(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x1, &(0x7f0000000a40)={'trans=rdma,', {}, 0x2c, {[{@sq}, {@common=@afid}]}}) 2021/11/11 12:42:52 result hanged=false: [65048ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1171 #0 [65060ms] -> syz_mount_image$nfs4(0x20000000, 0x20000040, 0x0, 0x0, 0x20000100, 0x90000, 0x0) SIGSEGV on (nil), skipping #0 [65064ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=20756 #0 [65067ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [65068ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=6304 #0 [65069ms] -> bind$netlink(0xffffffffffffffff, 0x20000440, 0xc) #0 [65069ms] <- bind$netlink=0xffffffffffffffff errno=9 cover=48 #0 [65069ms] -> lsetxattr$security_capability(0x0, 0x20000600, 0x0, 0x0, 0x0) #0 [65070ms] <- lsetxattr$security_capability=0xffffffffffffffff errno=14 cover=637 #0 [65070ms] -> chown(0x20000700, 0x0, 0x0) #0 [65071ms] <- chown=0x0 errno=14 cover=1391 #0 [65071ms] -> syz_genetlink_get_family_id$ieee802154(0x20000800, 0x6) syz_genetlink_get_family_id(802.15.4 MAC, 6) #0 [65072ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5252 #0 [65074ms] -> mount$9p_rdma(0x20000980, 0x200009c0, 0x20000a00, 0x1, 0x20000a40) [ 2970.535953] 9pnet: Could not find request transport: rdma #0 [65076ms] <- mount$9p_rdma=0xffffffffffffffff errno=22 cover=5035 12:42:52 executing program 0: syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x90000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfb, 0x10}, 0xc) lsetxattr$security_capability(0x0, &(0x7f0000000600), 0x0, 0x0, 0x0) chown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) mount$9p_rdma(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x1, &(0x7f0000000a40)={'trans=rdma,', {}, 0x2c, {[{@sq}, {@common=@afid}]}}) 2021/11/11 12:42:52 result hanged=false: [65106ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1173 #0 [65114ms] -> syz_mount_image$nfs4(0x20000000, 0x20000040, 0x0, 0x0, 0x20000100, 0x90000, 0x0) SIGSEGV on (nil), skipping #0 [65116ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=20722 #0 [65118ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [65120ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=6232 #0 [65121ms] -> bind$netlink(0xffffffffffffffff, 0x20000440, 0xc) #0 [65121ms] <- bind$netlink=0xffffffffffffffff errno=9 cover=48 #0 [65121ms] -> lsetxattr$security_capability(0x0, 0x20000600, 0x0, 0x0, 0x0) #0 [65121ms] <- lsetxattr$security_capability=0xffffffffffffffff errno=14 cover=605 #0 [65121ms] -> chown(0x20000700, 0x0, 0x0) #0 [65122ms] <- chown=0x0 errno=14 cover=1377 #0 [65122ms] -> syz_genetlink_get_family_id$ieee802154(0x20000800, 0x6) syz_genetlink_get_family_id(802.15.4 MAC, 6) #0 [65122ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5209 [ 2970.585066] 9pnet: Could not find request transport: rdma #0 [65123ms] -> mount$9p_rdma(0x20000980, 0x200009c0, 0x20000a00, 0x1, 0x20000a40) #0 [65125ms] <- mount$9p_rdma=0xffffffffffffffff errno=22 cover=4923 2021/11/11 12:42:52 result hanged=false: 2021/11/11 12:42:52 added new input for call #4 chown to corpus: syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x90000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfb, 0x10}, 0xc) lsetxattr$security_capability(0x0, &(0x7f0000000600), 0x0, 0x0, 0x0) chown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) mount$9p_rdma(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x1, &(0x7f0000000a40)={'trans=rdma,', {}, 0x2c, {[{@sq}, {@common=@afid}]}}) 2021/11/11 12:42:52 #0: triaging type=7 2021/11/11 12:42:52 triaging input for call #0 syz_mount_image$nfs4 (new signal=3) 12:42:52 executing program 0: syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x90000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfb, 0x10}, 0xc) lsetxattr$security_capability(0x0, &(0x7f0000000600), 0x0, 0x0, 0x0) chown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) mount$9p_rdma(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x1, &(0x7f0000000a40)={'trans=rdma,', {}, 0x2c, {[{@sq}, {@common=@afid}]}}) [65186ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1175 #0 [65197ms] -> syz_mount_image$nfs4(0x20000000, 0x20000040, 0x0, 0x0, 0x20000100, 0x90000, 0x0) SIGSEGV on (nil), skipping #0 [65200ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=20591 #0 [65203ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [65205ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=6411 #0 [65206ms] -> bind$netlink(0xffffffffffffffff, 0x20000440, 0xc) #0 [65206ms] <- bind$netlink=0xffffffffffffffff errno=9 cover=48 #0 [65206ms] -> lsetxattr$security_capability(0x0, 0x20000600, 0x0, 0x0, 0x0) #0 [65207ms] <- lsetxattr$security_capability=0xffffffffffffffff errno=14 cover=648 #0 [65207ms] -> chown(0x20000700, 0x0, 0x0) #0 [65208ms] <- chown=0x0 errno=14 cover=1432 #0 [65209ms] -> syz_genetlink_get_family_id$ieee802154(0x20000800, 0x6) syz_genetlink_get_family_id(802.15.4 MAC, 6) #0 [65210ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5276 #0 [65211ms] -> mount$9p_rdma(0x20000980, 0x200009c0, 0x20000a00, 0x1, 0x20000a40) [ 2970.674089] 9pnet: Could not find request transport: rdma #0 [65215ms] <- mount$9p_rdma=0xffffffffffffffff errno=22 cover=4993 12:42:52 executing program 0: syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x90000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfb, 0x10}, 0xc) lsetxattr$security_capability(0x0, &(0x7f0000000600), 0x0, 0x0, 0x0) chown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) mount$9p_rdma(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x1, &(0x7f0000000a40)={'trans=rdma,', {}, 0x2c, {[{@sq}, {@common=@afid}]}}) 2021/11/11 12:42:52 result hanged=false: [65246ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1177 #0 [65256ms] -> syz_mount_image$nfs4(0x20000000, 0x20000040, 0x0, 0x0, 0x20000100, 0x90000, 0x0) SIGSEGV on (nil), skipping #0 [65259ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=20432 #0 [65261ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [65263ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=6382 #0 [65264ms] -> bind$netlink(0xffffffffffffffff, 0x20000440, 0xc) #0 [65264ms] <- bind$netlink=0xffffffffffffffff errno=9 cover=48 #0 [65264ms] -> lsetxattr$security_capability(0x0, 0x20000600, 0x0, 0x0, 0x0) #0 [65265ms] <- lsetxattr$security_capability=0xffffffffffffffff errno=14 cover=635 #0 [65265ms] -> chown(0x20000700, 0x0, 0x0) #0 [65267ms] <- chown=0x0 errno=14 cover=5269 #0 [65268ms] -> syz_genetlink_get_family_id$ieee802154(0x20000800, 0x6) syz_genetlink_get_family_id(802.15.4 MAC, 6) #0 [65270ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5227 #0 [65271ms] -> mount$9p_rdma(0x20000980, 0x200009c0, 0x20000a00, 0x1, 0x20000a40) [ 2970.732616] 9pnet: Could not find request transport: rdma #0 [65274ms] <- mount$9p_rdma=0xffffffffffffffff errno=22 cover=4953 2021/11/11 12:42:52 result hanged=false: 12:42:52 executing program 0: syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x90000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfb, 0x10}, 0xc) lsetxattr$security_capability(0x0, &(0x7f0000000600), 0x0, 0x0, 0x0) chown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) mount$9p_rdma(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x1, &(0x7f0000000a40)={'trans=rdma,', {}, 0x2c, {[{@sq}, {@common=@afid}]}}) [65308ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1179 #0 [65318ms] -> syz_mount_image$nfs4(0x20000000, 0x20000040, 0x0, 0x0, 0x20000100, 0x90000, 0x0) SIGSEGV on (nil), skipping #0 [65322ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=27273 #0 [65325ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [65326ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=6441 #0 [65332ms] -> bind$netlink(0xffffffffffffffff, 0x20000440, 0xc) #0 [65332ms] <- bind$netlink=0xffffffffffffffff errno=9 cover=48 [ 2970.796302] 9pnet: Could not find request transport: rdma #0 [65332ms] -> lsetxattr$security_capability(0x0, 0x20000600, 0x0, 0x0, 0x0) #0 [65332ms] <- lsetxattr$security_capability=0xffffffffffffffff errno=14 cover=594 #0 [65332ms] -> chown(0x20000700, 0x0, 0x0) #0 [65333ms] <- chown=0x0 errno=14 cover=1383 #0 [65333ms] -> syz_genetlink_get_family_id$ieee802154(0x20000800, 0x6) syz_genetlink_get_family_id(802.15.4 MAC, 6) #0 [65334ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5220 #0 [65335ms] -> mount$9p_rdma(0x20000980, 0x200009c0, 0x20000a00, 0x1, 0x20000a40) #0 [65336ms] <- mount$9p_rdma=0xffffffffffffffff errno=22 cover=4912 2021/11/11 12:42:52 result hanged=false: 2021/11/11 12:42:52 added new input for call #0 syz_mount_image$nfs4 to corpus: syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x90000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfb, 0x10}, 0xc) lsetxattr$security_capability(0x0, &(0x7f0000000600), 0x0, 0x0, 0x0) chown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) mount$9p_rdma(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x1, &(0x7f0000000a40)={'trans=rdma,', {}, 0x2c, {[{@sq}, {@common=@afid}]}}) 12:42:52 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x410, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r1, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x8) [65410ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1181 #0 [65417ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [65418ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=12851 #0 [65422ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [65423ms] <- perf_event_open=0x3 errno=14 cover=6541 #0 [65423ms] -> clone3(0x200008c0, 0x58) #0 [65424ms] <- clone3=0xffffffffffffffff errno=11 cover=14172 2021/11/11 12:42:52 poll: candidates=8 inputs=0 signal=0 [ 2970.888673] 9pnet_virtio: no channels available for device 127.0.0.1 #0 [65426ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x410, 0x0) #0 [65429ms] <- mount$9p_tcp=0xffffffffffffffff errno=2 cover=10539 #0 [65436ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [65437ms] <- syz_open_dev$tty20=0x4 errno=14 cover=9137 #0 [65437ms] -> write(0x4, 0x0, 0x0) #0 [65437ms] <- write=0x0 errno=14 cover=684 #0 [65438ms] -> ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) #0 [65438ms] <- ioctl$BTRFS_IOC_DEFAULT_SUBVOL=0xffffffffffffffff errno=9 cover=74 #0 [65440ms] -> ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) #0 [65440ms] <- ioctl$sock_inet_tcp_SIOCINQ=0xffffffffffffffff errno=9 cover=74 #0 [65441ms] -> perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) #0 [65441ms] <- perf_event_open=0xffffffffffffffff errno=14 cover=346 #0 [65441ms] -> perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) #0 [65442ms] <- perf_event_open=0xffffffffffffffff errno=14 cover=346 enabling collider #0 [65456ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [65457ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=17 cover=1361 #0 [65458ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [65458ms] <- perf_event_open=0x3 errno=14 cover=6534 pthread_create failed (errno 11) 2021/11/11 12:42:52 result hanged=false: 2021/11/11 12:42:52 #0: triaging type=7 2021/11/11 12:42:52 triaging input for call #5 write (new signal=1) 12:42:52 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x410, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r1, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x8) [65532ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1284 #0 [65541ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [65542ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=13611 #0 [65544ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [65545ms] <- perf_event_open=0x3 errno=14 cover=6929 #0 [65553ms] -> clone3(0x200008c0, 0x58) #0 [65554ms] <- clone3=0xffffffffffffffff errno=11 cover=15286 #0 [65556ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x410, 0x0) [ 2971.017702] 9pnet_virtio: no channels available for device 127.0.0.1 #0 [65558ms] <- mount$9p_tcp=0xffffffffffffffff errno=2 cover=9472 #0 [65560ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [65561ms] <- syz_open_dev$tty20=0x4 errno=14 cover=9247 #0 [65563ms] -> write(0x4, 0x0, 0x0) #0 [65563ms] <- write=0x0 errno=14 cover=684 #0 [65564ms] -> ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) #0 [65564ms] <- ioctl$BTRFS_IOC_DEFAULT_SUBVOL=0xffffffffffffffff errno=9 cover=74 #0 [65564ms] -> ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) #0 [65564ms] <- ioctl$sock_inet_tcp_SIOCINQ=0xffffffffffffffff errno=9 cover=74 #0 [65564ms] -> perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) #0 [65564ms] <- perf_event_open=0xffffffffffffffff errno=14 cover=346 #0 [65565ms] -> perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) #0 [65565ms] <- perf_event_open=0xffffffffffffffff errno=14 cover=346 12:42:52 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x410, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r1, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x8) 2021/11/11 12:42:52 result hanged=false: [65591ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1287 #0 [65601ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [65603ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=12724 #0 [65606ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [65607ms] <- perf_event_open=0x3 errno=14 cover=6532 #0 [65608ms] -> clone3(0x200008c0, 0x58) #0 [65609ms] <- clone3=0xffffffffffffffff errno=11 cover=14362 #0 [65611ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x410, 0x0) [ 2971.073585] 9pnet_virtio: no channels available for device 127.0.0.1 #0 [65615ms] <- mount$9p_tcp=0xffffffffffffffff errno=2 cover=9571 #0 [65616ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [65617ms] <- syz_open_dev$tty20=0x4 errno=14 cover=9032 #0 [65618ms] -> write(0x4, 0x0, 0x0) #0 [65619ms] <- write=0x0 errno=14 cover=684 #0 [65619ms] -> ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) #0 [65620ms] <- ioctl$BTRFS_IOC_DEFAULT_SUBVOL=0xffffffffffffffff errno=9 cover=74 #0 [65620ms] -> ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) #0 [65620ms] <- ioctl$sock_inet_tcp_SIOCINQ=0xffffffffffffffff errno=9 cover=74 #0 [65620ms] -> perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) #0 [65620ms] <- perf_event_open=0xffffffffffffffff errno=14 cover=346 #0 [65620ms] -> perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) #0 [65620ms] <- perf_event_open=0xffffffffffffffff errno=14 cover=346 12:42:52 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x410, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r1, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x8) 2021/11/11 12:42:52 result hanged=false: [65649ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1290 #0 [65657ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [65658ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=12670 #0 [65659ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [65659ms] <- perf_event_open=0x3 errno=14 cover=8718 #0 [65660ms] -> clone3(0x200008c0, 0x58) #0 [65660ms] <- clone3=0xffffffffffffffff errno=11 cover=13822 #0 [65661ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x410, 0x0) [ 2971.123067] 9pnet_virtio: no channels available for device 127.0.0.1 #0 [65663ms] <- mount$9p_tcp=0xffffffffffffffff errno=2 cover=9434 #0 [65664ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [65664ms] <- syz_open_dev$tty20=0x4 errno=14 cover=9036 #0 [65665ms] -> write(0x4, 0x0, 0x0) #0 [65665ms] <- write=0x0 errno=14 cover=684 #0 [65665ms] -> ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) #0 [65665ms] <- ioctl$BTRFS_IOC_DEFAULT_SUBVOL=0xffffffffffffffff errno=9 cover=74 #0 [65666ms] -> ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) #0 [65666ms] <- ioctl$sock_inet_tcp_SIOCINQ=0xffffffffffffffff errno=9 cover=74 #0 [65666ms] -> perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) #0 [65666ms] <- perf_event_open=0xffffffffffffffff errno=14 cover=346 #0 [65666ms] -> perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) #0 [65666ms] <- perf_event_open=0xffffffffffffffff errno=14 cover=346 2021/11/11 12:42:52 result hanged=false: 2021/11/11 12:42:52 added new input for call #5 write to corpus: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x410, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r1, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x8) 12:42:52 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x410, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r1, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x8) 2021/11/11 12:42:52 #0: triaging type=7 2021/11/11 12:42:52 triaging input for call #3 mount$9p_tcp (new signal=19) [65696ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1293 #0 [65705ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [65708ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=12831 #0 [65710ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [65711ms] <- perf_event_open=0x3 errno=14 cover=6579 #0 [65711ms] -> clone3(0x200008c0, 0x58) #0 [65713ms] <- clone3=0xffffffffffffffff errno=11 cover=15319 [ 2971.175690] 9pnet_virtio: no channels available for device 127.0.0.1 #0 [65714ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x410, 0x0) #0 [65717ms] <- mount$9p_tcp=0xffffffffffffffff errno=2 cover=9344 #0 [65718ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [65718ms] <- syz_open_dev$tty20=0x4 errno=14 cover=9183 #0 [65719ms] -> write(0x4, 0x0, 0x0) #0 [65719ms] <- write=0x0 errno=14 cover=684 #0 [65720ms] -> ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) #0 [65720ms] <- ioctl$BTRFS_IOC_DEFAULT_SUBVOL=0xffffffffffffffff errno=9 cover=74 #0 [65721ms] -> ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) #0 [65721ms] <- ioctl$sock_inet_tcp_SIOCINQ=0xffffffffffffffff errno=9 cover=74 #0 [65722ms] -> perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) #0 [65722ms] <- perf_event_open=0xffffffffffffffff errno=14 cover=346 #0 [65723ms] -> perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) #0 [65723ms] <- perf_event_open=0xffffffffffffffff errno=14 cover=346 2021/11/11 12:42:52 result hanged=false: 12:42:52 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x410, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r1, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x8) [65755ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1296 #0 [65766ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [65768ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=12891 #0 [65770ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [65770ms] <- perf_event_open=0x3 errno=14 cover=6514 #0 [65771ms] -> clone3(0x200008c0, 0x58) #0 [65773ms] <- clone3=0xffffffffffffffff errno=11 cover=15606 [ 2971.236711] 9pnet_virtio: no channels available for device 127.0.0.1 #0 [65775ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x410, 0x0) #0 [65778ms] <- mount$9p_tcp=0xffffffffffffffff errno=2 cover=9503 #0 [65779ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [65781ms] <- syz_open_dev$tty20=0x4 errno=14 cover=9246 #0 [65782ms] -> write(0x4, 0x0, 0x0) #0 [65782ms] <- write=0x0 errno=14 cover=684 #0 [65783ms] -> ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) #0 [65783ms] <- ioctl$BTRFS_IOC_DEFAULT_SUBVOL=0xffffffffffffffff errno=9 cover=74 #0 [65783ms] -> ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) #0 [65783ms] <- ioctl$sock_inet_tcp_SIOCINQ=0xffffffffffffffff errno=9 cover=74 #0 [65783ms] -> perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) #0 [65784ms] <- perf_event_open=0xffffffffffffffff errno=14 cover=346 #0 [65784ms] -> perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) #0 [65784ms] <- perf_event_open=0xffffffffffffffff errno=14 cover=346 2021/11/11 12:42:52 result hanged=false: 12:42:52 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x410, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r1, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x8) [65818ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1299 #0 [65828ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [65829ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=12820 #0 [65832ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [65833ms] <- perf_event_open=0x3 errno=14 cover=6649 #0 [65834ms] -> clone3(0x200008c0, 0x58) #0 [65835ms] <- clone3=0xffffffffffffffff errno=11 cover=13625 #0 [65837ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x410, 0x0) [ 2971.300138] 9pnet_virtio: no channels available for device 127.0.0.1 #0 [65840ms] <- mount$9p_tcp=0xffffffffffffffff errno=2 cover=31087 #0 [65844ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [65845ms] <- syz_open_dev$tty20=0x4 errno=14 cover=9169 #0 [65846ms] -> write(0x4, 0x0, 0x0) #0 [65846ms] <- write=0x0 errno=14 cover=684 #0 [65847ms] -> ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) #0 [65847ms] <- ioctl$BTRFS_IOC_DEFAULT_SUBVOL=0xffffffffffffffff errno=9 cover=74 #0 [65847ms] -> ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) #0 [65847ms] <- ioctl$sock_inet_tcp_SIOCINQ=0xffffffffffffffff errno=9 cover=74 #0 [65847ms] -> perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) #0 [65848ms] <- perf_event_open=0xffffffffffffffff errno=14 cover=346 #0 [65848ms] -> perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) #0 [65848ms] <- perf_event_open=0xffffffffffffffff errno=14 cover=346 2021/11/11 12:42:52 result hanged=false: 2021/11/11 12:42:52 added new input for call #3 mount$9p_tcp to corpus: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x410, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r1, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x8) 12:42:52 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x410, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r1, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x8) [65888ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:42:52 #0: triaging type=7 2021/11/11 12:42:52 triaging input for call #2 clone3 (new signal=6) spawned worker pid 1302 #0 [65895ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [65896ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=12793 #0 [65897ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [65898ms] <- perf_event_open=0x3 errno=14 cover=7005 #0 [65898ms] -> clone3(0x200008c0, 0x58) #0 [65899ms] <- clone3=0xffffffffffffffff errno=11 cover=14287 [ 2971.361817] 9pnet_virtio: no channels available for device 127.0.0.1 #0 [65900ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x410, 0x0) #0 [65902ms] <- mount$9p_tcp=0xffffffffffffffff errno=2 cover=9398 #0 [65903ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [65903ms] <- syz_open_dev$tty20=0x4 errno=14 cover=9105 #0 [65905ms] -> write(0x4, 0x0, 0x0) #0 [65905ms] <- write=0x0 errno=14 cover=684 #0 [65905ms] -> ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) #0 [65905ms] <- ioctl$BTRFS_IOC_DEFAULT_SUBVOL=0xffffffffffffffff errno=9 cover=74 #0 [65905ms] -> ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) #0 [65905ms] <- ioctl$sock_inet_tcp_SIOCINQ=0xffffffffffffffff errno=9 cover=74 #0 [65905ms] -> perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) #0 [65905ms] <- perf_event_open=0xffffffffffffffff errno=14 cover=346 #0 [65905ms] -> perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) #0 [65906ms] <- perf_event_open=0xffffffffffffffff errno=14 cover=346 12:42:52 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x410, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r1, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x8) 2021/11/11 12:42:52 result hanged=false: [65942ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1305 #0 [65952ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [65953ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=12779 #0 [65955ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [65956ms] <- perf_event_open=0x3 errno=14 cover=6994 #0 [65957ms] -> clone3(0x200008c0, 0x58) #0 [65958ms] <- clone3=0xffffffffffffffff errno=11 cover=14912 [ 2971.422056] 9pnet_virtio: no channels available for device 127.0.0.1 #0 [65960ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x410, 0x0) #0 [65962ms] <- mount$9p_tcp=0xffffffffffffffff errno=2 cover=9429 #0 [65964ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [65964ms] <- syz_open_dev$tty20=0x4 errno=14 cover=9087 #0 [65967ms] -> write(0x4, 0x0, 0x0) #0 [65967ms] <- write=0x0 errno=14 cover=684 #0 [65968ms] -> ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) #0 [65968ms] <- ioctl$BTRFS_IOC_DEFAULT_SUBVOL=0xffffffffffffffff errno=9 cover=74 #0 [65970ms] -> ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) #0 [65970ms] <- ioctl$sock_inet_tcp_SIOCINQ=0xffffffffffffffff errno=9 cover=74 #0 [65971ms] -> perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) #0 [65971ms] <- perf_event_open=0xffffffffffffffff errno=14 cover=346 #0 [65971ms] -> perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) #0 [65971ms] <- perf_event_open=0xffffffffffffffff errno=14 cover=346 2021/11/11 12:42:52 result hanged=false: 12:42:52 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x410, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r1, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x8) [66003ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1308 #0 [66013ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [66014ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=12712 #0 [66018ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [66019ms] <- perf_event_open=0x3 errno=14 cover=9146 #0 [66021ms] -> clone3(0x200008c0, 0x58) #0 [66022ms] <- clone3=0xffffffffffffffff errno=11 cover=13879 #0 [66024ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x410, 0x0) [ 2971.485299] 9pnet_virtio: no channels available for device 127.0.0.1 #0 [66026ms] <- mount$9p_tcp=0xffffffffffffffff errno=2 cover=9357 #0 [66028ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [66029ms] <- syz_open_dev$tty20=0x4 errno=14 cover=9190 #0 [66031ms] -> write(0x4, 0x0, 0x0) #0 [66031ms] <- write=0x0 errno=14 cover=684 #0 [66034ms] -> ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) #0 [66034ms] <- ioctl$BTRFS_IOC_DEFAULT_SUBVOL=0xffffffffffffffff errno=9 cover=74 #0 [66035ms] -> ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) #0 [66035ms] <- ioctl$sock_inet_tcp_SIOCINQ=0xffffffffffffffff errno=9 cover=74 #0 [66035ms] -> perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) #0 [66035ms] <- perf_event_open=0xffffffffffffffff errno=14 cover=346 #0 [66036ms] -> perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) #0 [66036ms] <- perf_event_open=0xffffffffffffffff errno=14 cover=346 2021/11/11 12:42:53 result hanged=false: 2021/11/11 12:42:53 added new input for call #2 clone3 to corpus: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x410, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r1, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x8) 12:42:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000008c0)={'gre0\x00'}) [66070ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1311 #0 [66080ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [66081ms] <- socket$inet_udplite=0x3 errno=14 cover=1660 #0 [66082ms] -> ioctl$sock_inet_SIOCSIFPFLAGS(0x3, 0x8934, 0x200008c0) #0 [66111ms] <- ioctl$sock_inet_SIOCSIFPFLAGS=0xffffffffffffffff errno=22 cover=2131 enabling collider #0 [66112ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [66113ms] <- socket$inet_udplite=0x3 errno=14 cover=1756 #0 [66113ms] -> ioctl$sock_inet_SIOCSIFPFLAGS(0x3, 0x8934, 0x200008c0) #0 [66113ms] <- ioctl$sock_inet_SIOCSIFPFLAGS=0xffffffffffffffff errno=9 cover=46 12:42:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000008c0)={'gre0\x00'}) 2021/11/11 12:42:53 result hanged=false: 2021/11/11 12:42:53 #0: triaging type=7 2021/11/11 12:42:53 triaging input for call #1 ioctl$sock_inet_SIOCSIFPFLAGS (new signal=7) [66137ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1313 #0 [66147ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [66148ms] <- socket$inet_udplite=0x3 errno=14 cover=1725 #0 [66149ms] -> ioctl$sock_inet_SIOCSIFPFLAGS(0x3, 0x8934, 0x200008c0) #0 [66171ms] <- ioctl$sock_inet_SIOCSIFPFLAGS=0xffffffffffffffff errno=22 cover=1866 12:42:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000008c0)={'gre0\x00'}) 2021/11/11 12:42:53 result hanged=false: [66189ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1315 #0 [66196ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [66198ms] <- socket$inet_udplite=0x3 errno=14 cover=1624 #0 [66199ms] -> ioctl$sock_inet_SIOCSIFPFLAGS(0x3, 0x8934, 0x200008c0) #0 [66226ms] <- ioctl$sock_inet_SIOCSIFPFLAGS=0xffffffffffffffff errno=22 cover=1788 12:42:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000008c0)={'gre0\x00'}) 2021/11/11 12:42:53 result hanged=false: [66248ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1317 #0 [66255ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [66256ms] <- socket$inet_udplite=0x3 errno=14 cover=1660 #0 [66260ms] -> ioctl$sock_inet_SIOCSIFPFLAGS(0x3, 0x8934, 0x200008c0) #0 [66288ms] <- ioctl$sock_inet_SIOCSIFPFLAGS=0xffffffffffffffff errno=22 cover=1800 2021/11/11 12:42:53 result hanged=false: 2021/11/11 12:42:53 added new input for call #1 ioctl$sock_inet_SIOCSIFPFLAGS to corpus: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000008c0)={'gre0\x00'}) 12:42:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f000000e5c0)=[{{0x0, 0x0, &(0x7f0000006140)}}], 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00', 0x5}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time={0x1f000000}, {}, {}, @ext={0xffffffffffffff94, 0x0}}], 0x200002dc) [66311ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1319 #0 [66320ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [66321ms] <- perf_event_open=0x3 errno=14 cover=7879 #0 [66322ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [66323ms] <- socket$nl_generic=0x4 errno=14 cover=1479 #0 [66325ms] -> sendmmsg(0xffffffffffffffff, 0x2000e5c0, 0x1, 0x0) #0 [66325ms] <- sendmmsg=0xffffffffffffffff errno=9 cover=51 #0 [66327ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x2) #0 [66327ms] <- openat$sndseq=0x5 errno=14 cover=2249 #0 [66328ms] -> ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x20000300) #0 [66329ms] <- ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE=0xffffffffffffffff errno=9 cover=45 #0 [66330ms] -> fcntl$dupfd(0x5, 0x0, 0x5) #0 [66330ms] <- fcntl$dupfd=0x6 errno=14 cover=110 #0 [66330ms] -> ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0x6, 0xc08c5332, 0x20000200) #0 [66330ms] <- ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE=0x0 errno=14 cover=976 #0 [66330ms] -> write$sndseq(0x5, 0x200002c0, 0x200002dc) #0 [66384ms] <- write$sndseq=0xe310 errno=14 cover=262143 enabling collider #0 [66400ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [66404ms] <- perf_event_open=0x3 errno=14 cover=6479 #0 [66404ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [66406ms] <- socket$nl_generic=0x4 errno=14 cover=1576 pthread_create failed (errno 11) 12:42:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f000000e5c0)=[{{0x0, 0x0, &(0x7f0000006140)}}], 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00', 0x5}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time={0x1f000000}, {}, {}, @ext={0xffffffffffffff94, 0x0}}], 0x200002dc) [66460ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:42:53 result hanged=false: 2021/11/11 12:42:53 #0: triaging type=7 2021/11/11 12:42:53 triaging input for call #7 write$sndseq (new signal=28) spawned worker pid 1421 #0 [66470ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [66474ms] <- perf_event_open=0x3 errno=14 cover=6439 #0 [66476ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [66477ms] <- socket$nl_generic=0x4 errno=14 cover=4334 #0 [66478ms] -> sendmmsg(0xffffffffffffffff, 0x2000e5c0, 0x1, 0x0) #0 [66478ms] <- sendmmsg=0xffffffffffffffff errno=9 cover=80 #0 [66478ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x2) #0 [66479ms] <- openat$sndseq=0x5 errno=14 cover=5565 #0 [66480ms] -> ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x20000300) #0 [66480ms] <- ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE=0xffffffffffffffff errno=9 cover=74 #0 [66481ms] -> fcntl$dupfd(0x5, 0x0, 0x5) #0 [66481ms] <- fcntl$dupfd=0x6 errno=14 cover=197 #0 [66481ms] -> ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0x6, 0xc08c5332, 0x20000200) #0 [66481ms] <- ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE=0x0 errno=14 cover=3499 #0 [66482ms] -> write$sndseq(0x5, 0x200002c0, 0x200002dc) #0 [66536ms] <- write$sndseq=0xe310 errno=14 cover=262143 2021/11/11 12:42:53 result hanged=false: 12:42:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f000000e5c0)=[{{0x0, 0x0, &(0x7f0000006140)}}], 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00', 0x5}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time={0x1f000000}, {}, {}, @ext={0xffffffffffffff94, 0x0}}], 0x200002dc) [66585ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1423 #0 [66595ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [66599ms] <- perf_event_open=0x3 errno=14 cover=6598 #0 [66600ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [66601ms] <- socket$nl_generic=0x4 errno=14 cover=4386 #0 [66602ms] -> sendmmsg(0xffffffffffffffff, 0x2000e5c0, 0x1, 0x0) #0 [66602ms] <- sendmmsg=0xffffffffffffffff errno=9 cover=80 #0 [66603ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x2) #0 [66603ms] <- openat$sndseq=0x5 errno=14 cover=5610 #0 [66604ms] -> ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x20000300) #0 [66605ms] <- ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE=0xffffffffffffffff errno=9 cover=74 #0 [66605ms] -> fcntl$dupfd(0x5, 0x0, 0x5) #0 [66605ms] <- fcntl$dupfd=0x6 errno=14 cover=197 #0 [66605ms] -> ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0x6, 0xc08c5332, 0x20000200) #0 [66605ms] <- ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE=0x0 errno=14 cover=3499 #0 [66606ms] -> write$sndseq(0x5, 0x200002c0, 0x200002dc) #0 [66663ms] <- write$sndseq=0xe310 errno=14 cover=262143 12:42:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f000000e5c0)=[{{0x0, 0x0, &(0x7f0000006140)}}], 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00', 0x5}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time={0x1f000000}, {}, {}, @ext={0xffffffffffffff94, 0x0}}], 0x200002dc) 2021/11/11 12:42:53 result hanged=false: [66711ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1425 #0 [66721ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [66726ms] <- perf_event_open=0x3 errno=14 cover=10363 #0 [66728ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [66728ms] <- socket$nl_generic=0x4 errno=14 cover=4199 #0 [66729ms] -> sendmmsg(0xffffffffffffffff, 0x2000e5c0, 0x1, 0x0) #0 [66729ms] <- sendmmsg=0xffffffffffffffff errno=9 cover=80 #0 [66730ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x2) #0 [66730ms] <- openat$sndseq=0x5 errno=14 cover=5609 #0 [66732ms] -> ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x20000300) #0 [66732ms] <- ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE=0xffffffffffffffff errno=9 cover=74 #0 [66732ms] -> fcntl$dupfd(0x5, 0x0, 0x5) #0 [66732ms] <- fcntl$dupfd=0x6 errno=14 cover=197 #0 [66733ms] -> ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0x6, 0xc08c5332, 0x20000200) #0 [66734ms] <- ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE=0x0 errno=14 cover=3488 #0 [66735ms] -> write$sndseq(0x5, 0x200002c0, 0x200002dc) #0 [66788ms] <- write$sndseq=0xe310 errno=14 cover=262143 2021/11/11 12:42:53 result hanged=false: 2021/11/11 12:42:53 added new input for call #7 write$sndseq to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f000000e5c0)=[{{0x0, 0x0, &(0x7f0000006140)}}], 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00', 0x5}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time={0x1f000000}, {}, {}, @ext={0xffffffffffffff94, 0x0}}], 0x200002dc) 12:42:53 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/slabinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002440)=""/4149, 0x1035, 0x0) [66841ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1427 #0 [66850ms] -> openat$procfs(0xffffffffffffff9c, 0x20001080, 0x0, 0x0) #0 [66850ms] <- openat$procfs=0x3 errno=14 cover=2035 #0 [66852ms] -> pread64(0x3, 0x20002440, 0x1035, 0x0) #0 [66853ms] <- pread64=0xfdd errno=14 cover=44331 enabling collider #0 [66854ms] -> openat$procfs(0xffffffffffffff9c, 0x20001080, 0x0, 0x0) #0 [66854ms] <- openat$procfs=0x3 errno=14 cover=1249 12:42:53 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/slabinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002440)=""/4149, 0x1035, 0x0) [66871ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:42:53 result hanged=false: 2021/11/11 12:42:53 #0: triaging type=7 2021/11/11 12:42:53 triaging input for call #1 pread64 (new signal=18) spawned worker pid 1429 #0 [66880ms] -> openat$procfs(0xffffffffffffff9c, 0x20001080, 0x0, 0x0) #0 [66882ms] <- openat$procfs=0x3 errno=14 cover=1205 #0 [66883ms] -> pread64(0x3, 0x20002440, 0x1035, 0x0) #0 [66885ms] <- pread64=0xfdd errno=14 cover=41207 2021/11/11 12:42:53 result hanged=false: 12:42:53 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/slabinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002440)=""/4149, 0x1035, 0x0) [66909ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1431 #0 [66919ms] -> openat$procfs(0xffffffffffffff9c, 0x20001080, 0x0, 0x0) #0 [66921ms] <- openat$procfs=0x3 errno=14 cover=1219 #0 [66922ms] -> pread64(0x3, 0x20002440, 0x1035, 0x0) #0 [66923ms] <- pread64=0xfdd errno=14 cover=41183 2021/11/11 12:42:53 result hanged=false: 12:42:53 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/slabinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002440)=""/4149, 0x1035, 0x0) [66944ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1433 #0 [66951ms] -> openat$procfs(0xffffffffffffff9c, 0x20001080, 0x0, 0x0) #0 [66951ms] <- openat$procfs=0x3 errno=14 cover=1238 #0 [66953ms] -> pread64(0x3, 0x20002440, 0x1035, 0x0) #0 [66953ms] <- pread64=0xfdd errno=14 cover=41229 2021/11/11 12:42:53 result hanged=false: 2021/11/11 12:42:53 added new input for call #1 pread64 to corpus: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/slabinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002440)=""/4149, 0x1035, 0x0) 2021/11/11 12:42:53 #0: triaging type=7 12:42:53 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/slabinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002440)=""/4149, 0x1035, 0x0) [66980ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:42:53 triaging input for call #0 openat$procfs (new signal=1) spawned worker pid 1435 #0 [66987ms] -> openat$procfs(0xffffffffffffff9c, 0x20001080, 0x0, 0x0) #0 [66987ms] <- openat$procfs=0x3 errno=14 cover=1228 #0 [66988ms] -> pread64(0x3, 0x20002440, 0x1035, 0x0) #0 [66989ms] <- pread64=0xfdd errno=14 cover=41213 12:42:53 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/slabinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002440)=""/4149, 0x1035, 0x0) 2021/11/11 12:42:53 result hanged=false: [67008ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1437 #0 [67017ms] -> openat$procfs(0xffffffffffffff9c, 0x20001080, 0x0, 0x0) #0 [67018ms] <- openat$procfs=0x3 errno=14 cover=1206 #0 [67021ms] -> pread64(0x3, 0x20002440, 0x1035, 0x0) #0 [67023ms] <- pread64=0xfdd errno=14 cover=41920 12:42:54 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/slabinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002440)=""/4149, 0x1035, 0x0) 2021/11/11 12:42:54 result hanged=false: [67049ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1439 #0 [67057ms] -> openat$procfs(0xffffffffffffff9c, 0x20001080, 0x0, 0x0) #0 [67057ms] <- openat$procfs=0x3 errno=14 cover=1255 #0 [67058ms] -> pread64(0x3, 0x20002440, 0x1035, 0x0) #0 [67059ms] <- pread64=0xfdd errno=14 cover=41222 2021/11/11 12:42:54 result hanged=false: 2021/11/11 12:42:54 added new input for call #0 openat$procfs to corpus: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/slabinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002440)=""/4149, 0x1035, 0x0) 2021/11/11 12:42:54 poll: candidates=0 inputs=0 signal=0 12:42:54 executing program 0: syz_genetlink_get_family_id$gtp(&(0x7f0000000800), 0xffffffffffffffff) [67121ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1441 #0 [67131ms] -> syz_genetlink_get_family_id$gtp(0x20000800, 0xffffffffffffffff) syz_genetlink_get_family_id(gtp, -1) netlink: failed to get family id for gtp: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [67146ms] <- syz_genetlink_get_family_id$gtp=0xffffffffffffffff errno=2 cover=10846 enabling collider #0 [67146ms] -> syz_genetlink_get_family_id$gtp(0x20000800, 0xffffffffffffffff) syz_genetlink_get_family_id(gtp, -1) netlink: failed to get family id for gtp: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [67162ms] <- syz_genetlink_get_family_id$gtp=0xffffffffffffffff errno=2 cover=8114 12:42:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) 2021/11/11 12:42:54 result hanged=false: [67180ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1443 #0 [67189ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [67190ms] <- perf_event_open=0x3 errno=14 cover=6623 #0 [67191ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [67191ms] <- socket$nl_generic=0x4 errno=14 cover=1446 #0 [67191ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x4, 0x8933, 0x200000c0) #0 [67191ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [67191ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [67192ms] <- socket$nl_generic=0x5 errno=14 cover=1411 #0 [67192ms] -> syz_genetlink_get_family_id$nl80211(0x20000140, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [67193ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11905 #0 [67193ms] -> sendmsg$NL80211_CMD_REGISTER_BEACONS(0x5, 0x20000200, 0x0) #0 [67193ms] <- sendmsg$NL80211_CMD_REGISTER_BEACONS=0x24 errno=14 cover=3944 enabling collider #0 [67209ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [67210ms] <- perf_event_open=0x3 errno=14 cover=6701 #0 [67210ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [67212ms] <- socket$nl_generic=0x4 errno=14 cover=4324 pthread_create failed (errno 11) 12:42:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) 2021/11/11 12:42:54 result hanged=false: 2021/11/11 12:42:54 #0: triaging type=7 2021/11/11 12:42:54 triaging input for call #5 sendmsg$NL80211_CMD_REGISTER_BEACONS (new signal=14) [67276ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1545 #0 [67287ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [67291ms] <- perf_event_open=0x3 errno=14 cover=6703 #0 [67292ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [67293ms] <- socket$nl_generic=0x4 errno=14 cover=4185 #0 [67294ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x4, 0x8933, 0x200000c0) #0 [67294ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=362 #0 [67294ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [67294ms] <- socket$nl_generic=0x5 errno=14 cover=4293 #0 [67296ms] -> syz_genetlink_get_family_id$nl80211(0x20000140, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [67298ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=24147 #0 [67300ms] -> sendmsg$NL80211_CMD_REGISTER_BEACONS(0x5, 0x20000200, 0x0) #0 [67302ms] <- sendmsg$NL80211_CMD_REGISTER_BEACONS=0x24 errno=14 cover=4428 12:42:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) 2021/11/11 12:42:54 result hanged=false: [67328ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1547 #0 [67336ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [67340ms] <- perf_event_open=0x3 errno=14 cover=13169 #0 [67341ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [67341ms] <- socket$nl_generic=0x4 errno=14 cover=1434 #0 [67341ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x4, 0x8933, 0x200000c0) #0 [67341ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [67342ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [67342ms] <- socket$nl_generic=0x5 errno=14 cover=1472 #0 [67342ms] -> syz_genetlink_get_family_id$nl80211(0x20000140, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [67343ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11884 #0 [67344ms] -> sendmsg$NL80211_CMD_REGISTER_BEACONS(0x5, 0x20000200, 0x0) #0 [67345ms] <- sendmsg$NL80211_CMD_REGISTER_BEACONS=0x24 errno=14 cover=1671 12:42:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) 2021/11/11 12:42:54 result hanged=false: [67375ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1549 #0 [67384ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [67386ms] <- perf_event_open=0x3 errno=14 cover=6695 #0 [67388ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [67388ms] <- socket$nl_generic=0x4 errno=14 cover=4359 #0 [67390ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x4, 0x8933, 0x200000c0) #0 [67390ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=362 #0 [67390ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [67391ms] <- socket$nl_generic=0x5 errno=14 cover=4424 #0 [67392ms] -> syz_genetlink_get_family_id$nl80211(0x20000140, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [67394ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=23033 #0 [67396ms] -> sendmsg$NL80211_CMD_REGISTER_BEACONS(0x5, 0x20000200, 0x0) #0 [67397ms] <- sendmsg$NL80211_CMD_REGISTER_BEACONS=0x24 errno=14 cover=4353 2021/11/11 12:42:54 result hanged=false: 2021/11/11 12:42:54 added new input for call #5 sendmsg$NL80211_CMD_REGISTER_BEACONS to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) 12:42:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) 2021/11/11 12:42:54 #0: triaging type=7 2021/11/11 12:42:54 triaging input for call #4 syz_genetlink_get_family_id$nl80211 (new signal=2) [67435ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1551 #0 [67444ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [67444ms] <- perf_event_open=0x3 errno=14 cover=6702 #0 [67447ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [67448ms] <- socket$nl_generic=0x4 errno=14 cover=4392 #0 [67451ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x4, 0x8933, 0x200000c0) #0 [67451ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=376 #0 [67451ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [67452ms] <- socket$nl_generic=0x5 errno=14 cover=4133 #0 [67454ms] -> syz_genetlink_get_family_id$nl80211(0x20000140, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [67456ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=23057 #0 [67458ms] -> sendmsg$NL80211_CMD_REGISTER_BEACONS(0x5, 0x20000200, 0x0) #0 [67459ms] <- sendmsg$NL80211_CMD_REGISTER_BEACONS=0x24 errno=14 cover=4410 12:42:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) 2021/11/11 12:42:54 result hanged=false: [67493ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1553 #0 [67501ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [67502ms] <- perf_event_open=0x3 errno=14 cover=6491 #0 [67504ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [67504ms] <- socket$nl_generic=0x4 errno=14 cover=1459 #0 [67504ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x4, 0x8933, 0x200000c0) #0 [67504ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [67504ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [67505ms] <- socket$nl_generic=0x5 errno=14 cover=1455 #0 [67505ms] -> syz_genetlink_get_family_id$nl80211(0x20000140, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [67506ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11900 #0 [67507ms] -> sendmsg$NL80211_CMD_REGISTER_BEACONS(0x5, 0x20000200, 0x0) #0 [67507ms] <- sendmsg$NL80211_CMD_REGISTER_BEACONS=0x24 errno=14 cover=1715 12:42:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) 2021/11/11 12:42:54 result hanged=false: [67543ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1555 #0 [67553ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [67554ms] <- perf_event_open=0x3 errno=14 cover=7716 #0 [67556ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [67556ms] <- socket$nl_generic=0x4 errno=14 cover=1579 #0 [67558ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x4, 0x8933, 0x200000c0) #0 [67558ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [67560ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [67560ms] <- socket$nl_generic=0x5 errno=14 cover=1498 #0 [67561ms] -> syz_genetlink_get_family_id$nl80211(0x20000140, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [67562ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11896 #0 [67563ms] -> sendmsg$NL80211_CMD_REGISTER_BEACONS(0x5, 0x20000200, 0x0) #0 [67563ms] <- sendmsg$NL80211_CMD_REGISTER_BEACONS=0x24 errno=14 cover=1680 2021/11/11 12:42:54 result hanged=false: 2021/11/11 12:42:54 added new input for call #4 syz_genetlink_get_family_id$nl80211 to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) 12:42:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) 2021/11/11 12:42:54 #0: triaging type=7 2021/11/11 12:42:54 triaging input for call #1 socket$nl_generic (new signal=2) [67607ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1557 #0 [67617ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [67617ms] <- perf_event_open=0x3 errno=14 cover=6676 #0 [67619ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [67619ms] <- socket$nl_generic=0x4 errno=14 cover=1478 #0 [67620ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x4, 0x8933, 0x200000c0) #0 [67620ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [67620ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [67620ms] <- socket$nl_generic=0x5 errno=14 cover=1403 #0 [67620ms] -> syz_genetlink_get_family_id$nl80211(0x20000140, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [67621ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11858 #0 [67622ms] -> sendmsg$NL80211_CMD_REGISTER_BEACONS(0x5, 0x20000200, 0x0) #0 [67623ms] <- sendmsg$NL80211_CMD_REGISTER_BEACONS=0x24 errno=14 cover=1682 12:42:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) 2021/11/11 12:42:54 result hanged=false: [67659ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1559 #0 [67669ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [67670ms] <- perf_event_open=0x3 errno=14 cover=6739 #0 [67671ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [67671ms] <- socket$nl_generic=0x4 errno=14 cover=4254 #0 [67672ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x4, 0x8933, 0x200000c0) #0 [67672ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=362 #0 [67675ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [67675ms] <- socket$nl_generic=0x5 errno=14 cover=4423 #0 [67676ms] -> syz_genetlink_get_family_id$nl80211(0x20000140, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [67678ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=22870 #0 [67680ms] -> sendmsg$NL80211_CMD_REGISTER_BEACONS(0x5, 0x20000200, 0x0) #0 [67680ms] <- sendmsg$NL80211_CMD_REGISTER_BEACONS=0x24 errno=14 cover=4443 2021/11/11 12:42:54 result hanged=false: 12:42:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) [67717ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1561 #0 [67726ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [67728ms] <- perf_event_open=0x3 errno=14 cover=6462 #0 [67729ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [67730ms] <- socket$nl_generic=0x4 errno=14 cover=1415 #0 [67731ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x4, 0x8933, 0x200000c0) #0 [67731ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [67731ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [67731ms] <- socket$nl_generic=0x5 errno=14 cover=1422 #0 [67732ms] -> syz_genetlink_get_family_id$nl80211(0x20000140, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [67732ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11892 #0 [67734ms] -> sendmsg$NL80211_CMD_REGISTER_BEACONS(0x5, 0x20000200, 0x0) #0 [67735ms] <- sendmsg$NL80211_CMD_REGISTER_BEACONS=0x24 errno=14 cover=1732 2021/11/11 12:42:54 result hanged=false: 2021/11/11 12:42:54 added new input for call #1 socket$nl_generic to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) 12:42:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x4) [67770ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1563 #0 [67779ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [67781ms] <- perf_event_open=0x3 errno=14 cover=7273 #0 [67782ms] -> sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x4) #0 [67782ms] <- sync_file_range=0xffffffffffffffff errno=9 cover=75 enabling collider #0 [67795ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [67796ms] <- perf_event_open=0x3 errno=14 cover=7467 #0 [67799ms] -> sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x4) #0 [67799ms] <- sync_file_range=0xffffffffffffffff errno=9 cover=46 2021/11/11 12:42:54 result hanged=false: 12:42:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x4) 2021/11/11 12:42:54 #0: triaging type=7 2021/11/11 12:42:54 triaging input for call #1 sync_file_range (new signal=3) [67826ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1565 #0 [67835ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [67836ms] <- perf_event_open=0x3 errno=14 cover=7036 #0 [67840ms] -> sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x4) #0 [67840ms] <- sync_file_range=0xffffffffffffffff errno=9 cover=75 12:42:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x4) 2021/11/11 12:42:54 result hanged=false: [67880ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1567 #0 [67890ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [67891ms] <- perf_event_open=0x3 errno=14 cover=6670 #0 [67892ms] -> sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x4) #0 [67892ms] <- sync_file_range=0xffffffffffffffff errno=9 cover=46 12:42:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x4) 2021/11/11 12:42:54 result hanged=false: [67921ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1569 #0 [67931ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [67933ms] <- perf_event_open=0x3 errno=14 cover=6815 #0 [67935ms] -> sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x4) #0 [67935ms] <- sync_file_range=0xffffffffffffffff errno=9 cover=75 2021/11/11 12:42:54 result hanged=false: 2021/11/11 12:42:54 added new input for call #1 sync_file_range to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x4) 12:42:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x4) 2021/11/11 12:42:54 #0: triaging type=7 2021/11/11 12:42:54 triaging input for call #0 perf_event_open (new signal=2) [67967ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1571 #0 [67977ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [67978ms] <- perf_event_open=0x3 errno=14 cover=6803 #0 [67979ms] -> sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x4) #0 [67979ms] <- sync_file_range=0xffffffffffffffff errno=9 cover=75 12:42:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x4) 2021/11/11 12:42:54 result hanged=false: [68010ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1573 #0 [68021ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [68022ms] <- perf_event_open=0x3 errno=14 cover=7246 #0 [68023ms] -> sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x4) #0 [68023ms] <- sync_file_range=0xffffffffffffffff errno=9 cover=75 12:42:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x4) 2021/11/11 12:42:55 result hanged=false: [68053ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1575 #0 [68066ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [68067ms] <- perf_event_open=0x3 errno=14 cover=7154 #0 [68069ms] -> sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x4) #0 [68069ms] <- sync_file_range=0xffffffffffffffff errno=9 cover=75 2021/11/11 12:42:55 result hanged=false: 2021/11/11 12:42:55 added new input for call #0 perf_event_open to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x4) 12:42:55 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x100000000, 0x400}, 0x0, &(0x7f0000000300)={0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{&(0x7f0000000840)="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", 0xff9, 0x8}], 0x0, &(0x7f0000001940)) [68114ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1577 #0 [68124ms] -> openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) #0 [68124ms] <- openat$vcsu=0xffffffffffffffff errno=22 cover=48 #0 [68125ms] -> pselect6(0x40, 0x200001c0, 0x0, 0x20000240, 0x0, 0x20000300) #0 [68125ms] <- pselect6=0xffffffffffffffff errno=9 cover=136 #0 [68125ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) #0 [68127ms] <- syz_init_net_socket$bt_l2cap=0xffffffffffffffff errno=94 cover=5579 #0 [68127ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) #0 [68129ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=5826 #0 [68129ms] -> syz_mount_image$vfat(0x200006c0, 0x20000700, 0x0, 0x1, 0x200018c0, 0x0, 0x20001940) syz_mount_image: size=0 segs=1 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 2973.598529] FAT-fs (loop0): invalid media value (0x28) [ 2973.599985] FAT-fs (loop0): Can't find a valid FAT filesystem syz_mount_image > mount error: 22 #0 [68143ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=28295 enabling collider #0 [68144ms] -> openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) #0 [68144ms] <- openat$vcsu=0xffffffffffffffff errno=22 cover=48 #0 [68145ms] -> pselect6(0x40, 0x200001c0, 0x0, 0x20000240, 0x0, 0x20000300) #0 [68146ms] <- pselect6=0xffffffffffffffff errno=9 cover=136 pthread_create failed (errno 11) 12:42:55 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x100000000, 0x400}, 0x0, &(0x7f0000000300)={0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{&(0x7f0000000840)="cbadb30edf6c9ae5d94915dcf02893c5977cc38efa6af6b4c8bb7e4dabd0671f1075c27cc73de9fbacacb352d618c0cd9236ba94414312b047814b4196aa827f7a2a8daad19869620560005618b2ae112b49432ca1ad18ca5bdb3ba14070a1baf5fbf1154ef7e686f325e2971bfbf2b7211a0329bd8ddadbf66e2f60f8e2140fd3b6964b1b702c77f49c0e981e490965965eccdaa06c6ab14514fc6b9c857e10d21b9d8493d31065b195c47695ee33922debcb9ccb1a6988da420f06594e861024e3a85d49fbbf8c14f491380c2d6c8bed775571c150bcbff3cc9b1a2020b1c1e2ca92660b16b7db99894e57b1e19e59bb054c58caf111ebf021795e89f80b78a4735523045972771d4d77c2457202e0d46c2e17d93572316577903c40e85f1f88c0980abeaaaf8f99ed80d8f2fb3d6b2c468ef2533c9cec70702005b9720d794d41e5d17ba44baef5390dab818b29ed25716c6b67ac5682316a3e05ef2841d58b5deb516022b8cb3f2ffb4167d11960158319b300c5cbaa9ec3b5b5f81f4d54ed3ee24c63c8039e8d0b01fbc0083509b65ed74692fa387155b39278754cfa63ac9cead26519a754649f5d3ebd1b676deef9e6c35c810c6538c1ebc99fd8715fe3daeb880b3cc48f91a83d84342d5b3b26254d7a0d73c68c5ee181548eb355ac89ebcde452aa5ba83c87ac19361625f702bb43d880988cc0f59dc8c81150ecb330dba457204fe647051d0701d096e49cc20aa2d0805ce9d3bf10477de91c3fe207cd5c637f45f8eb442c27beecf83bf8a27ce849626ddd30ecb9bc9d4e4e4df012fb5ad32f8b572d75d89558c3cc4871855cd528ec7d8191966e1211a8863cf59bd9804cd802922fcc46462f2d82eed9524fece6bc57d78086bd7ca611cef02ad6d800e1f0eac1785751158bceb8ece08ba8d3239075784b1fd94d97a54288b0334409a8defc5d3ed1560aaa2b245d25acefc98c7f7de3022f9f409eaf5fd55c68df0e35bb4207008a1b5907c591909379e603a916e617bafdc1083566483d2ff1bd7069ea39ebba286d79a09e9818ec0b55c56e50bc5ca1bc39f2499fb526f812a03fd6ab90fe3e56ba145db744e2199efc7770728ad7c08a1523604f56a6097f6b67ebcc3fe9fdc7504954ab55a72c595c3e1eb33c05ebb7e04747df9db91dc335e3f3601a4977ba3b106e7eeda708f55e5324c44177474eef361f50cf44ede5db7fd9825ef49edf0d305783ab671161caf059814b33f7a75c8386178da27699eb59aa906ce6716e07956fa14f3a1d7164cb541d8cd731e87757cffedb313a2171794ec8dc246e842d84ce23cf30ae22a0af7055357e8ea80f5bf9d36cf9e88398412aaf384823322be1a76fc9bfebe082920ffb87eda6c33fd0512712e67dd25c3366711984a5c5ffbcc93e9c52f48ec903036423ab406ebbe6eeec99fbc588f5272b87f711c1401a78b064072215f1f9639b57b8f636004284b43628a3c5f38a8583ac36196968c799588eab92cd2ecde5745f92cc47df49a5d80700023118274090c80fe4427263fa7d5e0494bcd8060d638cecdb3f15820422be6ba0d8e39ab67373aa897d6455f007b5356b07f888ab00356b31b4af278b1973c28d6fdebe2d709f79367824cf1b6f7f528644f38234bc186e9cd32b2ba4e4beef3f4c18cb37fae075ba4c0a7ecf1b9c464cb797f69a65cc4a6dbadc963e2d5460c5cc87a2ec8872e7654ad5ef3e897bc2454c37707efd8186b9cfe1afd1f37660f395c3e06483fabdff44f8d9cb9e0a14f27225a57fc3dcea64a47e1297620bc74c85389772e2ffc2617c97796611134abea8b45281a7a86bfa416081b8270f3a648bf4002e1fde5fb88151594a4945c6bb1dacf7349b69c4f0172a71fdffa1cbda848a9f37d0ae4a4df4b558e9437120ec0d86de96914d25b0a17c65ad993285fda75c18dcb9f48a2a31f929dfbb66a1843fd45b0a28fe4b6b139288b5405e5c3eeb725f74773f1f69f904f97c366e1befe7cb1ddce0ada565ee596b17fa0d39704a7ad67694d661e6560e3c9a23d166f835ab6cf0fc3b57bd083b419d20eae134329216d01cc3c1e84dc80ceec2d8bb71279678fb6ed3a6df0ca7587656171d39df37911a0f6a68f728d7761e7343b07e65fa8e358210d1efe7bb4fa9c97a3c4e14e49ff4489f0158e9d102e0ba323c756e25e807c7177e500a8cf372397e0c324241f67c30e0f18e2c6c422828f0cf25440e870f29a6cb057cc122ab715c2c448d79df5ea5b4ee69b616e73a3b9bf3c0684d8ea39bf3598bbcb09b47d6dc6ce57503ae091e885ee6f1bbf41511a1549aeea0c0b43472eac12b747ddd15e4096678c95adeb75f17b4d3da2be144ebf02a6db958d3d30a0b674842a9d18337714c080e0caea5ef92e7d75253e875ffa2f54951883a0381b2a0fbd8125e588e713edccf61e063a7c4d4225e2c48535556e82cba3e160688f575987554256185662a50e6c3e89be70a1e03dcc3c7f5a99d622c626c4e337e063b23547c5add6382fd9730318815f7ca1df9668a6b4510c6f3e60b7f04c0920dbc357f102f351af808fc10117179af7cc925f9ca7ceefcc4596ab2bff4fdb799c070dc3e369f88e465e825720a09e6a510fd558cc1b5854f9f6933f9a33b901993e7c9ae4a4602e878f900c071a35d55d6223516ac5a209b159ac88555b18983a04772741b254c05e08eeecedf93932b6b1385bec723dca0271270fdf5487b4f2edf45d82b820fc674b50df028821d58001ca12ced42a4247ed3e6a49efbcaa034633dffed1afbfc4952612d422f8eace39a25b8cec4f913b01337da8adeaf13d766aa146ca6af94425b8b2eb65625f1ee7991f18a947d744df66dc2a496404df9786ff3bdd42e19e7dd03d9002594645d4a5fee9f2c435bb7a803202ec46cb5d3593a04ab552644f986fddb9cc8827b5b84416dd208f18c1f9f750c8045208f89717e6f21930c35a490fccdcf5e65afc197e6fbb2795007495f765af41bdbd58dcb4dfe563bf2d46384092741433ce90265e9aa687c8278569ee107888921ae606216a7502b6753de569044b635a318b00c8a9b9c0cf4714aee16fdf8865e98a82c3530302350202da0f2cea3aa36e40645c67f13c775d02fc243b08c1cdca814b1b7e802caaf899a8181f0c2275ab091f05853118e6f95eae9131662b4194fd7581802ceb2ce608c7a6d1692e9f564e6b2928b585897da02fbb45f01c1628c3a31236375c205c97c5c031c68932828244bcb5768bc76246238653edc82d7355f365dbd462e9d8137870ae484d68941d73186835700ac0f71b4c513e124bdf713d0d967cf576e1cdd06635ea867503e9265344564ca316f6206fc4a004d65a1d2151341d815fc4d9e7a90ff6fece6f9cff356b8446702e5ba6f030ee8d450f81e827519df83758b7567b053813706ebd4592d92964defc0be911684416dcf63888c4ac03a24f0595a70602007df2b6f96fdb9f6e6b572f08a6199960a34c4c9cbcff311c516b0eec92f82b553ea72b2cb49c764432366c5246207d7a24caafaf8036474785d944f24d9b8f3a9f5e085625c16df26aa52f573fd78635e0d3924432b8abe0e681f0b8f0fecdde21f1962a8db5e11a619e6849c6300a11732335c8c624bb97263b9c077c466a76d6a2ebbcf84ee2b8240424e956e6294c233e961a78246f2290795ee6bfde27c6a0716ac71a4c164fc4cccbb134ac807f4e8b549b60258f11a93e3184c66dffd6f95b1c2eb3103b36e1b70b4f5a29abfc4dca2ba5209f7010e6aabfb6cb74a9fd66a4fab7d60f04822d110952bea743098a1c68f5c52c94e26a2829351ba5fe5e3a71c90fb6f87fc3a8a2c3ab8d1cb553ce2b5b93ae4fc1031d88ad6749389dbd9461dc62eb57a5c8e488f078cab370b3e7599d214e1f1188fab76441bb5a6bd0c45655b07829e00806ccfde3d3ad7b179088e88b2988c470377cb809666cb1c0e94f23f690aab9e8584384eced3bf79fabec82d1460c461db55a380061e53c3c872e3c54ce4b55c47e2f9a4a98adac85c87ba0513e787bddd50a1cec80385f47db897d0143a0e9e4bc1e197ea1f5ce43dcc9350dd95073626021649181667319b1d10da948259c1ae91b74651b1a4bb7f46ca10f848ef4ae10b9ca73cff861f954e1d79ecd88d4f02ba791daf32cb2cc49462627c56c7c09f90eded9b8e481c98e8e059f590982e185711e5994d055f334848efa60fb15f1237d8cbb449d13b4223db84ad919c407733be444578a172b02a3f3c49a4ce59e003d4046e3cfeb84244616e2c417487657f6c34d63239e82adca8eee85242d92571c52a4e9e5bde90a57724866c8e73fc766755e130fcd650d25ebd0f5d1b71b53572027d518813646c709377dcc40784421bc7e30df5f510736ddbc8b1582dbadb321d7d627e83be3c0d1d612ac7ae68304614cb4066e302b6dcdbfb9ef81c066acc71a6d7fc3e04572f3c2b3ba6ad4f0c86b3ac18b87f64cf799d3ce03bcc2568512e0ab8591226ad019a95e773718b235931169e9448537fafc5fb32cbb75797a9e41a92ae3533da41d3073dbac40c6c4c013864963d054d31975b4e82b3c2fc705e4b794b75f5e40a3321aac21f7b82ebce6d4f089517e4dd2e8ea592aaaa232f2afc901778ddffd5bc9c3aecf02bf09800efe36d975a09d4bdc1f68f9a2ae812bdef35181d8f476ca45d6f4f7d6451ab7dfb19f498c1455eb108827cc04b864cdce86b0bd51c6d998c7389baa9ba443cffadb55cc689fe3f847469f454b2fb86377c89ca023b75ce745d67b1d8998aba70585413f78b4cc5bfb5ee71ca2533b0dc7b975c7478f4f546e5a73d7ea03fb89b446651f6fdcc85439def9c8203f38d8dd100dc81f14794c681f13c83ae1e0cfbb9e580b599e1b315821da551c12cf222359b931101eb4fc3ff09d01678382f94047777ec02c72a1f680f74e1c623b564179f95315a1627c61ab50f31447942c210f035cabcbff5037c10f5a42b172927cdf46e9ee3355ec9071bf495652440df5dc8bcdc0d3f62521364fa8c8119de338e38ff057f3b62ca4e5925a7f23ccdac0bf4954b65d83613b30fcf61b43c1c5fc6cd5437bb9dca0c42a5c2f3f40acb92548addbbff5baae23142e39aac8f49ab3cac6e9f0bea6c6cc5e9f15ad31f305d69b672f5dee363b6c6a041d6495fb4090eb433a49d02714b2c44626d408d88920c776dad47d6b205a40118f2b3134136edcc79b6636d5ffc1f61f721c41fba709ac6f5ecf55e235d77d91ff75fe03c895e37683ef2a6fe153f49cb0d810841bd639b7e95c7ddc64a62f826d78145a9d56c00b67b433104555a0fbdc4ee4cd6617dd01ff900d4b363a75582349995a84d7a69025b78bd598beaf08180c884493fc6613dc11d93fa5afbd3d34b2c0f095b710bfdf0b64e136a90ce2907f8ce1a179724750452b1d2be18d10ce7a4639a1925566a8a306f0c58be762f4ae3a00a8aaecf636c1b98cc58b1d5506d172335c7236c02babbd518471c1d330e8b458f398ea943c8a8dfa82d6254841b43e6dc1f9281d3023c4b88c126151da528f4ddb022034cf4e9fcb47acda904aef48d6971fe184d8a1be063258e5eaad337f013efeb499302b4a2f1d46614b6aa1c4a5637fa65c83062c3d281c429b2b981195194de712ff48bb766b304b114f04032e4bc55c010f689bd24acf29f76c71639e0ee3bbef7b348c874a145f791c1b77bdaa76159511040959a3455e3d83153a6916132fa1f9c3c2cd3dba88f41", 0xff9, 0x8}], 0x0, &(0x7f0000001940)) [68201ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:42:55 result hanged=false: 2021/11/11 12:42:55 #0: triaging type=7 2021/11/11 12:42:55 triaging input for call #4 syz_mount_image$vfat (new signal=8) spawned worker pid 1679 #0 [68211ms] -> openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) #0 [68211ms] <- openat$vcsu=0xffffffffffffffff errno=22 cover=48 #0 [68212ms] -> pselect6(0x40, 0x200001c0, 0x0, 0x20000240, 0x0, 0x20000300) #0 [68212ms] <- pselect6=0xffffffffffffffff errno=9 cover=136 #0 [68218ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) #0 [68219ms] <- syz_init_net_socket$bt_l2cap=0xffffffffffffffff errno=94 cover=5650 #0 [68220ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) #0 [68220ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=5600 #0 [68222ms] -> syz_mount_image$vfat(0x200006c0, 0x20000700, 0x0, 0x1, 0x200018c0, 0x0, 0x20001940) syz_mount_image: size=0 segs=1 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 2973.689738] FAT-fs (loop0): invalid media value (0x28) [ 2973.690989] FAT-fs (loop0): Can't find a valid FAT filesystem syz_mount_image > mount error: 22 #0 [68234ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=28568 12:42:55 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x100000000, 0x400}, 0x0, &(0x7f0000000300)={0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{&(0x7f0000000840)="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", 0xff9, 0x8}], 0x0, &(0x7f0000001940)) 2021/11/11 12:42:55 result hanged=false: [68260ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1681 #0 [68271ms] -> openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) #0 [68271ms] <- openat$vcsu=0xffffffffffffffff errno=22 cover=48 #0 [68271ms] -> pselect6(0x40, 0x200001c0, 0x0, 0x20000240, 0x0, 0x20000300) #0 [68271ms] <- pselect6=0xffffffffffffffff errno=9 cover=136 #0 [68272ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) #0 [68273ms] <- syz_init_net_socket$bt_l2cap=0xffffffffffffffff errno=94 cover=5565 #0 [68273ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) #0 [68274ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=5602 #0 [68275ms] -> syz_mount_image$vfat(0x200006c0, 0x20000700, 0x0, 0x1, 0x200018c0, 0x0, 0x20001940) syz_mount_image: size=0 segs=1 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 2973.741363] FAT-fs (loop0): invalid media value (0x28) [ 2973.742564] FAT-fs (loop0): Can't find a valid FAT filesystem syz_mount_image > mount error: 22 #0 [68284ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=28621 12:42:55 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x100000000, 0x400}, 0x0, &(0x7f0000000300)={0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{&(0x7f0000000840)="cbadb30edf6c9ae5d94915dcf02893c5977cc38efa6af6b4c8bb7e4dabd0671f1075c27cc73de9fbacacb352d618c0cd9236ba94414312b047814b4196aa827f7a2a8daad19869620560005618b2ae112b49432ca1ad18ca5bdb3ba14070a1baf5fbf1154ef7e686f325e2971bfbf2b7211a0329bd8ddadbf66e2f60f8e2140fd3b6964b1b702c77f49c0e981e490965965eccdaa06c6ab14514fc6b9c857e10d21b9d8493d31065b195c47695ee33922debcb9ccb1a6988da420f06594e861024e3a85d49fbbf8c14f491380c2d6c8bed775571c150bcbff3cc9b1a2020b1c1e2ca92660b16b7db99894e57b1e19e59bb054c58caf111ebf021795e89f80b78a4735523045972771d4d77c2457202e0d46c2e17d93572316577903c40e85f1f88c0980abeaaaf8f99ed80d8f2fb3d6b2c468ef2533c9cec70702005b9720d794d41e5d17ba44baef5390dab818b29ed25716c6b67ac5682316a3e05ef2841d58b5deb516022b8cb3f2ffb4167d11960158319b300c5cbaa9ec3b5b5f81f4d54ed3ee24c63c8039e8d0b01fbc0083509b65ed74692fa387155b39278754cfa63ac9cead26519a754649f5d3ebd1b676deef9e6c35c810c6538c1ebc99fd8715fe3daeb880b3cc48f91a83d84342d5b3b26254d7a0d73c68c5ee181548eb355ac89ebcde452aa5ba83c87ac19361625f702bb43d880988cc0f59dc8c81150ecb330dba457204fe647051d0701d096e49cc20aa2d0805ce9d3bf10477de91c3fe207cd5c637f45f8eb442c27beecf83bf8a27ce849626ddd30ecb9bc9d4e4e4df012fb5ad32f8b572d75d89558c3cc4871855cd528ec7d8191966e1211a8863cf59bd9804cd802922fcc46462f2d82eed9524fece6bc57d78086bd7ca611cef02ad6d800e1f0eac1785751158bceb8ece08ba8d3239075784b1fd94d97a54288b0334409a8defc5d3ed1560aaa2b245d25acefc98c7f7de3022f9f409eaf5fd55c68df0e35bb4207008a1b5907c591909379e603a916e617bafdc1083566483d2ff1bd7069ea39ebba286d79a09e9818ec0b55c56e50bc5ca1bc39f2499fb526f812a03fd6ab90fe3e56ba145db744e2199efc7770728ad7c08a1523604f56a6097f6b67ebcc3fe9fdc7504954ab55a72c595c3e1eb33c05ebb7e04747df9db91dc335e3f3601a4977ba3b106e7eeda708f55e5324c44177474eef361f50cf44ede5db7fd9825ef49edf0d305783ab671161caf059814b33f7a75c8386178da27699eb59aa906ce6716e07956fa14f3a1d7164cb541d8cd731e87757cffedb313a2171794ec8dc246e842d84ce23cf30ae22a0af7055357e8ea80f5bf9d36cf9e88398412aaf384823322be1a76fc9bfebe082920ffb87eda6c33fd0512712e67dd25c3366711984a5c5ffbcc93e9c52f48ec903036423ab406ebbe6eeec99fbc588f5272b87f711c1401a78b064072215f1f9639b57b8f636004284b43628a3c5f38a8583ac36196968c799588eab92cd2ecde5745f92cc47df49a5d80700023118274090c80fe4427263fa7d5e0494bcd8060d638cecdb3f15820422be6ba0d8e39ab67373aa897d6455f007b5356b07f888ab00356b31b4af278b1973c28d6fdebe2d709f79367824cf1b6f7f528644f38234bc186e9cd32b2ba4e4beef3f4c18cb37fae075ba4c0a7ecf1b9c464cb797f69a65cc4a6dbadc963e2d5460c5cc87a2ec8872e7654ad5ef3e897bc2454c37707efd8186b9cfe1afd1f37660f395c3e06483fabdff44f8d9cb9e0a14f27225a57fc3dcea64a47e1297620bc74c85389772e2ffc2617c97796611134abea8b45281a7a86bfa416081b8270f3a648bf4002e1fde5fb88151594a4945c6bb1dacf7349b69c4f0172a71fdffa1cbda848a9f37d0ae4a4df4b558e9437120ec0d86de96914d25b0a17c65ad993285fda75c18dcb9f48a2a31f929dfbb66a1843fd45b0a28fe4b6b139288b5405e5c3eeb725f74773f1f69f904f97c366e1befe7cb1ddce0ada565ee596b17fa0d39704a7ad67694d661e6560e3c9a23d166f835ab6cf0fc3b57bd083b419d20eae134329216d01cc3c1e84dc80ceec2d8bb71279678fb6ed3a6df0ca7587656171d39df37911a0f6a68f728d7761e7343b07e65fa8e358210d1efe7bb4fa9c97a3c4e14e49ff4489f0158e9d102e0ba323c756e25e807c7177e500a8cf372397e0c324241f67c30e0f18e2c6c422828f0cf25440e870f29a6cb057cc122ab715c2c448d79df5ea5b4ee69b616e73a3b9bf3c0684d8ea39bf3598bbcb09b47d6dc6ce57503ae091e885ee6f1bbf41511a1549aeea0c0b43472eac12b747ddd15e4096678c95adeb75f17b4d3da2be144ebf02a6db958d3d30a0b674842a9d18337714c080e0caea5ef92e7d75253e875ffa2f54951883a0381b2a0fbd8125e588e713edccf61e063a7c4d4225e2c48535556e82cba3e160688f575987554256185662a50e6c3e89be70a1e03dcc3c7f5a99d622c626c4e337e063b23547c5add6382fd9730318815f7ca1df9668a6b4510c6f3e60b7f04c0920dbc357f102f351af808fc10117179af7cc925f9ca7ceefcc4596ab2bff4fdb799c070dc3e369f88e465e825720a09e6a510fd558cc1b5854f9f6933f9a33b901993e7c9ae4a4602e878f900c071a35d55d6223516ac5a209b159ac88555b18983a04772741b254c05e08eeecedf93932b6b1385bec723dca0271270fdf5487b4f2edf45d82b820fc674b50df028821d58001ca12ced42a4247ed3e6a49efbcaa034633dffed1afbfc4952612d422f8eace39a25b8cec4f913b01337da8adeaf13d766aa146ca6af94425b8b2eb65625f1ee7991f18a947d744df66dc2a496404df9786ff3bdd42e19e7dd03d9002594645d4a5fee9f2c435bb7a803202ec46cb5d3593a04ab552644f986fddb9cc8827b5b84416dd208f18c1f9f750c8045208f89717e6f21930c35a490fccdcf5e65afc197e6fbb2795007495f765af41bdbd58dcb4dfe563bf2d46384092741433ce90265e9aa687c8278569ee107888921ae606216a7502b6753de569044b635a318b00c8a9b9c0cf4714aee16fdf8865e98a82c3530302350202da0f2cea3aa36e40645c67f13c775d02fc243b08c1cdca814b1b7e802caaf899a8181f0c2275ab091f05853118e6f95eae9131662b4194fd7581802ceb2ce608c7a6d1692e9f564e6b2928b585897da02fbb45f01c1628c3a31236375c205c97c5c031c68932828244bcb5768bc76246238653edc82d7355f365dbd462e9d8137870ae484d68941d73186835700ac0f71b4c513e124bdf713d0d967cf576e1cdd06635ea867503e9265344564ca316f6206fc4a004d65a1d2151341d815fc4d9e7a90ff6fece6f9cff356b8446702e5ba6f030ee8d450f81e827519df83758b7567b053813706ebd4592d92964defc0be911684416dcf63888c4ac03a24f0595a70602007df2b6f96fdb9f6e6b572f08a6199960a34c4c9cbcff311c516b0eec92f82b553ea72b2cb49c764432366c5246207d7a24caafaf8036474785d944f24d9b8f3a9f5e085625c16df26aa52f573fd78635e0d3924432b8abe0e681f0b8f0fecdde21f1962a8db5e11a619e6849c6300a11732335c8c624bb97263b9c077c466a76d6a2ebbcf84ee2b8240424e956e6294c233e961a78246f2290795ee6bfde27c6a0716ac71a4c164fc4cccbb134ac807f4e8b549b60258f11a93e3184c66dffd6f95b1c2eb3103b36e1b70b4f5a29abfc4dca2ba5209f7010e6aabfb6cb74a9fd66a4fab7d60f04822d110952bea743098a1c68f5c52c94e26a2829351ba5fe5e3a71c90fb6f87fc3a8a2c3ab8d1cb553ce2b5b93ae4fc1031d88ad6749389dbd9461dc62eb57a5c8e488f078cab370b3e7599d214e1f1188fab76441bb5a6bd0c45655b07829e00806ccfde3d3ad7b179088e88b2988c470377cb809666cb1c0e94f23f690aab9e8584384eced3bf79fabec82d1460c461db55a380061e53c3c872e3c54ce4b55c47e2f9a4a98adac85c87ba0513e787bddd50a1cec80385f47db897d0143a0e9e4bc1e197ea1f5ce43dcc9350dd95073626021649181667319b1d10da948259c1ae91b74651b1a4bb7f46ca10f848ef4ae10b9ca73cff861f954e1d79ecd88d4f02ba791daf32cb2cc49462627c56c7c09f90eded9b8e481c98e8e059f590982e185711e5994d055f334848efa60fb15f1237d8cbb449d13b4223db84ad919c407733be444578a172b02a3f3c49a4ce59e003d4046e3cfeb84244616e2c417487657f6c34d63239e82adca8eee85242d92571c52a4e9e5bde90a57724866c8e73fc766755e130fcd650d25ebd0f5d1b71b53572027d518813646c709377dcc40784421bc7e30df5f510736ddbc8b1582dbadb321d7d627e83be3c0d1d612ac7ae68304614cb4066e302b6dcdbfb9ef81c066acc71a6d7fc3e04572f3c2b3ba6ad4f0c86b3ac18b87f64cf799d3ce03bcc2568512e0ab8591226ad019a95e773718b235931169e9448537fafc5fb32cbb75797a9e41a92ae3533da41d3073dbac40c6c4c013864963d054d31975b4e82b3c2fc705e4b794b75f5e40a3321aac21f7b82ebce6d4f089517e4dd2e8ea592aaaa232f2afc901778ddffd5bc9c3aecf02bf09800efe36d975a09d4bdc1f68f9a2ae812bdef35181d8f476ca45d6f4f7d6451ab7dfb19f498c1455eb108827cc04b864cdce86b0bd51c6d998c7389baa9ba443cffadb55cc689fe3f847469f454b2fb86377c89ca023b75ce745d67b1d8998aba70585413f78b4cc5bfb5ee71ca2533b0dc7b975c7478f4f546e5a73d7ea03fb89b446651f6fdcc85439def9c8203f38d8dd100dc81f14794c681f13c83ae1e0cfbb9e580b599e1b315821da551c12cf222359b931101eb4fc3ff09d01678382f94047777ec02c72a1f680f74e1c623b564179f95315a1627c61ab50f31447942c210f035cabcbff5037c10f5a42b172927cdf46e9ee3355ec9071bf495652440df5dc8bcdc0d3f62521364fa8c8119de338e38ff057f3b62ca4e5925a7f23ccdac0bf4954b65d83613b30fcf61b43c1c5fc6cd5437bb9dca0c42a5c2f3f40acb92548addbbff5baae23142e39aac8f49ab3cac6e9f0bea6c6cc5e9f15ad31f305d69b672f5dee363b6c6a041d6495fb4090eb433a49d02714b2c44626d408d88920c776dad47d6b205a40118f2b3134136edcc79b6636d5ffc1f61f721c41fba709ac6f5ecf55e235d77d91ff75fe03c895e37683ef2a6fe153f49cb0d810841bd639b7e95c7ddc64a62f826d78145a9d56c00b67b433104555a0fbdc4ee4cd6617dd01ff900d4b363a75582349995a84d7a69025b78bd598beaf08180c884493fc6613dc11d93fa5afbd3d34b2c0f095b710bfdf0b64e136a90ce2907f8ce1a179724750452b1d2be18d10ce7a4639a1925566a8a306f0c58be762f4ae3a00a8aaecf636c1b98cc58b1d5506d172335c7236c02babbd518471c1d330e8b458f398ea943c8a8dfa82d6254841b43e6dc1f9281d3023c4b88c126151da528f4ddb022034cf4e9fcb47acda904aef48d6971fe184d8a1be063258e5eaad337f013efeb499302b4a2f1d46614b6aa1c4a5637fa65c83062c3d281c429b2b981195194de712ff48bb766b304b114f04032e4bc55c010f689bd24acf29f76c71639e0ee3bbef7b348c874a145f791c1b77bdaa76159511040959a3455e3d83153a6916132fa1f9c3c2cd3dba88f41", 0xff9, 0x8}], 0x0, &(0x7f0000001940)) 2021/11/11 12:42:55 result hanged=false: [68308ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1683 #0 [68322ms] -> openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) #0 [68322ms] <- openat$vcsu=0xffffffffffffffff errno=22 cover=48 #0 [68323ms] -> pselect6(0x40, 0x200001c0, 0x0, 0x20000240, 0x0, 0x20000300) #0 [68323ms] <- pselect6=0xffffffffffffffff errno=9 cover=136 #0 [68323ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) #0 [68324ms] <- syz_init_net_socket$bt_l2cap=0xffffffffffffffff errno=94 cover=5515 #0 [68325ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) #0 [68325ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=5682 #0 [68326ms] -> syz_mount_image$vfat(0x200006c0, 0x20000700, 0x0, 0x1, 0x200018c0, 0x0, 0x20001940) syz_mount_image: size=0 segs=1 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 2973.796218] FAT-fs (loop0): invalid media value (0x28) [ 2973.797535] FAT-fs (loop0): Can't find a valid FAT filesystem syz_mount_image > mount error: 22 #0 [68340ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=34309 2021/11/11 12:42:55 result hanged=false: 2021/11/11 12:42:55 added new input for call #4 syz_mount_image$vfat to corpus: openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x100000000, 0x400}, 0x0, &(0x7f0000000300)={0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{&(0x7f0000000840)="cbadb30edf6c9ae5d94915dcf02893c5977cc38efa6af6b4c8bb7e4dabd0671f1075c27cc73de9fbacacb352d618c0cd9236ba94414312b047814b4196aa827f7a2a8daad19869620560005618b2ae112b49432ca1ad18ca5bdb3ba14070a1baf5fbf1154ef7e686f325e2971bfbf2b7211a0329bd8ddadbf66e2f60f8e2140fd3b6964b1b702c77f49c0e981e490965965eccdaa06c6ab14514fc6b9c857e10d21b9d8493d31065b195c47695ee33922debcb9ccb1a6988da420f06594e861024e3a85d49fbbf8c14f491380c2d6c8bed775571c150bcbff3cc9b1a2020b1c1e2ca92660b16b7db99894e57b1e19e59bb054c58caf111ebf021795e89f80b78a4735523045972771d4d77c2457202e0d46c2e17d93572316577903c40e85f1f88c0980abeaaaf8f99ed80d8f2fb3d6b2c468ef2533c9cec70702005b9720d794d41e5d17ba44baef5390dab818b29ed25716c6b67ac5682316a3e05ef2841d58b5deb516022b8cb3f2ffb4167d11960158319b300c5cbaa9ec3b5b5f81f4d54ed3ee24c63c8039e8d0b01fbc0083509b65ed74692fa387155b39278754cfa63ac9cead26519a754649f5d3ebd1b676deef9e6c35c810c6538c1ebc99fd8715fe3daeb880b3cc48f91a83d84342d5b3b26254d7a0d73c68c5ee181548eb355ac89ebcde452aa5ba83c87ac19361625f702bb43d880988cc0f59dc8c81150ecb330dba457204fe647051d0701d096e49cc20aa2d0805ce9d3bf10477de91c3fe207cd5c637f45f8eb442c27beecf83bf8a27ce849626ddd30ecb9bc9d4e4e4df012fb5ad32f8b572d75d89558c3cc4871855cd528ec7d8191966e1211a8863cf59bd9804cd802922fcc46462f2d82eed9524fece6bc57d78086bd7ca611cef02ad6d800e1f0eac1785751158bceb8ece08ba8d3239075784b1fd94d97a54288b0334409a8defc5d3ed1560aaa2b245d25acefc98c7f7de3022f9f409eaf5fd55c68df0e35bb4207008a1b5907c591909379e603a916e617bafdc1083566483d2ff1bd7069ea39ebba286d79a09e9818ec0b55c56e50bc5ca1bc39f2499fb526f812a03fd6ab90fe3e56ba145db744e2199efc7770728ad7c08a1523604f56a6097f6b67ebcc3fe9fdc7504954ab55a72c595c3e1eb33c05ebb7e04747df9db91dc335e3f3601a4977ba3b106e7eeda708f55e5324c44177474eef361f50cf44ede5db7fd9825ef49edf0d305783ab671161caf059814b33f7a75c8386178da27699eb59aa906ce6716e07956fa14f3a1d7164cb541d8cd731e87757cffedb313a2171794ec8dc246e842d84ce23cf30ae22a0af7055357e8ea80f5bf9d36cf9e88398412aaf384823322be1a76fc9bfebe082920ffb87eda6c33fd0512712e67dd25c3366711984a5c5ffbcc93e9c52f48ec903036423ab406ebbe6eeec99fbc588f5272b87f711c1401a78b064072215f1f9639b57b8f636004284b43628a3c5f38a8583ac36196968c799588eab92cd2ecde5745f92cc47df49a5d80700023118274090c80fe4427263fa7d5e0494bcd8060d638cecdb3f15820422be6ba0d8e39ab67373aa897d6455f007b5356b07f888ab00356b31b4af278b1973c28d6fdebe2d709f79367824cf1b6f7f528644f38234bc186e9cd32b2ba4e4beef3f4c18cb37fae075ba4c0a7ecf1b9c464cb797f69a65cc4a6dbadc963e2d5460c5cc87a2ec8872e7654ad5ef3e897bc2454c37707efd8186b9cfe1afd1f37660f395c3e06483fabdff44f8d9cb9e0a14f27225a57fc3dcea64a47e1297620bc74c85389772e2ffc2617c97796611134abea8b45281a7a86bfa416081b8270f3a648bf4002e1fde5fb88151594a4945c6bb1dacf7349b69c4f0172a71fdffa1cbda848a9f37d0ae4a4df4b558e9437120ec0d86de96914d25b0a17c65ad993285fda75c18dcb9f48a2a31f929dfbb66a1843fd45b0a28fe4b6b139288b5405e5c3eeb725f74773f1f69f904f97c366e1befe7cb1ddce0ada565ee596b17fa0d39704a7ad67694d661e6560e3c9a23d166f835ab6cf0fc3b57bd083b419d20eae134329216d01cc3c1e84dc80ceec2d8bb71279678fb6ed3a6df0ca7587656171d39df37911a0f6a68f728d7761e7343b07e65fa8e358210d1efe7bb4fa9c97a3c4e14e49ff4489f0158e9d102e0ba323c756e25e807c7177e500a8cf372397e0c324241f67c30e0f18e2c6c422828f0cf25440e870f29a6cb057cc122ab715c2c448d79df5ea5b4ee69b616e73a3b9bf3c0684d8ea39bf3598bbcb09b47d6dc6ce57503ae091e885ee6f1bbf41511a1549aeea0c0b43472eac12b747ddd15e4096678c95adeb75f17b4d3da2be144ebf02a6db958d3d30a0b674842a9d18337714c080e0caea5ef92e7d75253e875ffa2f54951883a0381b2a0fbd8125e588e713edccf61e063a7c4d4225e2c48535556e82cba3e160688f575987554256185662a50e6c3e89be70a1e03dcc3c7f5a99d622c626c4e337e063b23547c5add6382fd9730318815f7ca1df9668a6b4510c6f3e60b7f04c0920dbc357f102f351af808fc10117179af7cc925f9ca7ceefcc4596ab2bff4fdb799c070dc3e369f88e465e825720a09e6a510fd558cc1b5854f9f6933f9a33b901993e7c9ae4a4602e878f900c071a35d55d6223516ac5a209b159ac88555b18983a04772741b254c05e08eeecedf93932b6b1385bec723dca0271270fdf5487b4f2edf45d82b820fc674b50df028821d58001ca12ced42a4247ed3e6a49efbcaa034633dffed1afbfc4952612d422f8eace39a25b8cec4f913b01337da8adeaf13d766aa146ca6af94425b8b2eb65625f1ee7991f18a947d744df66dc2a496404df9786ff3bdd42e19e7dd03d9002594645d4a5fee9f2c435bb7a803202ec46cb5d3593a04ab552644f986fddb9cc8827b5b84416dd208f18c1f9f750c8045208f89717e6f21930c35a490fccdcf5e65afc197e6fbb2795007495f765af41bdbd58dcb4dfe563bf2d46384092741433ce90265e9aa687c8278569ee107888921ae606216a7502b6753de569044b635a318b00c8a9b9c0cf4714aee16fdf8865e98a82c3530302350202da0f2cea3aa36e40645c67f13c775d02fc243b08c1cdca814b1b7e802caaf899a8181f0c2275ab091f05853118e6f95eae9131662b4194fd7581802ceb2ce608c7a6d1692e9f564e6b2928b585897da02fbb45f01c1628c3a31236375c205c97c5c031c68932828244bcb5768bc76246238653edc82d7355f365dbd462e9d8137870ae484d68941d73186835700ac0f71b4c513e124bdf713d0d967cf576e1cdd06635ea867503e9265344564ca316f6206fc4a004d65a1d2151341d815fc4d9e7a90ff6fece6f9cff356b8446702e5ba6f030ee8d450f81e827519df83758b7567b053813706ebd4592d92964defc0be911684416dcf63888c4ac03a24f0595a70602007df2b6f96fdb9f6e6b572f08a6199960a34c4c9cbcff311c516b0eec92f82b553ea72b2cb49c764432366c5246207d7a24caafaf8036474785d944f24d9b8f3a9f5e085625c16df26aa52f573fd78635e0d3924432b8abe0e681f0b8f0fecdde21f1962a8db5e11a619e6849c6300a11732335c8c624bb97263b9c077c466a76d6a2ebbcf84ee2b8240424e956e6294c233e961a78246f2290795ee6bfde27c6a0716ac71a4c164fc4cccbb134ac807f4e8b549b60258f11a93e3184c66dffd6f95b1c2eb3103b36e1b70b4f5a29abfc4dca2ba5209f7010e6aabfb6cb74a9fd66a4fab7d60f04822d110952bea743098a1c68f5c52c94e26a2829351ba5fe5e3a71c90fb6f87fc3a8a2c3ab8d1cb553ce2b5b93ae4fc1031d88ad6749389dbd9461dc62eb57a5c8e488f078cab370b3e7599d214e1f1188fab76441bb5a6bd0c45655b07829e00806ccfde3d3ad7b179088e88b2988c470377cb809666cb1c0e94f23f690aab9e8584384eced3bf79fabec82d1460c461db55a380061e53c3c872e3c54ce4b55c47e2f9a4a98adac85c87ba0513e787bddd50a1cec80385f47db897d0143a0e9e4bc1e197ea1f5ce43dcc9350dd95073626021649181667319b1d10da948259c1ae91b74651b1a4bb7f46ca10f848ef4ae10b9ca73cff861f954e1d79ecd88d4f02ba791daf32cb2cc49462627c56c7c09f90eded9b8e481c98e8e059f590982e185711e5994d055f334848efa60fb15f1237d8cbb449d13b4223db84ad919c407733be444578a172b02a3f3c49a4ce59e003d4046e3cfeb84244616e2c417487657f6c34d63239e82adca8eee85242d92571c52a4e9e5bde90a57724866c8e73fc766755e130fcd650d25ebd0f5d1b71b53572027d518813646c709377dcc40784421bc7e30df5f510736ddbc8b1582dbadb321d7d627e83be3c0d1d612ac7ae68304614cb4066e302b6dcdbfb9ef81c066acc71a6d7fc3e04572f3c2b3ba6ad4f0c86b3ac18b87f64cf799d3ce03bcc2568512e0ab8591226ad019a95e773718b235931169e9448537fafc5fb32cbb75797a9e41a92ae3533da41d3073dbac40c6c4c013864963d054d31975b4e82b3c2fc705e4b794b75f5e40a3321aac21f7b82ebce6d4f089517e4dd2e8ea592aaaa232f2afc901778ddffd5bc9c3aecf02bf09800efe36d975a09d4bdc1f68f9a2ae812bdef35181d8f476ca45d6f4f7d6451ab7dfb19f498c1455eb108827cc04b864cdce86b0bd51c6d998c7389baa9ba443cffadb55cc689fe3f847469f454b2fb86377c89ca023b75ce745d67b1d8998aba70585413f78b4cc5bfb5ee71ca2533b0dc7b975c7478f4f546e5a73d7ea03fb89b446651f6fdcc85439def9c8203f38d8dd100dc81f14794c681f13c83ae1e0cfbb9e580b599e1b315821da551c12cf222359b931101eb4fc3ff09d01678382f94047777ec02c72a1f680f74e1c623b564179f95315a1627c61ab50f31447942c210f035cabcbff5037c10f5a42b172927cdf46e9ee3355ec9071bf495652440df5dc8bcdc0d3f62521364fa8c8119de338e38ff057f3b62ca4e5925a7f23ccdac0bf4954b65d83613b30fcf61b43c1c5fc6cd5437bb9dca0c42a5c2f3f40acb92548addbbff5baae23142e39aac8f49ab3cac6e9f0bea6c6cc5e9f15ad31f305d69b672f5dee363b6c6a041d6495fb4090eb433a49d02714b2c44626d408d88920c776dad47d6b205a40118f2b3134136edcc79b6636d5ffc1f61f721c41fba709ac6f5ecf55e235d77d91ff75fe03c895e37683ef2a6fe153f49cb0d810841bd639b7e95c7ddc64a62f826d78145a9d56c00b67b433104555a0fbdc4ee4cd6617dd01ff900d4b363a75582349995a84d7a69025b78bd598beaf08180c884493fc6613dc11d93fa5afbd3d34b2c0f095b710bfdf0b64e136a90ce2907f8ce1a179724750452b1d2be18d10ce7a4639a1925566a8a306f0c58be762f4ae3a00a8aaecf636c1b98cc58b1d5506d172335c7236c02babbd518471c1d330e8b458f398ea943c8a8dfa82d6254841b43e6dc1f9281d3023c4b88c126151da528f4ddb022034cf4e9fcb47acda904aef48d6971fe184d8a1be063258e5eaad337f013efeb499302b4a2f1d46614b6aa1c4a5637fa65c83062c3d281c429b2b981195194de712ff48bb766b304b114f04032e4bc55c010f689bd24acf29f76c71639e0ee3bbef7b348c874a145f791c1b77bdaa76159511040959a3455e3d83153a6916132fa1f9c3c2cd3dba88f41", 0xff9, 0x8}], 0x0, &(0x7f0000001940)) 2021/11/11 12:42:55 #0: triaging type=7 2021/11/11 12:42:55 triaging input for call #3 syz_init_net_socket$bt_l2cap (new signal=8) 12:42:55 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x100000000, 0x400}, 0x0, &(0x7f0000000300)={0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{&(0x7f0000000840)="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", 0xff9, 0x8}], 0x0, &(0x7f0000001940)) [68417ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1685 #0 [68426ms] -> openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) #0 [68427ms] <- openat$vcsu=0xffffffffffffffff errno=22 cover=48 #0 [68427ms] -> pselect6(0x40, 0x200001c0, 0x0, 0x20000240, 0x0, 0x20000300) #0 [68427ms] <- pselect6=0xffffffffffffffff errno=9 cover=136 #0 [68428ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) #0 [68429ms] <- syz_init_net_socket$bt_l2cap=0xffffffffffffffff errno=94 cover=5619 #0 [68430ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) #0 [68430ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=5575 #0 [68431ms] -> syz_mount_image$vfat(0x200006c0, 0x20000700, 0x0, 0x1, 0x200018c0, 0x0, 0x20001940) syz_mount_image: size=0 segs=1 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 2973.898920] FAT-fs (loop0): invalid media value (0x28) [ 2973.900131] FAT-fs (loop0): Can't find a valid FAT filesystem syz_mount_image > mount error: 22 #0 [68442ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=27620 12:42:55 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x100000000, 0x400}, 0x0, &(0x7f0000000300)={0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{&(0x7f0000000840)="cbadb30edf6c9ae5d94915dcf02893c5977cc38efa6af6b4c8bb7e4dabd0671f1075c27cc73de9fbacacb352d618c0cd9236ba94414312b047814b4196aa827f7a2a8daad19869620560005618b2ae112b49432ca1ad18ca5bdb3ba14070a1baf5fbf1154ef7e686f325e2971bfbf2b7211a0329bd8ddadbf66e2f60f8e2140fd3b6964b1b702c77f49c0e981e490965965eccdaa06c6ab14514fc6b9c857e10d21b9d8493d31065b195c47695ee33922debcb9ccb1a6988da420f06594e861024e3a85d49fbbf8c14f491380c2d6c8bed775571c150bcbff3cc9b1a2020b1c1e2ca92660b16b7db99894e57b1e19e59bb054c58caf111ebf021795e89f80b78a4735523045972771d4d77c2457202e0d46c2e17d93572316577903c40e85f1f88c0980abeaaaf8f99ed80d8f2fb3d6b2c468ef2533c9cec70702005b9720d794d41e5d17ba44baef5390dab818b29ed25716c6b67ac5682316a3e05ef2841d58b5deb516022b8cb3f2ffb4167d11960158319b300c5cbaa9ec3b5b5f81f4d54ed3ee24c63c8039e8d0b01fbc0083509b65ed74692fa387155b39278754cfa63ac9cead26519a754649f5d3ebd1b676deef9e6c35c810c6538c1ebc99fd8715fe3daeb880b3cc48f91a83d84342d5b3b26254d7a0d73c68c5ee181548eb355ac89ebcde452aa5ba83c87ac19361625f702bb43d880988cc0f59dc8c81150ecb330dba457204fe647051d0701d096e49cc20aa2d0805ce9d3bf10477de91c3fe207cd5c637f45f8eb442c27beecf83bf8a27ce849626ddd30ecb9bc9d4e4e4df012fb5ad32f8b572d75d89558c3cc4871855cd528ec7d8191966e1211a8863cf59bd9804cd802922fcc46462f2d82eed9524fece6bc57d78086bd7ca611cef02ad6d800e1f0eac1785751158bceb8ece08ba8d3239075784b1fd94d97a54288b0334409a8defc5d3ed1560aaa2b245d25acefc98c7f7de3022f9f409eaf5fd55c68df0e35bb4207008a1b5907c591909379e603a916e617bafdc1083566483d2ff1bd7069ea39ebba286d79a09e9818ec0b55c56e50bc5ca1bc39f2499fb526f812a03fd6ab90fe3e56ba145db744e2199efc7770728ad7c08a1523604f56a6097f6b67ebcc3fe9fdc7504954ab55a72c595c3e1eb33c05ebb7e04747df9db91dc335e3f3601a4977ba3b106e7eeda708f55e5324c44177474eef361f50cf44ede5db7fd9825ef49edf0d305783ab671161caf059814b33f7a75c8386178da27699eb59aa906ce6716e07956fa14f3a1d7164cb541d8cd731e87757cffedb313a2171794ec8dc246e842d84ce23cf30ae22a0af7055357e8ea80f5bf9d36cf9e88398412aaf384823322be1a76fc9bfebe082920ffb87eda6c33fd0512712e67dd25c3366711984a5c5ffbcc93e9c52f48ec903036423ab406ebbe6eeec99fbc588f5272b87f711c1401a78b064072215f1f9639b57b8f636004284b43628a3c5f38a8583ac36196968c799588eab92cd2ecde5745f92cc47df49a5d80700023118274090c80fe4427263fa7d5e0494bcd8060d638cecdb3f15820422be6ba0d8e39ab67373aa897d6455f007b5356b07f888ab00356b31b4af278b1973c28d6fdebe2d709f79367824cf1b6f7f528644f38234bc186e9cd32b2ba4e4beef3f4c18cb37fae075ba4c0a7ecf1b9c464cb797f69a65cc4a6dbadc963e2d5460c5cc87a2ec8872e7654ad5ef3e897bc2454c37707efd8186b9cfe1afd1f37660f395c3e06483fabdff44f8d9cb9e0a14f27225a57fc3dcea64a47e1297620bc74c85389772e2ffc2617c97796611134abea8b45281a7a86bfa416081b8270f3a648bf4002e1fde5fb88151594a4945c6bb1dacf7349b69c4f0172a71fdffa1cbda848a9f37d0ae4a4df4b558e9437120ec0d86de96914d25b0a17c65ad993285fda75c18dcb9f48a2a31f929dfbb66a1843fd45b0a28fe4b6b139288b5405e5c3eeb725f74773f1f69f904f97c366e1befe7cb1ddce0ada565ee596b17fa0d39704a7ad67694d661e6560e3c9a23d166f835ab6cf0fc3b57bd083b419d20eae134329216d01cc3c1e84dc80ceec2d8bb71279678fb6ed3a6df0ca7587656171d39df37911a0f6a68f728d7761e7343b07e65fa8e358210d1efe7bb4fa9c97a3c4e14e49ff4489f0158e9d102e0ba323c756e25e807c7177e500a8cf372397e0c324241f67c30e0f18e2c6c422828f0cf25440e870f29a6cb057cc122ab715c2c448d79df5ea5b4ee69b616e73a3b9bf3c0684d8ea39bf3598bbcb09b47d6dc6ce57503ae091e885ee6f1bbf41511a1549aeea0c0b43472eac12b747ddd15e4096678c95adeb75f17b4d3da2be144ebf02a6db958d3d30a0b674842a9d18337714c080e0caea5ef92e7d75253e875ffa2f54951883a0381b2a0fbd8125e588e713edccf61e063a7c4d4225e2c48535556e82cba3e160688f575987554256185662a50e6c3e89be70a1e03dcc3c7f5a99d622c626c4e337e063b23547c5add6382fd9730318815f7ca1df9668a6b4510c6f3e60b7f04c0920dbc357f102f351af808fc10117179af7cc925f9ca7ceefcc4596ab2bff4fdb799c070dc3e369f88e465e825720a09e6a510fd558cc1b5854f9f6933f9a33b901993e7c9ae4a4602e878f900c071a35d55d6223516ac5a209b159ac88555b18983a04772741b254c05e08eeecedf93932b6b1385bec723dca0271270fdf5487b4f2edf45d82b820fc674b50df028821d58001ca12ced42a4247ed3e6a49efbcaa034633dffed1afbfc4952612d422f8eace39a25b8cec4f913b01337da8adeaf13d766aa146ca6af94425b8b2eb65625f1ee7991f18a947d744df66dc2a496404df9786ff3bdd42e19e7dd03d9002594645d4a5fee9f2c435bb7a803202ec46cb5d3593a04ab552644f986fddb9cc8827b5b84416dd208f18c1f9f750c8045208f89717e6f21930c35a490fccdcf5e65afc197e6fbb2795007495f765af41bdbd58dcb4dfe563bf2d46384092741433ce90265e9aa687c8278569ee107888921ae606216a7502b6753de569044b635a318b00c8a9b9c0cf4714aee16fdf8865e98a82c3530302350202da0f2cea3aa36e40645c67f13c775d02fc243b08c1cdca814b1b7e802caaf899a8181f0c2275ab091f05853118e6f95eae9131662b4194fd7581802ceb2ce608c7a6d1692e9f564e6b2928b585897da02fbb45f01c1628c3a31236375c205c97c5c031c68932828244bcb5768bc76246238653edc82d7355f365dbd462e9d8137870ae484d68941d73186835700ac0f71b4c513e124bdf713d0d967cf576e1cdd06635ea867503e9265344564ca316f6206fc4a004d65a1d2151341d815fc4d9e7a90ff6fece6f9cff356b8446702e5ba6f030ee8d450f81e827519df83758b7567b053813706ebd4592d92964defc0be911684416dcf63888c4ac03a24f0595a70602007df2b6f96fdb9f6e6b572f08a6199960a34c4c9cbcff311c516b0eec92f82b553ea72b2cb49c764432366c5246207d7a24caafaf8036474785d944f24d9b8f3a9f5e085625c16df26aa52f573fd78635e0d3924432b8abe0e681f0b8f0fecdde21f1962a8db5e11a619e6849c6300a11732335c8c624bb97263b9c077c466a76d6a2ebbcf84ee2b8240424e956e6294c233e961a78246f2290795ee6bfde27c6a0716ac71a4c164fc4cccbb134ac807f4e8b549b60258f11a93e3184c66dffd6f95b1c2eb3103b36e1b70b4f5a29abfc4dca2ba5209f7010e6aabfb6cb74a9fd66a4fab7d60f04822d110952bea743098a1c68f5c52c94e26a2829351ba5fe5e3a71c90fb6f87fc3a8a2c3ab8d1cb553ce2b5b93ae4fc1031d88ad6749389dbd9461dc62eb57a5c8e488f078cab370b3e7599d214e1f1188fab76441bb5a6bd0c45655b07829e00806ccfde3d3ad7b179088e88b2988c470377cb809666cb1c0e94f23f690aab9e8584384eced3bf79fabec82d1460c461db55a380061e53c3c872e3c54ce4b55c47e2f9a4a98adac85c87ba0513e787bddd50a1cec80385f47db897d0143a0e9e4bc1e197ea1f5ce43dcc9350dd95073626021649181667319b1d10da948259c1ae91b74651b1a4bb7f46ca10f848ef4ae10b9ca73cff861f954e1d79ecd88d4f02ba791daf32cb2cc49462627c56c7c09f90eded9b8e481c98e8e059f590982e185711e5994d055f334848efa60fb15f1237d8cbb449d13b4223db84ad919c407733be444578a172b02a3f3c49a4ce59e003d4046e3cfeb84244616e2c417487657f6c34d63239e82adca8eee85242d92571c52a4e9e5bde90a57724866c8e73fc766755e130fcd650d25ebd0f5d1b71b53572027d518813646c709377dcc40784421bc7e30df5f510736ddbc8b1582dbadb321d7d627e83be3c0d1d612ac7ae68304614cb4066e302b6dcdbfb9ef81c066acc71a6d7fc3e04572f3c2b3ba6ad4f0c86b3ac18b87f64cf799d3ce03bcc2568512e0ab8591226ad019a95e773718b235931169e9448537fafc5fb32cbb75797a9e41a92ae3533da41d3073dbac40c6c4c013864963d054d31975b4e82b3c2fc705e4b794b75f5e40a3321aac21f7b82ebce6d4f089517e4dd2e8ea592aaaa232f2afc901778ddffd5bc9c3aecf02bf09800efe36d975a09d4bdc1f68f9a2ae812bdef35181d8f476ca45d6f4f7d6451ab7dfb19f498c1455eb108827cc04b864cdce86b0bd51c6d998c7389baa9ba443cffadb55cc689fe3f847469f454b2fb86377c89ca023b75ce745d67b1d8998aba70585413f78b4cc5bfb5ee71ca2533b0dc7b975c7478f4f546e5a73d7ea03fb89b446651f6fdcc85439def9c8203f38d8dd100dc81f14794c681f13c83ae1e0cfbb9e580b599e1b315821da551c12cf222359b931101eb4fc3ff09d01678382f94047777ec02c72a1f680f74e1c623b564179f95315a1627c61ab50f31447942c210f035cabcbff5037c10f5a42b172927cdf46e9ee3355ec9071bf495652440df5dc8bcdc0d3f62521364fa8c8119de338e38ff057f3b62ca4e5925a7f23ccdac0bf4954b65d83613b30fcf61b43c1c5fc6cd5437bb9dca0c42a5c2f3f40acb92548addbbff5baae23142e39aac8f49ab3cac6e9f0bea6c6cc5e9f15ad31f305d69b672f5dee363b6c6a041d6495fb4090eb433a49d02714b2c44626d408d88920c776dad47d6b205a40118f2b3134136edcc79b6636d5ffc1f61f721c41fba709ac6f5ecf55e235d77d91ff75fe03c895e37683ef2a6fe153f49cb0d810841bd639b7e95c7ddc64a62f826d78145a9d56c00b67b433104555a0fbdc4ee4cd6617dd01ff900d4b363a75582349995a84d7a69025b78bd598beaf08180c884493fc6613dc11d93fa5afbd3d34b2c0f095b710bfdf0b64e136a90ce2907f8ce1a179724750452b1d2be18d10ce7a4639a1925566a8a306f0c58be762f4ae3a00a8aaecf636c1b98cc58b1d5506d172335c7236c02babbd518471c1d330e8b458f398ea943c8a8dfa82d6254841b43e6dc1f9281d3023c4b88c126151da528f4ddb022034cf4e9fcb47acda904aef48d6971fe184d8a1be063258e5eaad337f013efeb499302b4a2f1d46614b6aa1c4a5637fa65c83062c3d281c429b2b981195194de712ff48bb766b304b114f04032e4bc55c010f689bd24acf29f76c71639e0ee3bbef7b348c874a145f791c1b77bdaa76159511040959a3455e3d83153a6916132fa1f9c3c2cd3dba88f41", 0xff9, 0x8}], 0x0, &(0x7f0000001940)) 2021/11/11 12:42:55 result hanged=false: [68468ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1687 #0 [68479ms] -> openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) #0 [68479ms] <- openat$vcsu=0xffffffffffffffff errno=22 cover=48 #0 [68480ms] -> pselect6(0x40, 0x200001c0, 0x0, 0x20000240, 0x0, 0x20000300) #0 [68480ms] <- pselect6=0xffffffffffffffff errno=9 cover=136 #0 [68480ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) #0 [68481ms] <- syz_init_net_socket$bt_l2cap=0xffffffffffffffff errno=94 cover=5656 #0 [68483ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) #0 [68484ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=5564 #0 [68485ms] -> syz_mount_image$vfat(0x200006c0, 0x20000700, 0x0, 0x1, 0x200018c0, 0x0, 0x20001940) syz_mount_image: size=0 segs=1 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 2973.952448] FAT-fs (loop0): invalid media value (0x28) [ 2973.953600] FAT-fs (loop0): Can't find a valid FAT filesystem syz_mount_image > mount error: 22 #0 [68496ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=28643 12:42:55 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x100000000, 0x400}, 0x0, &(0x7f0000000300)={0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{&(0x7f0000000840)="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", 0xff9, 0x8}], 0x0, &(0x7f0000001940)) 2021/11/11 12:42:55 result hanged=false: [68522ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1689 #0 [68532ms] -> openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) #0 [68533ms] <- openat$vcsu=0xffffffffffffffff errno=22 cover=48 #0 [68534ms] -> pselect6(0x40, 0x200001c0, 0x0, 0x20000240, 0x0, 0x20000300) #0 [68534ms] <- pselect6=0xffffffffffffffff errno=9 cover=136 #0 [68534ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) #0 [68535ms] <- syz_init_net_socket$bt_l2cap=0xffffffffffffffff errno=94 cover=5589 #0 [68537ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) #0 [68537ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=5607 #0 [68538ms] -> syz_mount_image$vfat(0x200006c0, 0x20000700, 0x0, 0x1, 0x200018c0, 0x0, 0x20001940) syz_mount_image: size=0 segs=1 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 2974.006875] FAT-fs (loop0): invalid media value (0x28) [ 2974.008124] FAT-fs (loop0): Can't find a valid FAT filesystem syz_mount_image > mount error: 22 #0 [68550ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=28345 2021/11/11 12:42:55 result hanged=false: 2021/11/11 12:42:55 added new input for call #3 syz_init_net_socket$bt_l2cap to corpus: openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x100000000, 0x400}, 0x0, &(0x7f0000000300)={0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{&(0x7f0000000840)="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", 0xff9, 0x8}], 0x0, &(0x7f0000001940)) 12:42:55 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x100000000, 0x400}, 0x0, &(0x7f0000000300)={0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{&(0x7f0000000840)="cbadb30edf6c9ae5d94915dcf02893c5977cc38efa6af6b4c8bb7e4dabd0671f1075c27cc73de9fbacacb352d618c0cd9236ba94414312b047814b4196aa827f7a2a8daad19869620560005618b2ae112b49432ca1ad18ca5bdb3ba14070a1baf5fbf1154ef7e686f325e2971bfbf2b7211a0329bd8ddadbf66e2f60f8e2140fd3b6964b1b702c77f49c0e981e490965965eccdaa06c6ab14514fc6b9c857e10d21b9d8493d31065b195c47695ee33922debcb9ccb1a6988da420f06594e861024e3a85d49fbbf8c14f491380c2d6c8bed775571c150bcbff3cc9b1a2020b1c1e2ca92660b16b7db99894e57b1e19e59bb054c58caf111ebf021795e89f80b78a4735523045972771d4d77c2457202e0d46c2e17d93572316577903c40e85f1f88c0980abeaaaf8f99ed80d8f2fb3d6b2c468ef2533c9cec70702005b9720d794d41e5d17ba44baef5390dab818b29ed25716c6b67ac5682316a3e05ef2841d58b5deb516022b8cb3f2ffb4167d11960158319b300c5cbaa9ec3b5b5f81f4d54ed3ee24c63c8039e8d0b01fbc0083509b65ed74692fa387155b39278754cfa63ac9cead26519a754649f5d3ebd1b676deef9e6c35c810c6538c1ebc99fd8715fe3daeb880b3cc48f91a83d84342d5b3b26254d7a0d73c68c5ee181548eb355ac89ebcde452aa5ba83c87ac19361625f702bb43d880988cc0f59dc8c81150ecb330dba457204fe647051d0701d096e49cc20aa2d0805ce9d3bf10477de91c3fe207cd5c637f45f8eb442c27beecf83bf8a27ce849626ddd30ecb9bc9d4e4e4df012fb5ad32f8b572d75d89558c3cc4871855cd528ec7d8191966e1211a8863cf59bd9804cd802922fcc46462f2d82eed9524fece6bc57d78086bd7ca611cef02ad6d800e1f0eac1785751158bceb8ece08ba8d3239075784b1fd94d97a54288b0334409a8defc5d3ed1560aaa2b245d25acefc98c7f7de3022f9f409eaf5fd55c68df0e35bb4207008a1b5907c591909379e603a916e617bafdc1083566483d2ff1bd7069ea39ebba286d79a09e9818ec0b55c56e50bc5ca1bc39f2499fb526f812a03fd6ab90fe3e56ba145db744e2199efc7770728ad7c08a1523604f56a6097f6b67ebcc3fe9fdc7504954ab55a72c595c3e1eb33c05ebb7e04747df9db91dc335e3f3601a4977ba3b106e7eeda708f55e5324c44177474eef361f50cf44ede5db7fd9825ef49edf0d305783ab671161caf059814b33f7a75c8386178da27699eb59aa906ce6716e07956fa14f3a1d7164cb541d8cd731e87757cffedb313a2171794ec8dc246e842d84ce23cf30ae22a0af7055357e8ea80f5bf9d36cf9e88398412aaf384823322be1a76fc9bfebe082920ffb87eda6c33fd0512712e67dd25c3366711984a5c5ffbcc93e9c52f48ec903036423ab406ebbe6eeec99fbc588f5272b87f711c1401a78b064072215f1f9639b57b8f636004284b43628a3c5f38a8583ac36196968c799588eab92cd2ecde5745f92cc47df49a5d80700023118274090c80fe4427263fa7d5e0494bcd8060d638cecdb3f15820422be6ba0d8e39ab67373aa897d6455f007b5356b07f888ab00356b31b4af278b1973c28d6fdebe2d709f79367824cf1b6f7f528644f38234bc186e9cd32b2ba4e4beef3f4c18cb37fae075ba4c0a7ecf1b9c464cb797f69a65cc4a6dbadc963e2d5460c5cc87a2ec8872e7654ad5ef3e897bc2454c37707efd8186b9cfe1afd1f37660f395c3e06483fabdff44f8d9cb9e0a14f27225a57fc3dcea64a47e1297620bc74c85389772e2ffc2617c97796611134abea8b45281a7a86bfa416081b8270f3a648bf4002e1fde5fb88151594a4945c6bb1dacf7349b69c4f0172a71fdffa1cbda848a9f37d0ae4a4df4b558e9437120ec0d86de96914d25b0a17c65ad993285fda75c18dcb9f48a2a31f929dfbb66a1843fd45b0a28fe4b6b139288b5405e5c3eeb725f74773f1f69f904f97c366e1befe7cb1ddce0ada565ee596b17fa0d39704a7ad67694d661e6560e3c9a23d166f835ab6cf0fc3b57bd083b419d20eae134329216d01cc3c1e84dc80ceec2d8bb71279678fb6ed3a6df0ca7587656171d39df37911a0f6a68f728d7761e7343b07e65fa8e358210d1efe7bb4fa9c97a3c4e14e49ff4489f0158e9d102e0ba323c756e25e807c7177e500a8cf372397e0c324241f67c30e0f18e2c6c422828f0cf25440e870f29a6cb057cc122ab715c2c448d79df5ea5b4ee69b616e73a3b9bf3c0684d8ea39bf3598bbcb09b47d6dc6ce57503ae091e885ee6f1bbf41511a1549aeea0c0b43472eac12b747ddd15e4096678c95adeb75f17b4d3da2be144ebf02a6db958d3d30a0b674842a9d18337714c080e0caea5ef92e7d75253e875ffa2f54951883a0381b2a0fbd8125e588e713edccf61e063a7c4d4225e2c48535556e82cba3e160688f575987554256185662a50e6c3e89be70a1e03dcc3c7f5a99d622c626c4e337e063b23547c5add6382fd9730318815f7ca1df9668a6b4510c6f3e60b7f04c0920dbc357f102f351af808fc10117179af7cc925f9ca7ceefcc4596ab2bff4fdb799c070dc3e369f88e465e825720a09e6a510fd558cc1b5854f9f6933f9a33b901993e7c9ae4a4602e878f900c071a35d55d6223516ac5a209b159ac88555b18983a04772741b254c05e08eeecedf93932b6b1385bec723dca0271270fdf5487b4f2edf45d82b820fc674b50df028821d58001ca12ced42a4247ed3e6a49efbcaa034633dffed1afbfc4952612d422f8eace39a25b8cec4f913b01337da8adeaf13d766aa146ca6af94425b8b2eb65625f1ee7991f18a947d744df66dc2a496404df9786ff3bdd42e19e7dd03d9002594645d4a5fee9f2c435bb7a803202ec46cb5d3593a04ab552644f986fddb9cc8827b5b84416dd208f18c1f9f750c8045208f89717e6f21930c35a490fccdcf5e65afc197e6fbb2795007495f765af41bdbd58dcb4dfe563bf2d46384092741433ce90265e9aa687c8278569ee107888921ae606216a7502b6753de569044b635a318b00c8a9b9c0cf4714aee16fdf8865e98a82c3530302350202da0f2cea3aa36e40645c67f13c775d02fc243b08c1cdca814b1b7e802caaf899a8181f0c2275ab091f05853118e6f95eae9131662b4194fd7581802ceb2ce608c7a6d1692e9f564e6b2928b585897da02fbb45f01c1628c3a31236375c205c97c5c031c68932828244bcb5768bc76246238653edc82d7355f365dbd462e9d8137870ae484d68941d73186835700ac0f71b4c513e124bdf713d0d967cf576e1cdd06635ea867503e9265344564ca316f6206fc4a004d65a1d2151341d815fc4d9e7a90ff6fece6f9cff356b8446702e5ba6f030ee8d450f81e827519df83758b7567b053813706ebd4592d92964defc0be911684416dcf63888c4ac03a24f0595a70602007df2b6f96fdb9f6e6b572f08a6199960a34c4c9cbcff311c516b0eec92f82b553ea72b2cb49c764432366c5246207d7a24caafaf8036474785d944f24d9b8f3a9f5e085625c16df26aa52f573fd78635e0d3924432b8abe0e681f0b8f0fecdde21f1962a8db5e11a619e6849c6300a11732335c8c624bb97263b9c077c466a76d6a2ebbcf84ee2b8240424e956e6294c233e961a78246f2290795ee6bfde27c6a0716ac71a4c164fc4cccbb134ac807f4e8b549b60258f11a93e3184c66dffd6f95b1c2eb3103b36e1b70b4f5a29abfc4dca2ba5209f7010e6aabfb6cb74a9fd66a4fab7d60f04822d110952bea743098a1c68f5c52c94e26a2829351ba5fe5e3a71c90fb6f87fc3a8a2c3ab8d1cb553ce2b5b93ae4fc1031d88ad6749389dbd9461dc62eb57a5c8e488f078cab370b3e7599d214e1f1188fab76441bb5a6bd0c45655b07829e00806ccfde3d3ad7b179088e88b2988c470377cb809666cb1c0e94f23f690aab9e8584384eced3bf79fabec82d1460c461db55a380061e53c3c872e3c54ce4b55c47e2f9a4a98adac85c87ba0513e787bddd50a1cec80385f47db897d0143a0e9e4bc1e197ea1f5ce43dcc9350dd95073626021649181667319b1d10da948259c1ae91b74651b1a4bb7f46ca10f848ef4ae10b9ca73cff861f954e1d79ecd88d4f02ba791daf32cb2cc49462627c56c7c09f90eded9b8e481c98e8e059f590982e185711e5994d055f334848efa60fb15f1237d8cbb449d13b4223db84ad919c407733be444578a172b02a3f3c49a4ce59e003d4046e3cfeb84244616e2c417487657f6c34d63239e82adca8eee85242d92571c52a4e9e5bde90a57724866c8e73fc766755e130fcd650d25ebd0f5d1b71b53572027d518813646c709377dcc40784421bc7e30df5f510736ddbc8b1582dbadb321d7d627e83be3c0d1d612ac7ae68304614cb4066e302b6dcdbfb9ef81c066acc71a6d7fc3e04572f3c2b3ba6ad4f0c86b3ac18b87f64cf799d3ce03bcc2568512e0ab8591226ad019a95e773718b235931169e9448537fafc5fb32cbb75797a9e41a92ae3533da41d3073dbac40c6c4c013864963d054d31975b4e82b3c2fc705e4b794b75f5e40a3321aac21f7b82ebce6d4f089517e4dd2e8ea592aaaa232f2afc901778ddffd5bc9c3aecf02bf09800efe36d975a09d4bdc1f68f9a2ae812bdef35181d8f476ca45d6f4f7d6451ab7dfb19f498c1455eb108827cc04b864cdce86b0bd51c6d998c7389baa9ba443cffadb55cc689fe3f847469f454b2fb86377c89ca023b75ce745d67b1d8998aba70585413f78b4cc5bfb5ee71ca2533b0dc7b975c7478f4f546e5a73d7ea03fb89b446651f6fdcc85439def9c8203f38d8dd100dc81f14794c681f13c83ae1e0cfbb9e580b599e1b315821da551c12cf222359b931101eb4fc3ff09d01678382f94047777ec02c72a1f680f74e1c623b564179f95315a1627c61ab50f31447942c210f035cabcbff5037c10f5a42b172927cdf46e9ee3355ec9071bf495652440df5dc8bcdc0d3f62521364fa8c8119de338e38ff057f3b62ca4e5925a7f23ccdac0bf4954b65d83613b30fcf61b43c1c5fc6cd5437bb9dca0c42a5c2f3f40acb92548addbbff5baae23142e39aac8f49ab3cac6e9f0bea6c6cc5e9f15ad31f305d69b672f5dee363b6c6a041d6495fb4090eb433a49d02714b2c44626d408d88920c776dad47d6b205a40118f2b3134136edcc79b6636d5ffc1f61f721c41fba709ac6f5ecf55e235d77d91ff75fe03c895e37683ef2a6fe153f49cb0d810841bd639b7e95c7ddc64a62f826d78145a9d56c00b67b433104555a0fbdc4ee4cd6617dd01ff900d4b363a75582349995a84d7a69025b78bd598beaf08180c884493fc6613dc11d93fa5afbd3d34b2c0f095b710bfdf0b64e136a90ce2907f8ce1a179724750452b1d2be18d10ce7a4639a1925566a8a306f0c58be762f4ae3a00a8aaecf636c1b98cc58b1d5506d172335c7236c02babbd518471c1d330e8b458f398ea943c8a8dfa82d6254841b43e6dc1f9281d3023c4b88c126151da528f4ddb022034cf4e9fcb47acda904aef48d6971fe184d8a1be063258e5eaad337f013efeb499302b4a2f1d46614b6aa1c4a5637fa65c83062c3d281c429b2b981195194de712ff48bb766b304b114f04032e4bc55c010f689bd24acf29f76c71639e0ee3bbef7b348c874a145f791c1b77bdaa76159511040959a3455e3d83153a6916132fa1f9c3c2cd3dba88f41", 0xff9, 0x8}], 0x0, &(0x7f0000001940)) [68614ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:42:55 #0: triaging type=7 2021/11/11 12:42:55 triaging input for call #2 syz_init_net_socket$bt_l2cap (new signal=5) spawned worker pid 1691 #0 [68623ms] -> openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) #0 [68623ms] <- openat$vcsu=0xffffffffffffffff errno=22 cover=48 #0 [68624ms] -> pselect6(0x40, 0x200001c0, 0x0, 0x20000240, 0x0, 0x20000300) #0 [68624ms] <- pselect6=0xffffffffffffffff errno=9 cover=136 #0 [68625ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) #0 [68625ms] <- syz_init_net_socket$bt_l2cap=0xffffffffffffffff errno=94 cover=5576 #0 [68626ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) #0 [68627ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=5596 #0 [68628ms] -> syz_mount_image$vfat(0x200006c0, 0x20000700, 0x0, 0x1, 0x200018c0, 0x0, 0x20001940) [ 2974.095045] FAT-fs (loop0): invalid media value (0x28) [ 2974.096345] FAT-fs (loop0): Can't find a valid FAT filesystem syz_mount_image: size=0 segs=1 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' syz_mount_image > mount error: 22 #0 [68638ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=27590 12:42:55 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x100000000, 0x400}, 0x0, &(0x7f0000000300)={0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{&(0x7f0000000840)="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", 0xff9, 0x8}], 0x0, &(0x7f0000001940)) 2021/11/11 12:42:55 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [68666ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1693 #0 [68677ms] -> openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) #0 [68680ms] <- openat$vcsu=0xffffffffffffffff errno=22 cover=48 #0 [68681ms] -> pselect6(0x40, 0x200001c0, 0x0, 0x20000240, 0x0, 0x20000300) #0 [68682ms] <- pselect6=0xffffffffffffffff errno=9 cover=136 #0 [68682ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) #0 [68683ms] <- syz_init_net_socket$bt_l2cap=0xffffffffffffffff errno=94 cover=5623 #0 [68684ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) #0 [68684ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=5587 #0 [68685ms] -> syz_mount_image$vfat(0x200006c0, 0x20000700, 0x0, 0x1, 0x200018c0, 0x0, 0x20001940) syz_mount_image: size=0 segs=1 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 2974.154865] FAT-fs (loop0): invalid media value (0x28) [ 2974.156456] FAT-fs (loop0): Can't find a valid FAT filesystem syz_mount_image > mount error: 22 #0 [68702ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=28725 12:42:55 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x100000000, 0x400}, 0x0, &(0x7f0000000300)={0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{&(0x7f0000000840)="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", 0xff9, 0x8}], 0x0, &(0x7f0000001940)) 2021/11/11 12:42:55 result hanged=false: [68728ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1695 #0 [68737ms] -> openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) #0 [68737ms] <- openat$vcsu=0xffffffffffffffff errno=22 cover=48 #0 [68738ms] -> pselect6(0x40, 0x200001c0, 0x0, 0x20000240, 0x0, 0x20000300) #0 [68738ms] <- pselect6=0xffffffffffffffff errno=9 cover=136 #0 [68738ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) #0 [68739ms] <- syz_init_net_socket$bt_l2cap=0xffffffffffffffff errno=94 cover=5540 #0 [68741ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) #0 [68742ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=5669 #0 [68743ms] -> syz_mount_image$vfat(0x200006c0, 0x20000700, 0x0, 0x1, 0x200018c0, 0x0, 0x20001940) syz_mount_image: size=0 segs=1 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 2974.211119] FAT-fs (loop0): invalid media value (0x28) [ 2974.212412] FAT-fs (loop0): Can't find a valid FAT filesystem syz_mount_image > mount error: 22 #0 [68755ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=27723 2021/11/11 12:42:55 result hanged=false: 2021/11/11 12:42:55 added new input for call #2 syz_init_net_socket$bt_l2cap to corpus: openat$vcsu(0xffffffffffffff9c, 0x0, 0x400080, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x100000000, 0x400}, 0x0, &(0x7f0000000300)={0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{&(0x7f0000000840)="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", 0xff9, 0x8}], 0x0, &(0x7f0000001940)) 12:42:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [68798ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:42:55 poll: candidates=8 inputs=0 signal=0 spawned worker pid 1697 #0 [68807ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [68808ms] <- socket$inet6_tcp=0x3 errno=14 cover=1746 #0 [68809ms] -> setsockopt$inet6_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x200000c0, 0x4) #0 [68809ms] <- setsockopt$inet6_tcp_TCP_REPAIR=0x0 errno=14 cover=228 #0 [68809ms] -> setsockopt$sock_int(0x3, 0x1, 0x8, 0x20000080, 0x4) #0 [68809ms] <- setsockopt$sock_int=0x0 errno=14 cover=136 #0 [68810ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [68810ms] <- connect$inet6=0x0 errno=14 cover=1131 enabling collider #0 [68811ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [68812ms] <- socket$inet6_tcp=0x3 errno=14 cover=1737 #0 [68813ms] -> setsockopt$inet6_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x200000c0, 0x4) #0 [68813ms] <- setsockopt$inet6_tcp_TCP_REPAIR=0x0 errno=14 cover=185 pthread_create failed (errno 11) 12:42:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [68871ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:42:55 result hanged=false: 2021/11/11 12:42:55 #0: triaging type=7 2021/11/11 12:42:55 triaging input for call #3 connect$inet6 (new signal=9) spawned worker pid 1799 #0 [68881ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [68884ms] <- socket$inet6_tcp=0x3 errno=14 cover=1767 #0 [68885ms] -> setsockopt$inet6_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x200000c0, 0x4) #0 [68885ms] <- setsockopt$inet6_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [68885ms] -> setsockopt$sock_int(0x3, 0x1, 0x8, 0x20000080, 0x4) #0 [68885ms] <- setsockopt$sock_int=0x0 errno=14 cover=136 #0 [68886ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [68886ms] <- connect$inet6=0x0 errno=14 cover=1049 12:42:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 2021/11/11 12:42:55 result hanged=false: [68909ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1801 #0 [68918ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [68919ms] <- socket$inet6_tcp=0x3 errno=14 cover=1724 #0 [68920ms] -> setsockopt$inet6_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x200000c0, 0x4) #0 [68921ms] <- setsockopt$inet6_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [68921ms] -> setsockopt$sock_int(0x3, 0x1, 0x8, 0x20000080, 0x4) #0 [68921ms] <- setsockopt$sock_int=0x0 errno=14 cover=136 #0 [68922ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [68922ms] <- connect$inet6=0x0 errno=14 cover=1116 2021/11/11 12:42:55 result hanged=false: 12:42:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [68944ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1803 #0 [68952ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [68953ms] <- socket$inet6_tcp=0x3 errno=14 cover=1746 #0 [68958ms] -> setsockopt$inet6_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x200000c0, 0x4) #0 [68958ms] <- setsockopt$inet6_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [68959ms] -> setsockopt$sock_int(0x3, 0x1, 0x8, 0x20000080, 0x4) #0 [68959ms] <- setsockopt$sock_int=0x0 errno=14 cover=140 #0 [68960ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [68960ms] <- connect$inet6=0x0 errno=14 cover=1049 2021/11/11 12:42:55 result hanged=false: 2021/11/11 12:42:55 added new input for call #3 connect$inet6 to corpus: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 12:42:55 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x3fc7, &(0x7f00000000c0), &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) [68989ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1805 #0 [68999ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [69000ms] <- perf_event_open=0x3 errno=14 cover=6484 #0 [69001ms] -> mmap(0x20ffc000, 0x2000, 0x0, 0x13, 0x3, 0x0) #0 [69001ms] <- mmap=0x20ffc000 errno=14 cover=1997 #0 [69003ms] -> syz_io_uring_setup(0x3fc7, 0x200000c0, 0x20fec000, 0x20ffb000, 0x20000140, 0x20000180) #0 [69007ms] <- syz_io_uring_setup=0x4 errno=14 cover=14733 enabling collider #0 [69017ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [69018ms] <- perf_event_open=0x3 errno=14 cover=6333 #0 [69018ms] -> mmap(0x20ffc000, 0x2000, 0x0, 0x13, 0x3, 0x0) #0 [69019ms] <- mmap=0x20ffc000 errno=14 cover=1836 pthread_create failed (errno 11) 12:42:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000017c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r1, 0x70d, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) 2021/11/11 12:42:56 result hanged=false: [69087ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 1907 #0 [69098ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [69100ms] <- perf_event_open=0x3 errno=14 cover=6679 #0 [69101ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [69103ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=18471 #0 [69104ms] -> syz_genetlink_get_family_id$ieee802154(0x200017c0, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [69105ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=12161 #0 [69106ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0x5, 0x20001880, 0x0) #0 [69107ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEVKEY=0x14 errno=14 cover=5235 enabling collider #0 [69117ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [69119ms] <- perf_event_open=0x3 errno=14 cover=7538 #0 [69120ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [69124ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=15333 pthread_create failed (errno 11) 2021/11/11 12:42:56 result hanged=false: 2021/11/11 12:42:56 #0: triaging type=7 2021/11/11 12:42:56 triaging input for call #3 sendmsg$IEEE802154_LLSEC_LIST_DEVKEY (new signal=7) 12:42:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000017c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r1, 0x70d, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) [69193ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2009 #0 [69203ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [69205ms] <- perf_event_open=0x3 errno=14 cover=6582 #0 [69207ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [69209ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=18776 #0 [69211ms] -> syz_genetlink_get_family_id$ieee802154(0x200017c0, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [69212ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=12219 #0 [69213ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0x5, 0x20001880, 0x0) #0 [69214ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEVKEY=0x14 errno=14 cover=5294 12:42:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000017c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r1, 0x70d, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) 2021/11/11 12:42:56 result hanged=false: [69244ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2011 #0 [69252ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [69254ms] <- perf_event_open=0x3 errno=14 cover=7081 #0 [69255ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [69256ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=18563 #0 [69257ms] -> syz_genetlink_get_family_id$ieee802154(0x200017c0, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [69258ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=12036 #0 [69259ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0x5, 0x20001880, 0x0) #0 [69260ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEVKEY=0x14 errno=14 cover=5185 12:42:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000017c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r1, 0x70d, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) 2021/11/11 12:42:56 result hanged=false: [69294ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2013 #0 [69303ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [69304ms] <- perf_event_open=0x3 errno=14 cover=6932 #0 [69305ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [69306ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=18548 #0 [69308ms] -> syz_genetlink_get_family_id$ieee802154(0x200017c0, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [69309ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=12021 #0 [69310ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0x5, 0x20001880, 0x0) #0 [69310ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEVKEY=0x14 errno=14 cover=5115 2021/11/11 12:42:56 result hanged=false: 2021/11/11 12:42:56 added new input for call #3 sendmsg$IEEE802154_LLSEC_LIST_DEVKEY to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000017c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r1, 0x70d, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) 12:42:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000017c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r1, 0x70d, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) [69345ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:42:56 #0: triaging type=7 2021/11/11 12:42:56 triaging input for call #2 syz_genetlink_get_family_id$ieee802154 (new signal=2) spawned worker pid 2015 #0 [69354ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [69355ms] <- perf_event_open=0x3 errno=14 cover=6779 #0 [69360ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [69361ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=19149 #0 [69364ms] -> syz_genetlink_get_family_id$ieee802154(0x200017c0, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [69365ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=11930 #0 [69367ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0x5, 0x20001880, 0x0) #0 [69368ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEVKEY=0x14 errno=14 cover=5157 12:42:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000017c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r1, 0x70d, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) 2021/11/11 12:42:56 result hanged=false: [69400ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2017 #0 [69409ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [69411ms] <- perf_event_open=0x3 errno=14 cover=10852 #0 [69412ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [69414ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=19041 #0 [69415ms] -> syz_genetlink_get_family_id$ieee802154(0x200017c0, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [69416ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=11997 #0 [69417ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0x5, 0x20001880, 0x0) #0 [69418ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEVKEY=0x14 errno=14 cover=5152 12:42:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000017c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r1, 0x70d, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) 2021/11/11 12:42:56 result hanged=false: [69449ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2019 #0 [69463ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [69464ms] <- perf_event_open=0x3 errno=14 cover=6554 #0 [69466ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [69467ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=19625 #0 [69470ms] -> syz_genetlink_get_family_id$ieee802154(0x200017c0, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [69471ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=12176 #0 [69472ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0x5, 0x20001880, 0x0) #0 [69473ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEVKEY=0x14 errno=14 cover=5273 2021/11/11 12:42:56 result hanged=false: 2021/11/11 12:42:56 added new input for call #2 syz_genetlink_get_family_id$ieee802154 to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000017c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r1, 0x70d, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) 2021/11/11 12:42:56 #0: triaging type=7 2021/11/11 12:42:56 triaging input for call #1 syz_init_net_socket$nl_generic (new signal=2) 12:42:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000017c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r1, 0x70d, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) [69518ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2021 #0 [69529ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [69530ms] <- perf_event_open=0x3 errno=14 cover=6532 #0 [69531ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [69532ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=19724 #0 [69534ms] -> syz_genetlink_get_family_id$ieee802154(0x200017c0, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [69535ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=12092 #0 [69537ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0x5, 0x20001880, 0x0) #0 [69537ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEVKEY=0x14 errno=14 cover=5126 12:42:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000017c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r1, 0x70d, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) 2021/11/11 12:42:56 result hanged=false: [69575ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2023 #0 [69585ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [69585ms] <- perf_event_open=0x3 errno=14 cover=6650 #0 [69586ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [69587ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=18727 #0 [69589ms] -> syz_genetlink_get_family_id$ieee802154(0x200017c0, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [69590ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=12024 #0 [69591ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0x5, 0x20001880, 0x0) #0 [69591ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEVKEY=0x14 errno=14 cover=5133 12:42:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000017c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r1, 0x70d, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) 2021/11/11 12:42:56 result hanged=false: [69625ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2025 #0 [69635ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [69635ms] <- perf_event_open=0x3 errno=14 cover=6606 #0 [69637ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [69638ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=18493 #0 [69642ms] -> syz_genetlink_get_family_id$ieee802154(0x200017c0, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [69643ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=12226 #0 [69649ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0x5, 0x20001880, 0x0) #0 [69649ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEVKEY=0x14 errno=14 cover=5308 2021/11/11 12:42:56 result hanged=false: 2021/11/11 12:42:56 added new input for call #1 syz_init_net_socket$nl_generic to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000017c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r1, 0x70d, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) 12:42:56 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) sendmsg$TIPC_NL_MON_SET(r0, 0x0, 0x0) socketpair(0x8, 0x0, 0x0, &(0x7f0000000240)) open_tree(0xffffffffffffff9c, 0x0, 0x80900) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x80000) execveat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x0, &(0x7f0000000c80)=[&(0x7f0000000b00)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000b40)='#z\x7f@{./[\x00', 0x0, &(0x7f0000000bc0)='\\\x00', &(0x7f0000000c00)='gcm(aes)\x00'], 0x1000) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) [69707ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2027 #0 [69716ms] -> openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) #0 [69716ms] <- openat=0xffffffffffffffff errno=14 cover=613 #0 [69717ms] -> sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) #0 [69717ms] <- sendmsg$TIPC_NL_MON_SET=0xffffffffffffffff errno=9 cover=52 #0 [69717ms] -> socketpair(0x8, 0x0, 0x0, 0x20000240) #0 [69734ms] <- socketpair=0xffffffffffffffff errno=97 cover=20246 #0 [69734ms] -> open_tree(0xffffffffffffff9c, 0x0, 0x80900) #0 [69735ms] <- open_tree=0xffffffffffffffff errno=14 cover=662 #0 [69735ms] -> sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x80000) #0 [69735ms] <- sendmsg$TIPC_NL_MON_GET=0xffffffffffffffff errno=9 cover=52 #0 [69735ms] -> execveat(0xffffffffffffffff, 0x20000940, 0x0, 0x20000c80, 0x1000) #0 [69736ms] <- execveat=0xffffffffffffffff errno=9 cover=6236 #0 [69737ms] -> sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) #0 [69737ms] <- sendmsg$TIPC_NL_BEARER_SET=0xffffffffffffffff errno=9 cover=52 enabling collider #0 [69737ms] -> openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) #0 [69737ms] <- openat=0xffffffffffffffff errno=14 cover=626 #0 [69738ms] -> sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) #0 [69738ms] <- sendmsg$TIPC_NL_MON_SET=0xffffffffffffffff errno=9 cover=52 pthread_create failed (errno 11) 12:42:56 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) sendmsg$TIPC_NL_MON_SET(r0, 0x0, 0x0) socketpair(0x8, 0x0, 0x0, &(0x7f0000000240)) open_tree(0xffffffffffffff9c, 0x0, 0x80900) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x80000) execveat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x0, &(0x7f0000000c80)=[&(0x7f0000000b00)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000b40)='#z\x7f@{./[\x00', 0x0, &(0x7f0000000bc0)='\\\x00', &(0x7f0000000c00)='gcm(aes)\x00'], 0x1000) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) 2021/11/11 12:42:56 result hanged=false: 2021/11/11 12:42:56 #0: triaging type=7 2021/11/11 12:42:56 triaging input for call #5 execveat (new signal=2) [69791ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2129 #0 [69800ms] -> openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) #0 [69803ms] <- openat=0xffffffffffffffff errno=14 cover=625 #0 [69803ms] -> sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) #0 [69803ms] <- sendmsg$TIPC_NL_MON_SET=0xffffffffffffffff errno=9 cover=52 #0 [69804ms] -> socketpair(0x8, 0x0, 0x0, 0x20000240) #0 [69822ms] <- socketpair=0xffffffffffffffff errno=97 cover=2432 #0 [69822ms] -> open_tree(0xffffffffffffff9c, 0x0, 0x80900) #0 [69823ms] <- open_tree=0xffffffffffffffff errno=14 cover=642 #0 [69823ms] -> sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x80000) #0 [69823ms] <- sendmsg$TIPC_NL_MON_GET=0xffffffffffffffff errno=9 cover=52 #0 [69824ms] -> execveat(0xffffffffffffffff, 0x20000940, 0x0, 0x20000c80, 0x1000) #0 [69825ms] <- execveat=0xffffffffffffffff errno=9 cover=6419 #0 [69826ms] -> sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) #0 [69826ms] <- sendmsg$TIPC_NL_BEARER_SET=0xffffffffffffffff errno=9 cover=52 12:42:56 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) sendmsg$TIPC_NL_MON_SET(r0, 0x0, 0x0) socketpair(0x8, 0x0, 0x0, &(0x7f0000000240)) open_tree(0xffffffffffffff9c, 0x0, 0x80900) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x80000) execveat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x0, &(0x7f0000000c80)=[&(0x7f0000000b00)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000b40)='#z\x7f@{./[\x00', 0x0, &(0x7f0000000bc0)='\\\x00', &(0x7f0000000c00)='gcm(aes)\x00'], 0x1000) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) [69845ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:42:56 result hanged=false: spawned worker pid 2131 #0 [69855ms] -> openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) #0 [69856ms] <- openat=0xffffffffffffffff errno=14 cover=613 #0 [69857ms] -> sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) #0 [69857ms] <- sendmsg$TIPC_NL_MON_SET=0xffffffffffffffff errno=9 cover=52 #0 [69858ms] -> socketpair(0x8, 0x0, 0x0, 0x20000240) #0 [69874ms] <- socketpair=0xffffffffffffffff errno=97 cover=2352 #0 [69874ms] -> open_tree(0xffffffffffffff9c, 0x0, 0x80900) #0 [69875ms] <- open_tree=0xffffffffffffffff errno=14 cover=652 #0 [69875ms] -> sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x80000) #0 [69876ms] <- sendmsg$TIPC_NL_MON_GET=0xffffffffffffffff errno=9 cover=52 #0 [69876ms] -> execveat(0xffffffffffffffff, 0x20000940, 0x0, 0x20000c80, 0x1000) #0 [69878ms] <- execveat=0xffffffffffffffff errno=9 cover=6627 #0 [69879ms] -> sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) #0 [69879ms] <- sendmsg$TIPC_NL_BEARER_SET=0xffffffffffffffff errno=9 cover=52 12:42:56 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) sendmsg$TIPC_NL_MON_SET(r0, 0x0, 0x0) socketpair(0x8, 0x0, 0x0, &(0x7f0000000240)) open_tree(0xffffffffffffff9c, 0x0, 0x80900) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x80000) execveat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x0, &(0x7f0000000c80)=[&(0x7f0000000b00)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000b40)='#z\x7f@{./[\x00', 0x0, &(0x7f0000000bc0)='\\\x00', &(0x7f0000000c00)='gcm(aes)\x00'], 0x1000) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) 2021/11/11 12:42:56 result hanged=false: [69899ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2133 #0 [69910ms] -> openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) #0 [69910ms] <- openat=0xffffffffffffffff errno=14 cover=613 #0 [69911ms] -> sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) #0 [69911ms] <- sendmsg$TIPC_NL_MON_SET=0xffffffffffffffff errno=9 cover=52 #0 [69911ms] -> socketpair(0x8, 0x0, 0x0, 0x20000240) #0 [69927ms] <- socketpair=0xffffffffffffffff errno=97 cover=2321 #0 [69928ms] -> open_tree(0xffffffffffffff9c, 0x0, 0x80900) #0 [69928ms] <- open_tree=0xffffffffffffffff errno=14 cover=641 #0 [69928ms] -> sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x80000) #0 [69928ms] <- sendmsg$TIPC_NL_MON_GET=0xffffffffffffffff errno=9 cover=52 #0 [69928ms] -> execveat(0xffffffffffffffff, 0x20000940, 0x0, 0x20000c80, 0x1000) #0 [69929ms] <- execveat=0xffffffffffffffff errno=9 cover=6273 #0 [69930ms] -> sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) #0 [69931ms] <- sendmsg$TIPC_NL_BEARER_SET=0xffffffffffffffff errno=9 cover=52 2021/11/11 12:42:56 result hanged=false: 2021/11/11 12:42:56 added new input for call #5 execveat to corpus: r0 = openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) sendmsg$TIPC_NL_MON_SET(r0, 0x0, 0x0) socketpair(0x8, 0x0, 0x0, &(0x7f0000000240)) open_tree(0xffffffffffffff9c, 0x0, 0x80900) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x80000) execveat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x0, &(0x7f0000000c80)=[&(0x7f0000000b00)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000b40)='#z\x7f@{./[\x00', 0x0, &(0x7f0000000bc0)='\\\x00', &(0x7f0000000c00)='gcm(aes)\x00'], 0x1000) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) 12:42:56 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) sendmsg$TIPC_NL_MON_SET(r0, 0x0, 0x0) socketpair(0x8, 0x0, 0x0, &(0x7f0000000240)) open_tree(0xffffffffffffff9c, 0x0, 0x80900) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x80000) execveat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x0, &(0x7f0000000c80)=[&(0x7f0000000b00)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000b40)='#z\x7f@{./[\x00', 0x0, &(0x7f0000000bc0)='\\\x00', &(0x7f0000000c00)='gcm(aes)\x00'], 0x1000) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) [69963ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:42:56 #0: triaging type=7 2021/11/11 12:42:56 triaging input for call #3 open_tree (new signal=5) spawned worker pid 2135 #0 [69971ms] -> openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) #0 [69971ms] <- openat=0xffffffffffffffff errno=14 cover=614 #0 [69972ms] -> sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) #0 [69972ms] <- sendmsg$TIPC_NL_MON_SET=0xffffffffffffffff errno=9 cover=52 #0 [69972ms] -> socketpair(0x8, 0x0, 0x0, 0x20000240) #0 [69990ms] <- socketpair=0xffffffffffffffff errno=97 cover=2329 #0 [69991ms] -> open_tree(0xffffffffffffff9c, 0x0, 0x80900) #0 [69991ms] <- open_tree=0xffffffffffffffff errno=14 cover=641 #0 [69992ms] -> sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x80000) #0 [69992ms] <- sendmsg$TIPC_NL_MON_GET=0xffffffffffffffff errno=9 cover=52 #0 [69992ms] -> execveat(0xffffffffffffffff, 0x20000940, 0x0, 0x20000c80, 0x1000) #0 [69994ms] <- execveat=0xffffffffffffffff errno=9 cover=6397 #0 [69995ms] -> sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) #0 [69995ms] <- sendmsg$TIPC_NL_BEARER_SET=0xffffffffffffffff errno=9 cover=52 12:42:56 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) sendmsg$TIPC_NL_MON_SET(r0, 0x0, 0x0) socketpair(0x8, 0x0, 0x0, &(0x7f0000000240)) open_tree(0xffffffffffffff9c, 0x0, 0x80900) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x80000) execveat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x0, &(0x7f0000000c80)=[&(0x7f0000000b00)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000b40)='#z\x7f@{./[\x00', 0x0, &(0x7f0000000bc0)='\\\x00', &(0x7f0000000c00)='gcm(aes)\x00'], 0x1000) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) 2021/11/11 12:42:56 result hanged=false: [70015ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2137 #0 [70024ms] -> openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) #0 [70025ms] <- openat=0xffffffffffffffff errno=14 cover=613 #0 [70025ms] -> sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) #0 [70025ms] <- sendmsg$TIPC_NL_MON_SET=0xffffffffffffffff errno=9 cover=52 #0 [70025ms] -> socketpair(0x8, 0x0, 0x0, 0x20000240) #0 [70040ms] <- socketpair=0xffffffffffffffff errno=97 cover=2539 #0 [70041ms] -> open_tree(0xffffffffffffff9c, 0x0, 0x80900) #0 [70042ms] <- open_tree=0xffffffffffffffff errno=14 cover=652 #0 [70043ms] -> sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x80000) #0 [70043ms] <- sendmsg$TIPC_NL_MON_GET=0xffffffffffffffff errno=9 cover=52 #0 [70043ms] -> execveat(0xffffffffffffffff, 0x20000940, 0x0, 0x20000c80, 0x1000) #0 [70046ms] <- execveat=0xffffffffffffffff errno=9 cover=6389 #0 [70047ms] -> sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) #0 [70047ms] <- sendmsg$TIPC_NL_BEARER_SET=0xffffffffffffffff errno=9 cover=52 12:42:57 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) sendmsg$TIPC_NL_MON_SET(r0, 0x0, 0x0) socketpair(0x8, 0x0, 0x0, &(0x7f0000000240)) open_tree(0xffffffffffffff9c, 0x0, 0x80900) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x80000) execveat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x0, &(0x7f0000000c80)=[&(0x7f0000000b00)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000b40)='#z\x7f@{./[\x00', 0x0, &(0x7f0000000bc0)='\\\x00', &(0x7f0000000c00)='gcm(aes)\x00'], 0x1000) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) 2021/11/11 12:42:57 result hanged=false: [70067ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2139 #0 [70076ms] -> openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) #0 [70076ms] <- openat=0xffffffffffffffff errno=14 cover=625 #0 [70076ms] -> sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) #0 [70076ms] <- sendmsg$TIPC_NL_MON_SET=0xffffffffffffffff errno=9 cover=52 #0 [70077ms] -> socketpair(0x8, 0x0, 0x0, 0x20000240) #0 [70095ms] <- socketpair=0xffffffffffffffff errno=97 cover=2410 #0 [70095ms] -> open_tree(0xffffffffffffff9c, 0x0, 0x80900) #0 [70095ms] <- open_tree=0xffffffffffffffff errno=14 cover=641 #0 [70095ms] -> sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x80000) #0 [70095ms] <- sendmsg$TIPC_NL_MON_GET=0xffffffffffffffff errno=9 cover=52 #0 [70095ms] -> execveat(0xffffffffffffffff, 0x20000940, 0x0, 0x20000c80, 0x1000) #0 [70096ms] <- execveat=0xffffffffffffffff errno=9 cover=6272 #0 [70097ms] -> sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) #0 [70097ms] <- sendmsg$TIPC_NL_BEARER_SET=0xffffffffffffffff errno=9 cover=52 2021/11/11 12:42:57 result hanged=false: 2021/11/11 12:42:57 added new input for call #3 open_tree to corpus: r0 = openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) sendmsg$TIPC_NL_MON_SET(r0, 0x0, 0x0) socketpair(0x8, 0x0, 0x0, &(0x7f0000000240)) open_tree(0xffffffffffffff9c, 0x0, 0x80900) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x80000) execveat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x0, &(0x7f0000000c80)=[&(0x7f0000000b00)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000b40)='#z\x7f@{./[\x00', 0x0, &(0x7f0000000bc0)='\\\x00', &(0x7f0000000c00)='gcm(aes)\x00'], 0x1000) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) 12:42:57 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) sendmsg$TIPC_NL_MON_SET(r0, 0x0, 0x0) socketpair(0x8, 0x0, 0x0, &(0x7f0000000240)) open_tree(0xffffffffffffff9c, 0x0, 0x80900) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x80000) execveat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x0, &(0x7f0000000c80)=[&(0x7f0000000b00)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000b40)='#z\x7f@{./[\x00', 0x0, &(0x7f0000000bc0)='\\\x00', &(0x7f0000000c00)='gcm(aes)\x00'], 0x1000) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) 2021/11/11 12:42:57 #0: triaging type=7 2021/11/11 12:42:57 triaging input for call #2 socketpair (new signal=2) [70119ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2141 #0 [70128ms] -> openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) #0 [70128ms] <- openat=0xffffffffffffffff errno=14 cover=614 #0 [70131ms] -> sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) #0 [70133ms] <- sendmsg$TIPC_NL_MON_SET=0xffffffffffffffff errno=9 cover=52 #0 [70136ms] -> socketpair(0x8, 0x0, 0x0, 0x20000240) #0 [70152ms] <- socketpair=0xffffffffffffffff errno=97 cover=2405 #0 [70152ms] -> open_tree(0xffffffffffffff9c, 0x0, 0x80900) #0 [70153ms] <- open_tree=0xffffffffffffffff errno=14 cover=642 #0 [70153ms] -> sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x80000) #0 [70154ms] <- sendmsg$TIPC_NL_MON_GET=0xffffffffffffffff errno=9 cover=52 #0 [70155ms] -> execveat(0xffffffffffffffff, 0x20000940, 0x0, 0x20000c80, 0x1000) #0 [70156ms] <- execveat=0xffffffffffffffff errno=9 cover=6252 #0 [70157ms] -> sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) #0 [70157ms] <- sendmsg$TIPC_NL_BEARER_SET=0xffffffffffffffff errno=9 cover=52 12:42:57 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) sendmsg$TIPC_NL_MON_SET(r0, 0x0, 0x0) socketpair(0x8, 0x0, 0x0, &(0x7f0000000240)) open_tree(0xffffffffffffff9c, 0x0, 0x80900) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x80000) execveat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x0, &(0x7f0000000c80)=[&(0x7f0000000b00)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000b40)='#z\x7f@{./[\x00', 0x0, &(0x7f0000000bc0)='\\\x00', &(0x7f0000000c00)='gcm(aes)\x00'], 0x1000) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) 2021/11/11 12:42:57 result hanged=false: [70177ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2143 #0 [70186ms] -> openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) #0 [70186ms] <- openat=0xffffffffffffffff errno=14 cover=614 #0 [70188ms] -> sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) #0 [70188ms] <- sendmsg$TIPC_NL_MON_SET=0xffffffffffffffff errno=9 cover=52 #0 [70190ms] -> socketpair(0x8, 0x0, 0x0, 0x20000240) #0 [70206ms] <- socketpair=0xffffffffffffffff errno=97 cover=2380 #0 [70207ms] -> open_tree(0xffffffffffffff9c, 0x0, 0x80900) #0 [70208ms] <- open_tree=0xffffffffffffffff errno=14 cover=653 #0 [70209ms] -> sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x80000) #0 [70209ms] <- sendmsg$TIPC_NL_MON_GET=0xffffffffffffffff errno=9 cover=52 #0 [70209ms] -> execveat(0xffffffffffffffff, 0x20000940, 0x0, 0x20000c80, 0x1000) #0 [70210ms] <- execveat=0xffffffffffffffff errno=9 cover=6264 #0 [70212ms] -> sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) #0 [70212ms] <- sendmsg$TIPC_NL_BEARER_SET=0xffffffffffffffff errno=9 cover=52 12:42:57 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) sendmsg$TIPC_NL_MON_SET(r0, 0x0, 0x0) socketpair(0x8, 0x0, 0x0, &(0x7f0000000240)) open_tree(0xffffffffffffff9c, 0x0, 0x80900) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x80000) execveat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x0, &(0x7f0000000c80)=[&(0x7f0000000b00)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000b40)='#z\x7f@{./[\x00', 0x0, &(0x7f0000000bc0)='\\\x00', &(0x7f0000000c00)='gcm(aes)\x00'], 0x1000) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) 2021/11/11 12:42:57 result hanged=false: [70232ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2145 #0 [70242ms] -> openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) #0 [70242ms] <- openat=0xffffffffffffffff errno=14 cover=614 #0 [70243ms] -> sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) #0 [70243ms] <- sendmsg$TIPC_NL_MON_SET=0xffffffffffffffff errno=9 cover=52 #0 [70247ms] -> socketpair(0x8, 0x0, 0x0, 0x20000240) #0 [70271ms] <- socketpair=0xffffffffffffffff errno=97 cover=2486 #0 [70272ms] -> open_tree(0xffffffffffffff9c, 0x0, 0x80900) #0 [70272ms] <- open_tree=0xffffffffffffffff errno=14 cover=642 #0 [70273ms] -> sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x80000) #0 [70273ms] <- sendmsg$TIPC_NL_MON_GET=0xffffffffffffffff errno=9 cover=52 #0 [70273ms] -> execveat(0xffffffffffffffff, 0x20000940, 0x0, 0x20000c80, 0x1000) #0 [70274ms] <- execveat=0xffffffffffffffff errno=9 cover=6411 #0 [70275ms] -> sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) #0 [70275ms] <- sendmsg$TIPC_NL_BEARER_SET=0xffffffffffffffff errno=9 cover=52 2021/11/11 12:42:57 result hanged=false: 2021/11/11 12:42:57 added new input for call #2 socketpair to corpus: r0 = openat(0xffffffffffffff9c, 0x0, 0x22000, 0x0) sendmsg$TIPC_NL_MON_SET(r0, 0x0, 0x0) socketpair(0x8, 0x0, 0x0, &(0x7f0000000240)) open_tree(0xffffffffffffff9c, 0x0, 0x80900) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x80000) execveat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x0, &(0x7f0000000c80)=[&(0x7f0000000b00)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000b40)='#z\x7f@{./[\x00', 0x0, &(0x7f0000000bc0)='\\\x00', &(0x7f0000000c00)='gcm(aes)\x00'], 0x1000) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) 12:42:57 executing program 0: r0 = socket(0x11, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, 0x0) [70301ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2147 #0 [70310ms] -> socket(0x11, 0x2, 0x0) #0 [70310ms] <- socket=0x3 errno=14 cover=1899 #0 [70311ms] -> getsockopt$ARPT_SO_GET_REVISION_TARGET(0x3, 0x0, 0x63, 0x0, 0x0) #0 [70311ms] <- getsockopt$ARPT_SO_GET_REVISION_TARGET=0xffffffffffffffff errno=92 cover=75 enabling collider #0 [70314ms] -> socket(0x11, 0x2, 0x0) #0 [70315ms] <- socket=0x3 errno=14 cover=1821 #0 [70315ms] -> getsockopt$ARPT_SO_GET_REVISION_TARGET(0x3, 0x0, 0x63, 0x0, 0x0) #0 [70315ms] <- getsockopt$ARPT_SO_GET_REVISION_TARGET=0xffffffffffffffff errno=9 cover=50 12:42:57 executing program 0: r0 = socket(0x11, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, 0x0) 2021/11/11 12:42:57 result hanged=false: 2021/11/11 12:42:57 #0: triaging type=7 2021/11/11 12:42:57 triaging input for call #1 getsockopt$ARPT_SO_GET_REVISION_TARGET (new signal=3) [70348ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2149 #0 [70357ms] -> socket(0x11, 0x2, 0x0) #0 [70358ms] <- socket=0x3 errno=14 cover=1865 #0 [70360ms] -> getsockopt$ARPT_SO_GET_REVISION_TARGET(0x3, 0x0, 0x63, 0x0, 0x0) #0 [70360ms] <- getsockopt$ARPT_SO_GET_REVISION_TARGET=0xffffffffffffffff errno=92 cover=75 12:42:57 executing program 0: r0 = socket(0x11, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, 0x0) 2021/11/11 12:42:57 result hanged=false: [70389ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2151 #0 [70399ms] -> socket(0x11, 0x2, 0x0) #0 [70399ms] <- socket=0x3 errno=14 cover=1827 #0 [70400ms] -> getsockopt$ARPT_SO_GET_REVISION_TARGET(0x3, 0x0, 0x63, 0x0, 0x0) #0 [70400ms] <- getsockopt$ARPT_SO_GET_REVISION_TARGET=0xffffffffffffffff errno=92 cover=75 12:42:57 executing program 0: r0 = socket(0x11, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, 0x0) 2021/11/11 12:42:57 result hanged=false: [70433ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2153 #0 [70442ms] -> socket(0x11, 0x2, 0x0) #0 [70444ms] <- socket=0x3 errno=14 cover=1800 #0 [70445ms] -> getsockopt$ARPT_SO_GET_REVISION_TARGET(0x3, 0x0, 0x63, 0x0, 0x0) #0 [70445ms] <- getsockopt$ARPT_SO_GET_REVISION_TARGET=0xffffffffffffffff errno=92 cover=75 2021/11/11 12:42:57 result hanged=false: 2021/11/11 12:42:57 added new input for call #1 getsockopt$ARPT_SO_GET_REVISION_TARGET to corpus: r0 = socket(0x11, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, 0x0) 12:42:57 executing program 0: r0 = syz_io_uring_setup(0x1d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x2) [70478ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2155 #0 [70488ms] -> syz_io_uring_setup(0x1d, 0x20000080, 0x200a0000, 0x200b0000, 0x20000180, 0x20000140) #0 [70490ms] <- syz_io_uring_setup=0x3 errno=14 cover=7556 #0 [70495ms] -> io_uring_register$IORING_REGISTER_PERSONALITY(0x3, 0x9, 0x0, 0x2) #0 [70495ms] <- io_uring_register$IORING_REGISTER_PERSONALITY=0xffffffffffffffff errno=22 cover=68 enabling collider #0 [70495ms] -> syz_io_uring_setup(0x1d, 0x20000080, 0x200a0000, 0x200b0000, 0x20000180, 0x20000140) #0 [70497ms] <- syz_io_uring_setup=0x3 errno=14 cover=5436 12:42:57 executing program 0: r0 = syz_io_uring_setup(0x1d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x2) 2021/11/11 12:42:57 result hanged=false: 2021/11/11 12:42:57 #0: triaging type=7 2021/11/11 12:42:57 triaging input for call #1 io_uring_register$IORING_REGISTER_PERSONALITY (new signal=1) [70520ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2157 #0 [70532ms] -> syz_io_uring_setup(0x1d, 0x20000080, 0x200a0000, 0x200b0000, 0x20000180, 0x20000140) #0 [70534ms] <- syz_io_uring_setup=0x3 errno=14 cover=7872 #0 [70536ms] -> io_uring_register$IORING_REGISTER_PERSONALITY(0x3, 0x9, 0x0, 0x2) #0 [70536ms] <- io_uring_register$IORING_REGISTER_PERSONALITY=0xffffffffffffffff errno=22 cover=68 2021/11/11 12:42:57 result hanged=false: 12:42:57 executing program 0: r0 = syz_io_uring_setup(0x1d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x2) [70557ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2159 #0 [70566ms] -> syz_io_uring_setup(0x1d, 0x20000080, 0x200a0000, 0x200b0000, 0x20000180, 0x20000140) #0 [70569ms] <- syz_io_uring_setup=0x3 errno=14 cover=7703 #0 [70575ms] -> io_uring_register$IORING_REGISTER_PERSONALITY(0x3, 0x9, 0x0, 0x2) #0 [70575ms] <- io_uring_register$IORING_REGISTER_PERSONALITY=0xffffffffffffffff errno=22 cover=68 12:42:57 executing program 0: r0 = syz_io_uring_setup(0x1d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x2) 2021/11/11 12:42:57 result hanged=false: [70598ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2161 #0 [70608ms] -> syz_io_uring_setup(0x1d, 0x20000080, 0x200a0000, 0x200b0000, 0x20000180, 0x20000140) #0 [70610ms] <- syz_io_uring_setup=0x3 errno=14 cover=7672 #0 [70616ms] -> io_uring_register$IORING_REGISTER_PERSONALITY(0x3, 0x9, 0x0, 0x2) #0 [70616ms] <- io_uring_register$IORING_REGISTER_PERSONALITY=0xffffffffffffffff errno=22 cover=68 2021/11/11 12:42:57 result hanged=false: 2021/11/11 12:42:57 added new input for call #1 io_uring_register$IORING_REGISTER_PERSONALITY to corpus: r0 = syz_io_uring_setup(0x1d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x2) 12:42:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), r0) [70641ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2163 #0 [70651ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [70652ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6243 #0 [70657ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x200007c0, 0x4) syz_genetlink_get_family_id(NLBL_UNLBL, 4) #0 [70657ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4681 enabling collider #0 [70658ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [70659ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5457 12:42:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), r0) 2021/11/11 12:42:57 result hanged=false: 2021/11/11 12:42:57 #0: triaging type=7 2021/11/11 12:42:57 triaging input for call #0 syz_init_net_socket$nl_generic (new signal=2) [70682ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2165 #0 [70692ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [70693ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6308 #0 [70694ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x200007c0, 0x4) syz_genetlink_get_family_id(NLBL_UNLBL, 4) #0 [70694ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4635 2021/11/11 12:42:57 result hanged=false: 12:42:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), r0) [70714ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2167 #0 [70721ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [70723ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6396 #0 [70725ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x200007c0, 0x4) syz_genetlink_get_family_id(NLBL_UNLBL, 4) #0 [70727ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4784 12:42:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), r0) 2021/11/11 12:42:57 result hanged=false: [70746ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2169 #0 [70757ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [70759ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6383 #0 [70760ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x200007c0, 0x4) syz_genetlink_get_family_id(NLBL_UNLBL, 4) #0 [70762ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4649 2021/11/11 12:42:57 result hanged=false: 2021/11/11 12:42:57 added new input for call #0 syz_init_net_socket$nl_generic to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), r0) 12:42:57 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) [70807ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2171 #0 [70815ms] -> syz_io_uring_setup(0x0, 0x0, 0x20fff000, 0x20ffb000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [70816ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=1473 enabling collider #0 [70816ms] -> syz_io_uring_setup(0x0, 0x0, 0x20fff000, 0x20ffb000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [70816ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=1166 12:42:57 executing program 0: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) getcwd(&(0x7f0000000000)=""/89, 0x59) syz_io_uring_setup(0x4cb, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) syz_io_uring_setup(0x2bbd, &(0x7f00000006c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000740), &(0x7f0000000780)) 2021/11/11 12:42:57 result hanged=false: [70836ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2173 2021/11/11 12:42:57 poll: candidates=8 inputs=0 signal=0 #0 [70845ms] -> pkey_mprotect(0x20fff000, 0x1000, 0x0, 0xffffffffffffffff) #0 [70845ms] <- pkey_mprotect=0x0 errno=14 cover=367 #0 [70846ms] -> getcwd(0x20000000, 0x59) #0 [70847ms] <- getcwd=0x31 errno=14 cover=1171 #0 [70847ms] -> syz_io_uring_setup(0x4cb, 0x20000080, 0x20ffc000, 0x20ffc000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [70850ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=10918 #0 [70851ms] -> add_key$fscrypt_provisioning(0x20000180, 0x0, 0x0, 0x0, 0xffffffffffffffff) #0 [70851ms] <- add_key$fscrypt_provisioning=0xffffffffffffffff errno=19 cover=994 #0 [70851ms] -> openat$zero(0xffffffffffffff9c, 0x20000380, 0x40, 0x0) #0 [70851ms] <- openat$zero=0x4 errno=14 cover=1173 #0 [70851ms] -> syz_io_uring_setup(0x2bbd, 0x200006c0, 0x20ffa000, 0x20ffe000, 0x20000740, 0x20000780) #0 [70853ms] <- syz_io_uring_setup=0x5 errno=14 cover=14226 enabling collider #0 [70854ms] -> pkey_mprotect(0x20fff000, 0x1000, 0x0, 0xffffffffffffffff) #0 [70854ms] <- pkey_mprotect=0x0 errno=14 cover=743 #0 [70855ms] -> getcwd(0x20000000, 0x59) #0 [70856ms] <- getcwd=0x31 errno=14 cover=438 pthread_create failed (errno 11) 12:42:57 executing program 0: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) getcwd(&(0x7f0000000000)=""/89, 0x59) syz_io_uring_setup(0x4cb, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) syz_io_uring_setup(0x2bbd, &(0x7f00000006c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000740), &(0x7f0000000780)) 2021/11/11 12:42:57 result hanged=false: 2021/11/11 12:42:57 #0: triaging type=7 2021/11/11 12:42:57 triaging input for call #5 syz_io_uring_setup (new signal=2) [70917ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2275 #0 [70927ms] -> pkey_mprotect(0x20fff000, 0x1000, 0x0, 0xffffffffffffffff) #0 [70927ms] <- pkey_mprotect=0x0 errno=14 cover=367 #0 [70928ms] -> getcwd(0x20000000, 0x59) #0 [70929ms] <- getcwd=0x31 errno=14 cover=1182 #0 [70929ms] -> syz_io_uring_setup(0x4cb, 0x20000080, 0x20ffc000, 0x20ffc000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [70943ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=8206 #0 [70944ms] -> add_key$fscrypt_provisioning(0x20000180, 0x0, 0x0, 0x0, 0xffffffffffffffff) #0 [70944ms] <- add_key$fscrypt_provisioning=0xffffffffffffffff errno=19 cover=833 #0 [70945ms] -> openat$zero(0xffffffffffffff9c, 0x20000380, 0x40, 0x0) #0 [70945ms] <- openat$zero=0x4 errno=14 cover=1161 #0 [70945ms] -> syz_io_uring_setup(0x2bbd, 0x200006c0, 0x20ffa000, 0x20ffe000, 0x20000740, 0x20000780) #0 [70950ms] <- syz_io_uring_setup=0x5 errno=14 cover=13997 12:42:57 executing program 0: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) getcwd(&(0x7f0000000000)=""/89, 0x59) syz_io_uring_setup(0x4cb, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) syz_io_uring_setup(0x2bbd, &(0x7f00000006c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000740), &(0x7f0000000780)) 2021/11/11 12:42:57 result hanged=false: [70972ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2277 #0 [70981ms] -> pkey_mprotect(0x20fff000, 0x1000, 0x0, 0xffffffffffffffff) #0 [70982ms] <- pkey_mprotect=0x0 errno=14 cover=367 #0 [70982ms] -> getcwd(0x20000000, 0x59) #0 [70982ms] <- getcwd=0x31 errno=14 cover=1138 #0 [70983ms] -> syz_io_uring_setup(0x4cb, 0x20000080, 0x20ffc000, 0x20ffc000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [70985ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=7413 #0 [70990ms] -> add_key$fscrypt_provisioning(0x20000180, 0x0, 0x0, 0x0, 0xffffffffffffffff) #0 [70990ms] <- add_key$fscrypt_provisioning=0xffffffffffffffff errno=19 cover=1132 #0 [70991ms] -> openat$zero(0xffffffffffffff9c, 0x20000380, 0x40, 0x0) #0 [70991ms] <- openat$zero=0x4 errno=14 cover=1173 #0 [70992ms] -> syz_io_uring_setup(0x2bbd, 0x200006c0, 0x20ffa000, 0x20ffe000, 0x20000740, 0x20000780) #0 [70996ms] <- syz_io_uring_setup=0x5 errno=14 cover=14150 12:42:58 executing program 0: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) getcwd(&(0x7f0000000000)=""/89, 0x59) syz_io_uring_setup(0x4cb, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) syz_io_uring_setup(0x2bbd, &(0x7f00000006c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000740), &(0x7f0000000780)) 2021/11/11 12:42:58 result hanged=false: [71019ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2279 #0 [71029ms] -> pkey_mprotect(0x20fff000, 0x1000, 0x0, 0xffffffffffffffff) #0 [71031ms] <- pkey_mprotect=0x0 errno=14 cover=345 #0 [71031ms] -> getcwd(0x20000000, 0x59) #0 [71031ms] <- getcwd=0x31 errno=14 cover=1128 #0 [71032ms] -> syz_io_uring_setup(0x4cb, 0x20000080, 0x20ffc000, 0x20ffc000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [71035ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=7568 #0 [71036ms] -> add_key$fscrypt_provisioning(0x20000180, 0x0, 0x0, 0x0, 0xffffffffffffffff) #0 [71036ms] <- add_key$fscrypt_provisioning=0xffffffffffffffff errno=19 cover=1126 #0 [71037ms] -> openat$zero(0xffffffffffffff9c, 0x20000380, 0x40, 0x0) #0 [71037ms] <- openat$zero=0x4 errno=14 cover=1188 #0 [71038ms] -> syz_io_uring_setup(0x2bbd, 0x200006c0, 0x20ffa000, 0x20ffe000, 0x20000740, 0x20000780) #0 [71040ms] <- syz_io_uring_setup=0x5 errno=14 cover=13891 2021/11/11 12:42:58 result hanged=false: 2021/11/11 12:42:58 added new input for call #5 syz_io_uring_setup to corpus: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) getcwd(&(0x7f0000000000)=""/89, 0x59) syz_io_uring_setup(0x4cb, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) syz_io_uring_setup(0x2bbd, &(0x7f00000006c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000740), &(0x7f0000000780)) 12:42:58 executing program 0: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) getcwd(&(0x7f0000000000)=""/89, 0x59) syz_io_uring_setup(0x4cb, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) syz_io_uring_setup(0x2bbd, &(0x7f00000006c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000740), &(0x7f0000000780)) 2021/11/11 12:42:58 #0: triaging type=7 2021/11/11 12:42:58 triaging input for call #3 add_key$fscrypt_provisioning (new signal=5) [71070ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2281 #0 [71079ms] -> pkey_mprotect(0x20fff000, 0x1000, 0x0, 0xffffffffffffffff) #0 [71080ms] <- pkey_mprotect=0x0 errno=14 cover=367 #0 [71081ms] -> getcwd(0x20000000, 0x59) #0 [71082ms] <- getcwd=0x31 errno=14 cover=1228 #0 [71084ms] -> syz_io_uring_setup(0x4cb, 0x20000080, 0x20ffc000, 0x20ffc000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [71087ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=7647 #0 [71090ms] -> add_key$fscrypt_provisioning(0x20000180, 0x0, 0x0, 0x0, 0xffffffffffffffff) #0 [71090ms] <- add_key$fscrypt_provisioning=0xffffffffffffffff errno=19 cover=1004 #0 [71091ms] -> openat$zero(0xffffffffffffff9c, 0x20000380, 0x40, 0x0) #0 [71091ms] <- openat$zero=0x4 errno=14 cover=1238 #0 [71092ms] -> syz_io_uring_setup(0x2bbd, 0x200006c0, 0x20ffa000, 0x20ffe000, 0x20000740, 0x20000780) #0 [71098ms] <- syz_io_uring_setup=0x5 errno=14 cover=14104 12:42:58 executing program 0: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) getcwd(&(0x7f0000000000)=""/89, 0x59) syz_io_uring_setup(0x4cb, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) syz_io_uring_setup(0x2bbd, &(0x7f00000006c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000740), &(0x7f0000000780)) 2021/11/11 12:42:58 result hanged=false: [71119ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2283 #0 [71131ms] -> pkey_mprotect(0x20fff000, 0x1000, 0x0, 0xffffffffffffffff) #0 [71134ms] <- pkey_mprotect=0x0 errno=14 cover=345 #0 [71135ms] -> getcwd(0x20000000, 0x59) #0 [71137ms] <- getcwd=0x31 errno=14 cover=1205 #0 [71137ms] -> syz_io_uring_setup(0x4cb, 0x20000080, 0x20ffc000, 0x20ffc000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [71140ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=7599 #0 [71141ms] -> add_key$fscrypt_provisioning(0x20000180, 0x0, 0x0, 0x0, 0xffffffffffffffff) #0 [71141ms] <- add_key$fscrypt_provisioning=0xffffffffffffffff errno=19 cover=923 #0 [71142ms] -> openat$zero(0xffffffffffffff9c, 0x20000380, 0x40, 0x0) #0 [71142ms] <- openat$zero=0x4 errno=14 cover=1173 #0 [71143ms] -> syz_io_uring_setup(0x2bbd, 0x200006c0, 0x20ffa000, 0x20ffe000, 0x20000740, 0x20000780) #0 [71146ms] <- syz_io_uring_setup=0x5 errno=14 cover=14217 12:42:58 executing program 0: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) getcwd(&(0x7f0000000000)=""/89, 0x59) syz_io_uring_setup(0x4cb, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) syz_io_uring_setup(0x2bbd, &(0x7f00000006c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000740), &(0x7f0000000780)) 2021/11/11 12:42:58 result hanged=false: [71168ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2285 #0 [71177ms] -> pkey_mprotect(0x20fff000, 0x1000, 0x0, 0xffffffffffffffff) #0 [71179ms] <- pkey_mprotect=0x0 errno=14 cover=410 #0 [71183ms] -> getcwd(0x20000000, 0x59) #0 [71183ms] <- getcwd=0x31 errno=14 cover=1138 #0 [71184ms] -> syz_io_uring_setup(0x4cb, 0x20000080, 0x20ffc000, 0x20ffc000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [71190ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=7791 #0 [71191ms] -> add_key$fscrypt_provisioning(0x20000180, 0x0, 0x0, 0x0, 0xffffffffffffffff) #0 [71191ms] <- add_key$fscrypt_provisioning=0xffffffffffffffff errno=19 cover=907 #0 [71192ms] -> openat$zero(0xffffffffffffff9c, 0x20000380, 0x40, 0x0) #0 [71192ms] <- openat$zero=0x4 errno=14 cover=1184 #0 [71193ms] -> syz_io_uring_setup(0x2bbd, 0x200006c0, 0x20ffa000, 0x20ffe000, 0x20000740, 0x20000780) #0 [71202ms] <- syz_io_uring_setup=0x5 errno=14 cover=14273 2021/11/11 12:42:58 result hanged=false: 2021/11/11 12:42:58 added new input for call #3 add_key$fscrypt_provisioning to corpus: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) getcwd(&(0x7f0000000000)=""/89, 0x59) syz_io_uring_setup(0x4cb, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) syz_io_uring_setup(0x2bbd, &(0x7f00000006c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000740), &(0x7f0000000780)) 12:42:58 executing program 0: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) getcwd(&(0x7f0000000000)=""/89, 0x59) syz_io_uring_setup(0x4cb, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) syz_io_uring_setup(0x2bbd, &(0x7f00000006c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000740), &(0x7f0000000780)) 2021/11/11 12:42:58 #0: triaging type=7 2021/11/11 12:42:58 triaging input for call #1 getcwd (new signal=33) [71225ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2287 #0 [71237ms] -> pkey_mprotect(0x20fff000, 0x1000, 0x0, 0xffffffffffffffff) #0 [71240ms] <- pkey_mprotect=0x0 errno=14 cover=421 #0 [71247ms] -> getcwd(0x20000000, 0x59) #0 [71247ms] <- getcwd=0x31 errno=14 cover=1237 #0 [71248ms] -> syz_io_uring_setup(0x4cb, 0x20000080, 0x20ffc000, 0x20ffc000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [71253ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=7691 #0 [71254ms] -> add_key$fscrypt_provisioning(0x20000180, 0x0, 0x0, 0x0, 0xffffffffffffffff) #0 [71254ms] <- add_key$fscrypt_provisioning=0xffffffffffffffff errno=19 cover=1020 #0 [71254ms] -> openat$zero(0xffffffffffffff9c, 0x20000380, 0x40, 0x0) #0 [71255ms] <- openat$zero=0x4 errno=14 cover=1185 #0 [71255ms] -> syz_io_uring_setup(0x2bbd, 0x200006c0, 0x20ffa000, 0x20ffe000, 0x20000740, 0x20000780) #0 [71260ms] <- syz_io_uring_setup=0x5 errno=14 cover=14067 12:42:58 executing program 0: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) getcwd(&(0x7f0000000000)=""/89, 0x59) syz_io_uring_setup(0x4cb, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) syz_io_uring_setup(0x2bbd, &(0x7f00000006c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000740), &(0x7f0000000780)) 2021/11/11 12:42:58 result hanged=false: [71283ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2289 #0 [71293ms] -> pkey_mprotect(0x20fff000, 0x1000, 0x0, 0xffffffffffffffff) #0 [71293ms] <- pkey_mprotect=0x0 errno=14 cover=367 #0 [71294ms] -> getcwd(0x20000000, 0x59) #0 [71295ms] <- getcwd=0x31 errno=14 cover=1182 #0 [71299ms] -> syz_io_uring_setup(0x4cb, 0x20000080, 0x20ffc000, 0x20ffc000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [71301ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=7515 #0 [71303ms] -> add_key$fscrypt_provisioning(0x20000180, 0x0, 0x0, 0x0, 0xffffffffffffffff) #0 [71304ms] <- add_key$fscrypt_provisioning=0xffffffffffffffff errno=19 cover=1280 #0 [71304ms] -> openat$zero(0xffffffffffffff9c, 0x20000380, 0x40, 0x0) #0 [71305ms] <- openat$zero=0x4 errno=14 cover=1195 #0 [71305ms] -> syz_io_uring_setup(0x2bbd, 0x200006c0, 0x20ffa000, 0x20ffe000, 0x20000740, 0x20000780) #0 [71308ms] <- syz_io_uring_setup=0x5 errno=14 cover=14045 12:42:58 executing program 0: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) getcwd(&(0x7f0000000000)=""/89, 0x59) syz_io_uring_setup(0x4cb, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) syz_io_uring_setup(0x2bbd, &(0x7f00000006c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000740), &(0x7f0000000780)) 2021/11/11 12:42:58 result hanged=false: [71334ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2291 #0 [71344ms] -> pkey_mprotect(0x20fff000, 0x1000, 0x0, 0xffffffffffffffff) #0 [71344ms] <- pkey_mprotect=0x0 errno=14 cover=345 #0 [71344ms] -> getcwd(0x20000000, 0x59) #0 [71345ms] <- getcwd=0x31 errno=14 cover=1138 #0 [71345ms] -> syz_io_uring_setup(0x4cb, 0x20000080, 0x20ffc000, 0x20ffc000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [71350ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=7666 #0 [71351ms] -> add_key$fscrypt_provisioning(0x20000180, 0x0, 0x0, 0x0, 0xffffffffffffffff) #0 [71351ms] <- add_key$fscrypt_provisioning=0xffffffffffffffff errno=19 cover=827 #0 [71351ms] -> openat$zero(0xffffffffffffff9c, 0x20000380, 0x40, 0x0) #0 [71352ms] <- openat$zero=0x4 errno=14 cover=1162 #0 [71352ms] -> syz_io_uring_setup(0x2bbd, 0x200006c0, 0x20ffa000, 0x20ffe000, 0x20000740, 0x20000780) #0 [71362ms] <- syz_io_uring_setup=0x5 errno=14 cover=13999 2021/11/11 12:42:58 result hanged=false: 2021/11/11 12:42:58 added new input for call #1 getcwd to corpus: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) getcwd(&(0x7f0000000000)=""/89, 0x59) syz_io_uring_setup(0x4cb, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) syz_io_uring_setup(0x2bbd, &(0x7f00000006c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000740), &(0x7f0000000780)) 12:42:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000440008000f801002000400003000000000000008000297eb190f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/96, 0x60, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x400}, {&(0x7f0000010300)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x600}, {&(0x7f0000010400)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x800}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100087ea70325132510000ea7032510300000000002e2e202020202020202020100087ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200087ea70325132510000ea70325104001a040000", 0x80, 0x1400}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1600}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x1c00}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x4200}], 0x0, &(0x7f0000010f00)) [71385ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2293 #0 [71394ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x10000, 0xa, 0x20000200, 0x0, 0x20010f00) syz_mount_image: size=65536 segs=10 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [71401ms] <- syz_mount_image$vfat=0x5 errno=0 cover=24937 enabling collider #0 [71402ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x10000, 0xa, 0x20000200, 0x0, 0x20010f00) #0 [71404ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=16 cover=11295 2021/11/11 12:42:58 result hanged=false: 12:42:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000440008000f801002000400003000000000000008000297eb190f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/96, 0x60, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x400}, {&(0x7f0000010300)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x600}, {&(0x7f0000010400)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x800}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ea80325132510000ea80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100087ea70325132510000ea70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200087ea70325132510000ea70325107000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c4532202020202020200087ea70325132510000ea70325108002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c200087ea70325132510000ea7032511a0064000000", 0x120, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100087ea70325132510000ea7032510300000000002e2e202020202020202020100087ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200087ea70325132510000ea70325104001a040000", 0x80, 0x1400}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1600}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x1c00}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x4200}], 0x0, &(0x7f0000010f00)) 2021/11/11 12:42:58 #0: triaging type=7 2021/11/11 12:42:58 triaging input for call #0 syz_mount_image$vfat (new signal=2) umount(./410/file0) [71430ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2295 #0 [71441ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x10000, 0xa, 0x20000200, 0x0, 0x20010f00) syz_mount_image: size=65536 segs=10 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [71452ms] <- syz_mount_image$vfat=0x5 errno=0 cover=24389 2021/11/11 12:42:58 result hanged=false: 12:42:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000440008000f801002000400003000000000000008000297eb190f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/96, 0x60, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x400}, {&(0x7f0000010300)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x600}, {&(0x7f0000010400)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x800}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100087ea70325132510000ea7032510300000000002e2e202020202020202020100087ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200087ea70325132510000ea70325104001a040000", 0x80, 0x1400}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1600}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x1c00}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x4200}], 0x0, &(0x7f0000010f00)) umount(./411/file0) [71484ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2297 #0 [71494ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x10000, 0xa, 0x20000200, 0x0, 0x20010f00) syz_mount_image: size=65536 segs=10 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [71505ms] <- syz_mount_image$vfat=0x5 errno=0 cover=24890 12:42:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000440008000f801002000400003000000000000008000297eb190f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/96, 0x60, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x400}, {&(0x7f0000010300)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x600}, {&(0x7f0000010400)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x800}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100087ea70325132510000ea7032510300000000002e2e202020202020202020100087ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200087ea70325132510000ea70325104001a040000", 0x80, 0x1400}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1600}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x1c00}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x4200}], 0x0, &(0x7f0000010f00)) 2021/11/11 12:42:58 result hanged=false: umount(./412/file0) [71534ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2299 #0 [71544ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x10000, 0xa, 0x20000200, 0x0, 0x20010f00) syz_mount_image: size=65536 segs=10 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [71555ms] <- syz_mount_image$vfat=0x5 errno=0 cover=24787 2021/11/11 12:42:58 result hanged=false: 2021/11/11 12:42:58 added new input for call #0 syz_mount_image$vfat to corpus: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000440008000f801002000400003000000000000008000297eb190f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/96, 0x60, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x400}, {&(0x7f0000010300)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x600}, {&(0x7f0000010400)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x800}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100087ea70325132510000ea7032510300000000002e2e202020202020202020100087ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200087ea70325132510000ea70325104001a040000", 0x80, 0x1400}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1600}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x1c00}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x4200}], 0x0, &(0x7f0000010f00)) umount(./413/file0) 12:42:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'sit0\x00', 0x0}) [71629ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2301 #0 [71639ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [71640ms] <- perf_event_open=0x3 errno=14 cover=6744 #0 [71641ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [71641ms] <- socket$inet6_udp=0x4 errno=14 cover=5135 #0 [71641ms] -> ioctl$sock_ipv6_tunnel_SIOCDELPRL(0x4, 0x89f6, 0x20000080) #0 [71642ms] <- ioctl$sock_ipv6_tunnel_SIOCDELPRL=0xffffffffffffffff errno=22 cover=431 enabling collider #0 [71651ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [71652ms] <- perf_event_open=0x3 errno=14 cover=6804 #0 [71653ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [71654ms] <- socket$inet6_udp=0x4 errno=14 cover=5373 pthread_create failed (errno 11) 12:42:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'sit0\x00', 0x0}) 2021/11/11 12:42:58 result hanged=false: 2021/11/11 12:42:58 #0: triaging type=7 2021/11/11 12:42:58 triaging input for call #2 ioctl$sock_ipv6_tunnel_SIOCDELPRL (new signal=10) [71723ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2403 #0 [71732ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [71733ms] <- perf_event_open=0x3 errno=14 cover=6943 #0 [71736ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [71736ms] <- socket$inet6_udp=0x4 errno=14 cover=1785 #0 [71740ms] -> ioctl$sock_ipv6_tunnel_SIOCDELPRL(0x4, 0x89f6, 0x20000080) #0 [71740ms] <- ioctl$sock_ipv6_tunnel_SIOCDELPRL=0xffffffffffffffff errno=22 cover=228 2021/11/11 12:42:58 result hanged=false: 12:42:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'sit0\x00', 0x0}) [71777ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2405 #0 [71786ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [71788ms] <- perf_event_open=0x3 errno=14 cover=6792 #0 [71789ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [71790ms] <- socket$inet6_udp=0x4 errno=14 cover=20361 #0 [71792ms] -> ioctl$sock_ipv6_tunnel_SIOCDELPRL(0x4, 0x89f6, 0x20000080) #0 [71792ms] <- ioctl$sock_ipv6_tunnel_SIOCDELPRL=0xffffffffffffffff errno=22 cover=431 2021/11/11 12:42:58 result hanged=false: 12:42:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'sit0\x00', 0x0}) [71829ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2407 #0 [71839ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [71841ms] <- perf_event_open=0x3 errno=14 cover=6739 #0 [71842ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [71843ms] <- socket$inet6_udp=0x4 errno=14 cover=5135 #0 [71844ms] -> ioctl$sock_ipv6_tunnel_SIOCDELPRL(0x4, 0x89f6, 0x20000080) #0 [71844ms] <- ioctl$sock_ipv6_tunnel_SIOCDELPRL=0xffffffffffffffff errno=22 cover=431 2021/11/11 12:42:58 result hanged=false: 2021/11/11 12:42:58 added new input for call #2 ioctl$sock_ipv6_tunnel_SIOCDELPRL to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'sit0\x00', 0x0}) 12:42:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x52, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}}, 0x0) read(r0, &(0x7f0000000040)=""/86, 0x56) [71876ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2409 #0 [71885ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [71886ms] <- socket$netlink=0x3 errno=14 cover=1610 #0 [71887ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [71888ms] <- sendmsg$nl_generic=0x14 errno=14 cover=3266 #0 [71889ms] -> read(0x3, 0x20000040, 0x56) #0 [71889ms] <- read=0x56 errno=14 cover=1382 enabling collider #0 [71890ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [71892ms] <- socket$netlink=0x3 errno=14 cover=1473 #0 [71893ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [71895ms] <- sendmsg$nl_generic=0x14 errno=14 cover=3272 pthread_create failed (errno 11) 12:42:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x52, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}}, 0x0) read(r0, &(0x7f0000000040)=""/86, 0x56) 2021/11/11 12:42:58 result hanged=false: 2021/11/11 12:42:58 #0: triaging type=7 2021/11/11 12:42:58 triaging input for call #2 read (new signal=12) [71948ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2511 #0 [71958ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [71958ms] <- socket$netlink=0x3 errno=14 cover=1421 #0 [71959ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [71959ms] <- sendmsg$nl_generic=0x14 errno=14 cover=3208 #0 [71959ms] -> read(0x3, 0x20000040, 0x56) #0 [71960ms] <- read=0x56 errno=14 cover=1261 12:42:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x52, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}}, 0x0) read(r0, &(0x7f0000000040)=""/86, 0x56) 2021/11/11 12:42:58 result hanged=false: [71983ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2513 #0 [71994ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [71994ms] <- socket$netlink=0x3 errno=14 cover=1421 #0 [71995ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [71996ms] <- sendmsg$nl_generic=0x14 errno=14 cover=3214 #0 [71998ms] -> read(0x3, 0x20000040, 0x56) #0 [71998ms] <- read=0x56 errno=14 cover=1250 2021/11/11 12:42:59 result hanged=false: 12:42:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x52, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}}, 0x0) read(r0, &(0x7f0000000040)=""/86, 0x56) [72019ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2515 #0 [72029ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [72033ms] <- socket$netlink=0x3 errno=14 cover=1421 #0 [72033ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [72034ms] <- sendmsg$nl_generic=0x14 errno=14 cover=3222 #0 [72035ms] -> read(0x3, 0x20000040, 0x56) #0 [72035ms] <- read=0x56 errno=14 cover=1261 2021/11/11 12:42:59 result hanged=false: 2021/11/11 12:42:59 added new input for call #2 read to corpus: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x52, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}}, 0x0) read(r0, &(0x7f0000000040)=""/86, 0x56) 2021/11/11 12:42:59 #0: triaging type=7 2021/11/11 12:42:59 triaging input for call #1 sendmsg$nl_generic (new signal=33) 12:42:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x52, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}}, 0x0) read(r0, &(0x7f0000000040)=""/86, 0x56) [72057ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2517 #0 [72067ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [72068ms] <- socket$netlink=0x3 errno=14 cover=1432 #0 [72069ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [72070ms] <- sendmsg$nl_generic=0x14 errno=14 cover=3259 #0 [72070ms] -> read(0x3, 0x20000040, 0x56) #0 [72071ms] <- read=0x56 errno=14 cover=1251 12:42:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x52, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}}, 0x0) read(r0, &(0x7f0000000040)=""/86, 0x56) 2021/11/11 12:42:59 result hanged=false: [72091ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2519 #0 [72101ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [72102ms] <- socket$netlink=0x3 errno=14 cover=1410 #0 [72102ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [72103ms] <- sendmsg$nl_generic=0x14 errno=14 cover=3183 #0 [72103ms] -> read(0x3, 0x20000040, 0x56) #0 [72103ms] <- read=0x56 errno=14 cover=1271 12:42:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x52, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}}, 0x0) read(r0, &(0x7f0000000040)=""/86, 0x56) 2021/11/11 12:42:59 result hanged=false: [72122ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2521 #0 [72132ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [72133ms] <- socket$netlink=0x3 errno=14 cover=1443 #0 [72133ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [72134ms] <- sendmsg$nl_generic=0x14 errno=14 cover=3223 #0 [72134ms] -> read(0x3, 0x20000040, 0x56) #0 [72135ms] <- read=0x56 errno=14 cover=1260 2021/11/11 12:42:59 result hanged=false: 2021/11/11 12:42:59 added new input for call #1 sendmsg$nl_generic to corpus: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x52, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}}, 0x0) read(r0, &(0x7f0000000040)=""/86, 0x56) 12:42:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [72167ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2523 #0 [72176ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [72177ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6274 #0 [72177ms] -> sendmsg$NBD_CMD_DISCONNECT(0x4, 0x20000200, 0x0) #0 [72177ms] <- sendmsg$NBD_CMD_DISCONNECT=0x0 errno=14 cover=973 enabling collider #0 [72178ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [72178ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5510 12:42:59 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) 2021/11/11 12:42:59 result hanged=false: [72196ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2525 #0 [72205ms] -> creat(0x20000040, 0x0) #0 [72206ms] <- creat=0x3 errno=14 cover=6733 #0 [72207ms] -> ioctl$FS_IOC_GETFSMAP(0x3, 0xc0c0583b, 0x20000080) #0 [72210ms] <- ioctl$FS_IOC_GETFSMAP=0x0 errno=14 cover=40633 #0 [72210ms] -> socket$inet(0x2, 0xa, 0x0) #0 [72210ms] <- socket$inet=0x4 errno=14 cover=1803 #0 [72211ms] -> ioctl$sock_inet_SIOCGIFNETMASK(0x4, 0x8917, 0x200001c0) #0 [72211ms] <- ioctl$sock_inet_SIOCGIFNETMASK=0x0 errno=14 cover=213 enabling collider #0 [72216ms] -> creat(0x20000040, 0x0) #0 [72217ms] <- creat=0x3 errno=14 cover=4922 #0 [72217ms] -> ioctl$FS_IOC_GETFSMAP(0x3, 0xc0c0583b, 0x20000080) #0 [72222ms] <- ioctl$FS_IOC_GETFSMAP=0x0 errno=14 cover=40574 pthread_create failed (errno 11) 12:42:59 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) 2021/11/11 12:42:59 result hanged=false: 2021/11/11 12:42:59 #0: triaging type=7 2021/11/11 12:42:59 triaging input for call #3 ioctl$sock_inet_SIOCGIFNETMASK (new signal=19) [72271ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2627 #0 [72280ms] -> creat(0x20000040, 0x0) #0 [72282ms] <- creat=0x3 errno=14 cover=6682 #0 [72285ms] -> ioctl$FS_IOC_GETFSMAP(0x3, 0xc0c0583b, 0x20000080) #0 [72288ms] <- ioctl$FS_IOC_GETFSMAP=0x0 errno=14 cover=40482 #0 [72291ms] -> socket$inet(0x2, 0xa, 0x0) #0 [72293ms] <- socket$inet=0x4 errno=14 cover=1770 #0 [72294ms] -> ioctl$sock_inet_SIOCGIFNETMASK(0x4, 0x8917, 0x200001c0) #0 [72294ms] <- ioctl$sock_inet_SIOCGIFNETMASK=0x0 errno=14 cover=213 12:42:59 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) 2021/11/11 12:42:59 result hanged=false: [72318ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2629 #0 [72327ms] -> creat(0x20000040, 0x0) #0 [72328ms] <- creat=0x3 errno=14 cover=6890 #0 [72330ms] -> ioctl$FS_IOC_GETFSMAP(0x3, 0xc0c0583b, 0x20000080) #0 [72334ms] <- ioctl$FS_IOC_GETFSMAP=0x0 errno=14 cover=40571 #0 [72337ms] -> socket$inet(0x2, 0xa, 0x0) #0 [72337ms] <- socket$inet=0x4 errno=14 cover=1890 #0 [72339ms] -> ioctl$sock_inet_SIOCGIFNETMASK(0x4, 0x8917, 0x200001c0) #0 [72339ms] <- ioctl$sock_inet_SIOCGIFNETMASK=0x0 errno=14 cover=213 2021/11/11 12:42:59 result hanged=false: 12:42:59 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) [72363ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2631 #0 [72375ms] -> creat(0x20000040, 0x0) #0 [72378ms] <- creat=0x3 errno=14 cover=6713 #0 [72380ms] -> ioctl$FS_IOC_GETFSMAP(0x3, 0xc0c0583b, 0x20000080) #0 [72383ms] <- ioctl$FS_IOC_GETFSMAP=0x0 errno=14 cover=40236 #0 [72386ms] -> socket$inet(0x2, 0xa, 0x0) #0 [72386ms] <- socket$inet=0x4 errno=14 cover=1875 #0 [72386ms] -> ioctl$sock_inet_SIOCGIFNETMASK(0x4, 0x8917, 0x200001c0) #0 [72386ms] <- ioctl$sock_inet_SIOCGIFNETMASK=0x0 errno=14 cover=213 2021/11/11 12:42:59 result hanged=false: 2021/11/11 12:42:59 added new input for call #3 ioctl$sock_inet_SIOCGIFNETMASK to corpus: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) 12:42:59 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) 2021/11/11 12:42:59 #0: triaging type=7 2021/11/11 12:42:59 triaging input for call #1 ioctl$FS_IOC_GETFSMAP (new signal=317) [72412ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2633 #0 [72421ms] -> creat(0x20000040, 0x0) #0 [72422ms] <- creat=0x3 errno=14 cover=6720 #0 [72424ms] -> ioctl$FS_IOC_GETFSMAP(0x3, 0xc0c0583b, 0x20000080) #0 [72428ms] <- ioctl$FS_IOC_GETFSMAP=0x0 errno=14 cover=40374 #0 [72434ms] -> socket$inet(0x2, 0xa, 0x0) #0 [72436ms] <- socket$inet=0x4 errno=14 cover=1886 #0 [72437ms] -> ioctl$sock_inet_SIOCGIFNETMASK(0x4, 0x8917, 0x200001c0) #0 [72437ms] <- ioctl$sock_inet_SIOCGIFNETMASK=0x0 errno=14 cover=213 12:42:59 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) 2021/11/11 12:42:59 result hanged=false: [72458ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2635 #0 [72469ms] -> creat(0x20000040, 0x0) #0 [72469ms] <- creat=0x3 errno=14 cover=6825 #0 [72471ms] -> ioctl$FS_IOC_GETFSMAP(0x3, 0xc0c0583b, 0x20000080) #0 [72473ms] <- ioctl$FS_IOC_GETFSMAP=0x0 errno=14 cover=40331 #0 [72477ms] -> socket$inet(0x2, 0xa, 0x0) #0 [72477ms] <- socket$inet=0x4 errno=14 cover=1934 #0 [72479ms] -> ioctl$sock_inet_SIOCGIFNETMASK(0x4, 0x8917, 0x200001c0) #0 [72479ms] <- ioctl$sock_inet_SIOCGIFNETMASK=0x0 errno=14 cover=213 12:42:59 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) 2021/11/11 12:42:59 result hanged=false: [72509ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2637 #0 [72520ms] -> creat(0x20000040, 0x0) #0 [72520ms] <- creat=0x3 errno=14 cover=6831 #0 [72522ms] -> ioctl$FS_IOC_GETFSMAP(0x3, 0xc0c0583b, 0x20000080) #0 [72525ms] <- ioctl$FS_IOC_GETFSMAP=0x0 errno=14 cover=45673 #0 [72533ms] -> socket$inet(0x2, 0xa, 0x0) #0 [72533ms] <- socket$inet=0x4 errno=14 cover=1923 #0 [72534ms] -> ioctl$sock_inet_SIOCGIFNETMASK(0x4, 0x8917, 0x200001c0) #0 [72534ms] <- ioctl$sock_inet_SIOCGIFNETMASK=0x0 errno=14 cover=213 2021/11/11 12:42:59 result hanged=false: 2021/11/11 12:42:59 added new input for call #1 ioctl$FS_IOC_GETFSMAP to corpus: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) 12:42:59 executing program 0: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @local, @multicast2}, {0x0, 0x0, 0x0, @loopback}}}}}, 0x0) [72568ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2639 #0 [72579ms] -> syz_emit_ethernet(0x2a, 0x200001c0, 0x0) aa aa aa aa aa aa aa aa aa aa aa aa 08 00 45 00 00 1c 00 00 00 00 00 02 1a 20 ac 14 14 aa e0 00 00 02 00 00 80 fe 7f 00 00 01 #0 [72579ms] <- syz_emit_ethernet=0x2a errno=14 cover=13053 enabling collider #0 [72580ms] -> syz_emit_ethernet(0x2a, 0x200001c0, 0x0) aa aa aa aa aa aa aa aa aa aa aa aa 08 00 45 00 00 1c 00 00 00 00 00 02 1a 20 ac 14 14 aa e0 00 00 02 00 00 80 fe 7f 00 00 01 #0 [72581ms] <- syz_emit_ethernet=0x2a errno=14 cover=13096 12:42:59 executing program 0: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @local, @multicast2}, {0x0, 0x0, 0x0, @loopback}}}}}, 0x0) 2021/11/11 12:42:59 result hanged=false: 2021/11/11 12:42:59 #0: triaging type=7 2021/11/11 12:42:59 triaging input for call #0 syz_emit_ethernet (new signal=6) iptable mangle/2: resetting [72601ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2641 #0 [72613ms] -> syz_emit_ethernet(0x2a, 0x200001c0, 0x0) aa aa aa aa aa aa aa aa aa aa aa aa 08 00 45 00 00 1c 00 00 00 00 00 02 1a 20 ac 14 14 aa e0 00 00 02 00 00 80 fe 7f 00 00 01 #0 [72613ms] <- syz_emit_ethernet=0x2a errno=14 cover=13008 2021/11/11 12:42:59 result hanged=false: 12:42:59 executing program 0: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @local, @multicast2}, {0x0, 0x0, 0x0, @loopback}}}}}, 0x0) iptable mangle/2: resetting [72634ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2643 #0 [72644ms] -> syz_emit_ethernet(0x2a, 0x200001c0, 0x0) aa aa aa aa aa aa aa aa aa aa aa aa 08 00 45 00 00 1c 00 00 00 00 00 02 1a 20 ac 14 14 aa e0 00 00 02 00 00 80 fe 7f 00 00 01 #0 [72645ms] <- syz_emit_ethernet=0x2a errno=14 cover=12901 12:42:59 executing program 0: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @local, @multicast2}, {0x0, 0x0, 0x0, @loopback}}}}}, 0x0) 2021/11/11 12:42:59 result hanged=false: iptable mangle/2: resetting [72669ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2645 #0 [72679ms] -> syz_emit_ethernet(0x2a, 0x200001c0, 0x0) aa aa aa aa aa aa aa aa aa aa aa aa 08 00 45 00 00 1c 00 00 00 00 00 02 1a 20 ac 14 14 aa e0 00 00 02 00 00 80 fe 7f 00 00 01 #0 [72680ms] <- syz_emit_ethernet=0x2a errno=14 cover=13056 iptable mangle/2: resetting 2021/11/11 12:42:59 result hanged=false: 2021/11/11 12:42:59 added new input for call #0 syz_emit_ethernet to corpus: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @local, @multicast2}, {0x0, 0x0, 0x0, @loopback}}}}}, 0x0) 12:42:59 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) [72703ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2647 #0 [72712ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [72713ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6266 #0 [72715ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [72716ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0xffffffffffffffff errno=14 cover=3254 enabling collider #0 [72717ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [72718ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5445 #0 [72719ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) 12:42:59 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) [72737ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:42:59 result hanged=false: 2021/11/11 12:42:59 #0: triaging type=7 2021/11/11 12:42:59 triaging input for call #0 syz_init_net_socket$nl_generic (new signal=2) spawned worker pid 2649 #0 [72746ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [72748ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6356 #0 [72750ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [72750ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0xffffffffffffffff errno=14 cover=3270 12:42:59 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) 2021/11/11 12:42:59 result hanged=false: [72770ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2651 #0 [72782ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [72786ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6316 #0 [72788ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [72788ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0xffffffffffffffff errno=14 cover=3312 12:42:59 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) 2021/11/11 12:42:59 result hanged=false: [72808ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2653 #0 [72817ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [72818ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6269 #0 [72826ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [72827ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0xffffffffffffffff errno=14 cover=3544 2021/11/11 12:42:59 result hanged=false: 2021/11/11 12:42:59 added new input for call #0 syz_init_net_socket$nl_generic to corpus: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) 12:42:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x18, r1, 0xb0b, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) [72870ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2655 #0 [72879ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [72879ms] <- socket$nl_generic=0x3 errno=14 cover=1401 #0 [72880ms] -> syz_genetlink_get_family_id$ethtool(0x20001700, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [72881ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=8247 #0 [72882ms] -> sendmsg$ETHTOOL_MSG_STRSET_GET(0x3, 0x200002c0, 0x0) #0 [72883ms] <- sendmsg$ETHTOOL_MSG_STRSET_GET=0x18 errno=14 cover=6878 2021/11/11 12:42:59 poll: candidates=8 inputs=0 signal=0 enabling collider #0 [72886ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [72886ms] <- socket$nl_generic=0x3 errno=14 cover=1520 #0 [72887ms] -> syz_genetlink_get_family_id$ethtool(0x20001700, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [72887ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=7640 pthread_create failed (errno 11) 12:42:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x18, r1, 0xb0b, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 2021/11/11 12:42:59 result hanged=false: 2021/11/11 12:42:59 #0: triaging type=7 2021/11/11 12:42:59 triaging input for call #2 sendmsg$ETHTOOL_MSG_STRSET_GET (new signal=109) [72941ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2757 #0 [72949ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [72950ms] <- socket$nl_generic=0x3 errno=14 cover=1489 #0 [72950ms] -> syz_genetlink_get_family_id$ethtool(0x20001700, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [72951ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=8080 #0 [72952ms] -> sendmsg$ETHTOOL_MSG_STRSET_GET(0x3, 0x200002c0, 0x0) #0 [72953ms] <- sendmsg$ETHTOOL_MSG_STRSET_GET=0x18 errno=14 cover=6787 12:42:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x18, r1, 0xb0b, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 2021/11/11 12:42:59 result hanged=false: [72975ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2759 #0 [72989ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [72989ms] <- socket$nl_generic=0x3 errno=14 cover=1412 #0 [72993ms] -> syz_genetlink_get_family_id$ethtool(0x20001700, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [72993ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=8160 #0 [72995ms] -> sendmsg$ETHTOOL_MSG_STRSET_GET(0x3, 0x200002c0, 0x0) #0 [72995ms] <- sendmsg$ETHTOOL_MSG_STRSET_GET=0x18 errno=14 cover=6760 12:43:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x18, r1, 0xb0b, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 2021/11/11 12:43:00 result hanged=false: [73016ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2761 #0 [73024ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [73024ms] <- socket$nl_generic=0x3 errno=14 cover=1414 #0 [73026ms] -> syz_genetlink_get_family_id$ethtool(0x20001700, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [73027ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=8135 #0 [73031ms] -> sendmsg$ETHTOOL_MSG_STRSET_GET(0x3, 0x200002c0, 0x0) #0 [73031ms] <- sendmsg$ETHTOOL_MSG_STRSET_GET=0x18 errno=14 cover=6745 2021/11/11 12:43:00 result hanged=false: 2021/11/11 12:43:00 added new input for call #2 sendmsg$ETHTOOL_MSG_STRSET_GET to corpus: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x18, r1, 0xb0b, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:43:00 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000003c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) [73059ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2763 #0 [73067ms] -> syz_io_uring_setup(0x0, 0x200003c0, 0x20ffe000, 0x20ffd000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [73068ms] <- syz_io_uring_setup=0xffffffffffffffff errno=9 cover=1127 enabling collider #0 [73068ms] -> syz_io_uring_setup(0x0, 0x200003c0, 0x20ffe000, 0x20ffd000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [73068ms] <- syz_io_uring_setup=0xffffffffffffffff errno=9 cover=878 12:43:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) 2021/11/11 12:43:00 result hanged=false: [73091ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2765 #0 [73099ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x200001c0) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='flush,' #0 [73115ms] <- syz_mount_image$vfat=0x5 errno=0 cover=27739 #0 [73116ms] -> chdir(0x20000040) #0 [73116ms] <- chdir=0x0 errno=14 cover=665 #0 [73116ms] -> creat(0x20000080, 0x0) #0 [73117ms] <- creat=0x3 errno=14 cover=5515 #0 [73117ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [73123ms] <- pwrite64=0xe000 errno=14 cover=67219 enabling collider #0 [73232ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x200001c0) #0 [73235ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=16 cover=6106 #0 [73236ms] -> chdir(0x20000040) #0 [73236ms] <- chdir=0xffffffffffffffff errno=20 cover=620 pthread_create failed (errno 11) 2021/11/11 12:43:00 result hanged=false: 2021/11/11 12:43:00 #0: triaging type=7 2021/11/11 12:43:00 triaging input for call #3 pwrite64 (new signal=4) 12:43:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) umount(./446/file0) [73317ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2867 #0 [73328ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x200001c0) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='flush,' #0 [73346ms] <- syz_mount_image$vfat=0x5 errno=0 cover=31711 #0 [73352ms] -> chdir(0x20000040) #0 [73352ms] <- chdir=0x0 errno=14 cover=655 #0 [73352ms] -> creat(0x20000080, 0x0) #0 [73354ms] <- creat=0x3 errno=14 cover=5568 #0 [73355ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [73362ms] <- pwrite64=0xe000 errno=14 cover=74737 12:43:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) 2021/11/11 12:43:00 result hanged=false: umount(./447/file0) [73503ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2869 #0 [73516ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x200001c0) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='flush,' #0 [73532ms] <- syz_mount_image$vfat=0x5 errno=0 cover=43905 #0 [73541ms] -> chdir(0x20000040) #0 [73541ms] <- chdir=0x0 errno=14 cover=664 #0 [73541ms] -> creat(0x20000080, 0x0) #0 [73542ms] <- creat=0x3 errno=14 cover=5546 #0 [73542ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [73548ms] <- pwrite64=0xe000 errno=14 cover=74477 2021/11/11 12:43:00 result hanged=false: 12:43:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) umount(./448/file0) [73697ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2871 #0 [73710ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x200001c0) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='flush,' #0 [73726ms] <- syz_mount_image$vfat=0x5 errno=0 cover=32946 #0 [73730ms] -> chdir(0x20000040) #0 [73730ms] <- chdir=0x0 errno=14 cover=655 #0 [73730ms] -> creat(0x20000080, 0x0) #0 [73730ms] <- creat=0x3 errno=14 cover=5579 #0 [73731ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [73736ms] <- pwrite64=0xe000 errno=14 cover=74467 2021/11/11 12:43:00 result hanged=false: 2021/11/11 12:43:00 added new input for call #3 pwrite64 to corpus: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000001c0)={[{@fat=@flush}]}) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) 12:43:00 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) umount(./449/file0) [73904ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2873 #0 [73913ms] -> openat$hpet(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [73915ms] <- openat$hpet=0x3 errno=14 cover=1162 #0 [73916ms] -> ioctl$FIONREAD(0x3, 0x541b, 0x0) #0 [73916ms] <- ioctl$FIONREAD=0xffffffffffffffff errno=22 cover=988 enabling collider #0 [73917ms] -> openat$hpet(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [73917ms] <- openat$hpet=0x3 errno=14 cover=1122 2021/11/11 12:43:00 result hanged=false: 12:43:00 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 2021/11/11 12:43:00 #0: triaging type=7 2021/11/11 12:43:00 triaging input for call #1 ioctl$FIONREAD (new signal=7) [73937ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2875 #0 [73947ms] -> openat$hpet(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [73947ms] <- openat$hpet=0x3 errno=14 cover=1167 #0 [73951ms] -> ioctl$FIONREAD(0x3, 0x541b, 0x0) #0 [73951ms] <- ioctl$FIONREAD=0xffffffffffffffff errno=22 cover=112 12:43:00 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 2021/11/11 12:43:00 result hanged=false: [73972ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2877 #0 [73980ms] -> openat$hpet(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [73983ms] <- openat$hpet=0x3 errno=14 cover=1200 #0 [73984ms] -> ioctl$FIONREAD(0x3, 0x541b, 0x0) #0 [73984ms] <- ioctl$FIONREAD=0xffffffffffffffff errno=22 cover=112 12:43:00 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 2021/11/11 12:43:00 result hanged=false: [74005ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2879 #0 [74014ms] -> openat$hpet(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [74015ms] <- openat$hpet=0x3 errno=14 cover=1156 #0 [74015ms] -> ioctl$FIONREAD(0x3, 0x541b, 0x0) #0 [74015ms] <- ioctl$FIONREAD=0xffffffffffffffff errno=22 cover=112 2021/11/11 12:43:01 result hanged=false: 2021/11/11 12:43:01 added new input for call #1 ioctl$FIONREAD to corpus: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 12:43:01 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 2021/11/11 12:43:01 #0: triaging type=7 2021/11/11 12:43:01 triaging input for call #0 openat$hpet (new signal=2) [74034ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2881 #0 [74043ms] -> openat$hpet(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [74043ms] <- openat$hpet=0x3 errno=14 cover=1178 #0 [74044ms] -> ioctl$FIONREAD(0x3, 0x541b, 0x0) #0 [74044ms] <- ioctl$FIONREAD=0xffffffffffffffff errno=22 cover=112 12:43:01 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 2021/11/11 12:43:01 result hanged=false: [74063ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2883 #0 [74071ms] -> openat$hpet(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [74071ms] <- openat$hpet=0x3 errno=14 cover=1157 #0 [74073ms] -> ioctl$FIONREAD(0x3, 0x541b, 0x0) #0 [74073ms] <- ioctl$FIONREAD=0xffffffffffffffff errno=22 cover=112 12:43:01 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 2021/11/11 12:43:01 result hanged=false: [74092ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2885 #0 [74101ms] -> openat$hpet(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [74101ms] <- openat$hpet=0x3 errno=14 cover=1174 #0 [74102ms] -> ioctl$FIONREAD(0x3, 0x541b, 0x0) #0 [74102ms] <- ioctl$FIONREAD=0xffffffffffffffff errno=22 cover=112 2021/11/11 12:43:01 result hanged=false: 2021/11/11 12:43:01 added new input for call #0 openat$hpet to corpus: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 12:43:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="7f", 0x1}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfec4) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2, 0x3}) [74139ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2887 #0 [74147ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [74149ms] <- openat=0x3 errno=14 cover=6734 #0 [74150ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [74151ms] <- open=0x4 errno=14 cover=6807 #0 [74151ms] -> writev(0x3, 0x20000480, 0x1) #0 [74152ms] <- writev=0x1 errno=14 cover=3048 #0 [74152ms] -> write$binfmt_elf64(0x4, 0x20000180, 0xfec4) #0 [74162ms] <- write$binfmt_elf64=0xfec4 errno=14 cover=47591 #0 [74163ms] -> ioctl$EXT4_IOC_MOVE_EXT(0x3, 0xc028660f, 0x20000040) #0 [74163ms] <- ioctl$EXT4_IOC_MOVE_EXT=0xffffffffffffffff errno=22 cover=249 enabling collider #0 [74163ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [74163ms] <- openat=0xffffffffffffffff errno=17 cover=1026 #0 [74164ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [74164ms] <- open=0xffffffffffffffff errno=17 cover=1040 pthread_create failed (errno 11) 12:43:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="7f", 0x1}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfec4) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2, 0x3}) 2021/11/11 12:43:01 result hanged=false: 2021/11/11 12:43:01 #0: triaging type=7 2021/11/11 12:43:01 triaging input for call #4 ioctl$EXT4_IOC_MOVE_EXT (new signal=1) [74224ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2989 #0 [74232ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [74233ms] <- openat=0x3 errno=14 cover=6746 #0 [74235ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [74235ms] <- open=0x4 errno=14 cover=6715 #0 [74236ms] -> writev(0x3, 0x20000480, 0x1) #0 [74236ms] <- writev=0x1 errno=14 cover=2970 #0 [74237ms] -> write$binfmt_elf64(0x4, 0x20000180, 0xfec4) #0 [74244ms] <- write$binfmt_elf64=0xfec4 errno=14 cover=41212 #0 [74248ms] -> ioctl$EXT4_IOC_MOVE_EXT(0x3, 0xc028660f, 0x20000040) #0 [74248ms] <- ioctl$EXT4_IOC_MOVE_EXT=0xffffffffffffffff errno=22 cover=249 12:43:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="7f", 0x1}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfec4) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2, 0x3}) 2021/11/11 12:43:01 result hanged=false: [74272ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2991 #0 [74281ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [74282ms] <- openat=0x3 errno=14 cover=6808 #0 [74284ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [74286ms] <- open=0x4 errno=14 cover=10294 #0 [74289ms] -> writev(0x3, 0x20000480, 0x1) #0 [74289ms] <- writev=0x1 errno=14 cover=3022 #0 [74296ms] -> write$binfmt_elf64(0x4, 0x20000180, 0xfec4) #0 [74304ms] <- write$binfmt_elf64=0xfec4 errno=14 cover=41299 #0 [74308ms] -> ioctl$EXT4_IOC_MOVE_EXT(0x3, 0xc028660f, 0x20000040) #0 [74308ms] <- ioctl$EXT4_IOC_MOVE_EXT=0xffffffffffffffff errno=22 cover=249 12:43:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="7f", 0x1}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfec4) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2, 0x3}) 2021/11/11 12:43:01 result hanged=false: [74331ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2993 #0 [74341ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [74344ms] <- openat=0x3 errno=14 cover=6770 #0 [74345ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [74346ms] <- open=0x4 errno=14 cover=6702 #0 [74347ms] -> writev(0x3, 0x20000480, 0x1) #0 [74347ms] <- writev=0x1 errno=14 cover=2949 #0 [74348ms] -> write$binfmt_elf64(0x4, 0x20000180, 0xfec4) #0 [74357ms] <- write$binfmt_elf64=0xfec4 errno=14 cover=41197 #0 [74363ms] -> ioctl$EXT4_IOC_MOVE_EXT(0x3, 0xc028660f, 0x20000040) #0 [74363ms] <- ioctl$EXT4_IOC_MOVE_EXT=0xffffffffffffffff errno=22 cover=299 2021/11/11 12:43:01 result hanged=false: 2021/11/11 12:43:01 added new input for call #4 ioctl$EXT4_IOC_MOVE_EXT to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="7f", 0x1}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfec4) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2, 0x3}) 12:43:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000001c00)) [74385ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 2995 #0 [74395ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [74396ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12174 #0 [74401ms] -> mount(0x0, 0x20000000, 0x200000c0, 0x0, 0x0) #0 [74404ms] <- mount=0x0 errno=14 cover=13809 #0 [74407ms] -> stat(0x200005c0, 0x20001c00) #0 [74407ms] <- stat=0x0 errno=14 cover=1043 enabling collider #0 [74408ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [74409ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1428 #0 [74413ms] -> mount(0x0, 0x20000000, 0x200000c0, 0x0, 0x0) #0 [74416ms] <- mount=0x0 errno=14 cover=13659 pthread_create failed (errno 11) 12:43:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000001c00)) umount(./461/file0) 2021/11/11 12:43:01 result hanged=false: 2021/11/11 12:43:01 #0: triaging type=7 2021/11/11 12:43:01 triaging input for call #2 stat (new signal=8) umount(./461/file0) [74473ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3097 #0 [74484ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [74485ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12113 #0 [74487ms] -> mount(0x0, 0x20000000, 0x200000c0, 0x0, 0x0) #0 [74490ms] <- mount=0x0 errno=14 cover=13793 #0 [74496ms] -> stat(0x200005c0, 0x20001c00) #0 [74496ms] <- stat=0x0 errno=14 cover=1030 12:43:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000001c00)) 2021/11/11 12:43:01 result hanged=false: umount(./462/file0) [74525ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3099 #0 [74534ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [74535ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12233 #0 [74540ms] -> mount(0x0, 0x20000000, 0x200000c0, 0x0, 0x0) #0 [74543ms] <- mount=0x0 errno=14 cover=13682 #0 [74546ms] -> stat(0x200005c0, 0x20001c00) #0 [74546ms] <- stat=0x0 errno=14 cover=1029 12:43:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000001c00)) 2021/11/11 12:43:01 result hanged=false: umount(./463/file0) [74573ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3101 #0 [74581ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [74584ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12314 #0 [74585ms] -> mount(0x0, 0x20000000, 0x200000c0, 0x0, 0x0) #0 [74590ms] <- mount=0x0 errno=14 cover=24112 #0 [74591ms] -> stat(0x200005c0, 0x20001c00) #0 [74592ms] <- stat=0x0 errno=14 cover=965 2021/11/11 12:43:01 result hanged=false: 2021/11/11 12:43:01 added new input for call #2 stat to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000001c00)) umount(./464/file0) 12:43:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000001c00)) 2021/11/11 12:43:01 #0: triaging type=7 2021/11/11 12:43:01 triaging input for call #0 syz_mount_image$ext4 (new signal=2) [74614ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3103 #0 [74625ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [74628ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12223 #0 [74630ms] -> mount(0x0, 0x20000000, 0x200000c0, 0x0, 0x0) #0 [74633ms] <- mount=0x0 errno=14 cover=13700 #0 [74635ms] -> stat(0x200005c0, 0x20001c00) #0 [74635ms] <- stat=0x0 errno=14 cover=989 2021/11/11 12:43:01 result hanged=false: 12:43:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000001c00)) umount(./465/file0) [74662ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3105 #0 [74671ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [74673ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12332 #0 [74676ms] -> mount(0x0, 0x20000000, 0x200000c0, 0x0, 0x0) #0 [74681ms] <- mount=0x0 errno=14 cover=13676 #0 [74683ms] -> stat(0x200005c0, 0x20001c00) #0 [74684ms] <- stat=0x0 errno=14 cover=975 12:43:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000001c00)) 2021/11/11 12:43:01 result hanged=false: umount(./466/file0) [74707ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3107 #0 [74716ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [74719ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12009 #0 [74722ms] -> mount(0x0, 0x20000000, 0x200000c0, 0x0, 0x0) #0 [74726ms] <- mount=0x0 errno=14 cover=13663 #0 [74727ms] -> stat(0x200005c0, 0x20001c00) #0 [74727ms] <- stat=0x0 errno=14 cover=976 2021/11/11 12:43:01 result hanged=false: 2021/11/11 12:43:01 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000001c00)) umount(./467/file0) 12:43:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [74774ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3109 #0 [74783ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [74784ms] <- openat=0x3 errno=14 cover=6762 #0 [74788ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [74789ms] <- openat=0x4 errno=14 cover=2730 #0 [74789ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [74883ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [74887ms] -> ioctl$EXT4_IOC_MIGRATE(0x3, 0x6609) #0 [74887ms] <- ioctl$EXT4_IOC_MIGRATE=0xffffffffffffffff errno=22 cover=127 enabling collider #0 [74887ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [74888ms] <- openat=0x3 errno=14 cover=1201 #0 [74888ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [74889ms] <- openat=0x4 errno=14 cover=2265 pthread_create failed (errno 11) 2021/11/11 12:43:01 result hanged=false: 12:43:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 2021/11/11 12:43:01 #0: triaging type=7 2021/11/11 12:43:01 triaging input for call #3 ioctl$EXT4_IOC_MIGRATE (new signal=8) [74953ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3211 #0 [74964ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [74965ms] <- openat=0x3 errno=14 cover=6774 #0 [74967ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [74968ms] <- openat=0x4 errno=14 cover=2678 #0 [74968ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [75066ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [75086ms] -> ioctl$EXT4_IOC_MIGRATE(0x3, 0x6609) #0 [75088ms] <- ioctl$EXT4_IOC_MIGRATE=0xffffffffffffffff errno=22 cover=127 2021/11/11 12:43:02 result hanged=false: 12:43:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [75114ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3213 #0 [75125ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [75130ms] <- openat=0x3 errno=14 cover=6784 #0 [75132ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [75133ms] <- openat=0x4 errno=14 cover=2678 #0 [75134ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [75228ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [75250ms] -> ioctl$EXT4_IOC_MIGRATE(0x3, 0x6609) #0 [75250ms] <- ioctl$EXT4_IOC_MIGRATE=0xffffffffffffffff errno=22 cover=127 12:43:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 2021/11/11 12:43:02 result hanged=false: [75275ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3215 #0 [75285ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [75287ms] <- openat=0x3 errno=14 cover=6721 #0 [75288ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [75289ms] <- openat=0x4 errno=14 cover=2759 #0 [75290ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [75384ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [75404ms] -> ioctl$EXT4_IOC_MIGRATE(0x3, 0x6609) #0 [75405ms] <- ioctl$EXT4_IOC_MIGRATE=0xffffffffffffffff errno=22 cover=127 2021/11/11 12:43:02 result hanged=false: 2021/11/11 12:43:02 added new input for call #3 ioctl$EXT4_IOC_MIGRATE to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 12:43:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 2021/11/11 12:43:02 #0: triaging type=7 2021/11/11 12:43:02 triaging input for call #2 copy_file_range (new signal=10) [75432ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3217 #0 [75442ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [75447ms] <- openat=0x3 errno=14 cover=6750 #0 [75448ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [75448ms] <- openat=0x4 errno=14 cover=2697 #0 [75449ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [75544ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [75563ms] -> ioctl$EXT4_IOC_MIGRATE(0x3, 0x6609) #0 [75563ms] <- ioctl$EXT4_IOC_MIGRATE=0xffffffffffffffff errno=22 cover=127 12:43:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 2021/11/11 12:43:02 result hanged=false: [75585ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3219 #0 [75595ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [75596ms] <- openat=0x3 errno=14 cover=6745 #0 [75597ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [75597ms] <- openat=0x4 errno=14 cover=2709 #0 [75598ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [75692ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [75711ms] -> ioctl$EXT4_IOC_MIGRATE(0x3, 0x6609) #0 [75711ms] <- ioctl$EXT4_IOC_MIGRATE=0xffffffffffffffff errno=22 cover=127 2021/11/11 12:43:02 result hanged=false: 12:43:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [75734ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3221 #0 [75745ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [75749ms] <- openat=0x3 errno=14 cover=6675 #0 [75751ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [75752ms] <- openat=0x4 errno=14 cover=2749 #0 [75753ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [75848ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [75867ms] -> ioctl$EXT4_IOC_MIGRATE(0x3, 0x6609) #0 [75867ms] <- ioctl$EXT4_IOC_MIGRATE=0xffffffffffffffff errno=22 cover=127 2021/11/11 12:43:02 result hanged=false: 2021/11/11 12:43:02 added new input for call #2 copy_file_range to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 12:43:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [75908ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:02 #0: triaging type=7 2021/11/11 12:43:02 triaging input for call #0 openat (new signal=2) spawned worker pid 3223 #0 [75919ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [75920ms] <- openat=0x3 errno=14 cover=6642 #0 [75921ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [75921ms] <- openat=0x4 errno=14 cover=2690 #0 [75922ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [76012ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [76032ms] -> ioctl$EXT4_IOC_MIGRATE(0x3, 0x6609) #0 [76035ms] <- ioctl$EXT4_IOC_MIGRATE=0xffffffffffffffff errno=22 cover=127 2021/11/11 12:43:03 result hanged=false: 12:43:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [76060ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3225 #0 [76070ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [76074ms] <- openat=0x3 errno=14 cover=6722 #0 [76076ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [76077ms] <- openat=0x4 errno=14 cover=2767 #0 [76078ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [76173ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [76192ms] -> ioctl$EXT4_IOC_MIGRATE(0x3, 0x6609) #0 [76192ms] <- ioctl$EXT4_IOC_MIGRATE=0xffffffffffffffff errno=22 cover=127 12:43:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 2021/11/11 12:43:03 result hanged=false: [76214ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3227 #0 [76223ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [76228ms] <- openat=0x3 errno=14 cover=6752 #0 [76229ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [76229ms] <- openat=0x4 errno=14 cover=2666 #0 [76230ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [76324ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [76343ms] -> ioctl$EXT4_IOC_MIGRATE(0x3, 0x6609) #0 [76345ms] <- ioctl$EXT4_IOC_MIGRATE=0xffffffffffffffff errno=22 cover=127 2021/11/11 12:43:03 result hanged=false: 2021/11/11 12:43:03 added new input for call #0 openat to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 12:43:03 executing program 0: epoll_create(0x5) [76381ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3229 #0 [76390ms] -> epoll_create(0x5) #0 [76390ms] <- epoll_create=0x3 errno=14 cover=518 enabling collider #0 [76392ms] -> epoll_create(0x5) #0 [76393ms] <- epoll_create=0x3 errno=14 cover=596 12:43:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=""/24, 0x18}}], 0x1, 0x0, 0x0) [76412ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:03 result hanged=false: 2021/11/11 12:43:03 poll: candidates=8 inputs=0 signal=0 spawned worker pid 3231 #0 [76424ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x20000480) #0 [76425ms] <- socketpair$unix=0x0 errno=14 cover=3585 #0 [76425ms] -> sendmsg$unix(0x3, 0x20000100, 0x0) #0 [76425ms] <- sendmsg$unix=0x0 errno=14 cover=848 #0 [76426ms] -> mmap(0x20001000, 0x2000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) #0 [76427ms] <- mmap=0x20001000 errno=14 cover=2924 #0 [76427ms] -> recvmmsg(0x4, 0x20004400, 0x1, 0x0, 0x0) #0 [76428ms] <- recvmmsg=0x1 errno=14 cover=21945 enabling collider #0 [76430ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x20000480) #0 [76430ms] <- socketpair$unix=0x0 errno=14 cover=2901 #0 [76431ms] -> sendmsg$unix(0x3, 0x20000100, 0x0) #0 [76432ms] <- sendmsg$unix=0x0 errno=14 cover=870 pthread_create failed (errno 11) 2021/11/11 12:43:03 result hanged=false: 12:43:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=""/24, 0x18}}], 0x1, 0x0, 0x0) 2021/11/11 12:43:03 #0: triaging type=7 2021/11/11 12:43:03 triaging input for call #3 recvmmsg (new signal=77) [76485ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3333 #0 [76494ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x20000480) #0 [76497ms] <- socketpair$unix=0x0 errno=14 cover=3566 #0 [76498ms] -> sendmsg$unix(0x3, 0x20000100, 0x0) #0 [76499ms] <- sendmsg$unix=0x0 errno=14 cover=848 #0 [76499ms] -> mmap(0x20001000, 0x2000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) #0 [76500ms] <- mmap=0x20001000 errno=14 cover=2568 #0 [76500ms] -> recvmmsg(0x4, 0x20004400, 0x1, 0x0, 0x0) #0 [76501ms] <- recvmmsg=0x1 errno=14 cover=1518 12:43:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=""/24, 0x18}}], 0x1, 0x0, 0x0) 2021/11/11 12:43:03 result hanged=false: [76526ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3335 #0 [76536ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x20000480) #0 [76536ms] <- socketpair$unix=0x0 errno=14 cover=3632 #0 [76537ms] -> sendmsg$unix(0x3, 0x20000100, 0x0) #0 [76538ms] <- sendmsg$unix=0x0 errno=14 cover=946 #0 [76539ms] -> mmap(0x20001000, 0x2000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) #0 [76539ms] <- mmap=0x20001000 errno=14 cover=2394 #0 [76543ms] -> recvmmsg(0x4, 0x20004400, 0x1, 0x0, 0x0) #0 [76543ms] <- recvmmsg=0x1 errno=14 cover=1518 12:43:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=""/24, 0x18}}], 0x1, 0x0, 0x0) 2021/11/11 12:43:03 result hanged=false: [76570ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3337 #0 [76578ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x20000480) #0 [76580ms] <- socketpair$unix=0x0 errno=14 cover=3639 #0 [76582ms] -> sendmsg$unix(0x3, 0x20000100, 0x0) #0 [76582ms] <- sendmsg$unix=0x0 errno=14 cover=1076 #0 [76584ms] -> mmap(0x20001000, 0x2000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) #0 [76584ms] <- mmap=0x20001000 errno=14 cover=2401 #0 [76586ms] -> recvmmsg(0x4, 0x20004400, 0x1, 0x0, 0x0) #0 [76586ms] <- recvmmsg=0x1 errno=14 cover=1600 2021/11/11 12:43:03 result hanged=false: 2021/11/11 12:43:03 added new input for call #3 recvmmsg to corpus: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=""/24, 0x18}}], 0x1, 0x0, 0x0) 2021/11/11 12:43:03 #0: triaging type=7 12:43:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=""/24, 0x18}}], 0x1, 0x0, 0x0) [76613ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3339 2021/11/11 12:43:03 triaging input for call #2 mmap (new signal=7) #0 [76622ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x20000480) #0 [76623ms] <- socketpair$unix=0x0 errno=14 cover=3617 #0 [76624ms] -> sendmsg$unix(0x3, 0x20000100, 0x0) #0 [76624ms] <- sendmsg$unix=0x0 errno=14 cover=848 #0 [76624ms] -> mmap(0x20001000, 0x2000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) #0 [76625ms] <- mmap=0x20001000 errno=14 cover=2597 #0 [76625ms] -> recvmmsg(0x4, 0x20004400, 0x1, 0x0, 0x0) #0 [76626ms] <- recvmmsg=0x1 errno=14 cover=2394 12:43:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=""/24, 0x18}}], 0x1, 0x0, 0x0) 2021/11/11 12:43:03 result hanged=false: [76647ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3341 #0 [76656ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x20000480) #0 [76657ms] <- socketpair$unix=0x0 errno=14 cover=3584 #0 [76659ms] -> sendmsg$unix(0x3, 0x20000100, 0x0) #0 [76659ms] <- sendmsg$unix=0x0 errno=14 cover=848 #0 [76659ms] -> mmap(0x20001000, 0x2000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) #0 [76660ms] <- mmap=0x20001000 errno=14 cover=2311 #0 [76661ms] -> recvmmsg(0x4, 0x20004400, 0x1, 0x0, 0x0) #0 [76662ms] <- recvmmsg=0x1 errno=14 cover=1571 12:43:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=""/24, 0x18}}], 0x1, 0x0, 0x0) 2021/11/11 12:43:03 result hanged=false: [76683ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3343 #0 [76692ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x20000480) #0 [76693ms] <- socketpair$unix=0x0 errno=14 cover=3586 #0 [76694ms] -> sendmsg$unix(0x3, 0x20000100, 0x0) #0 [76694ms] <- sendmsg$unix=0x0 errno=14 cover=881 #0 [76695ms] -> mmap(0x20001000, 0x2000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) #0 [76695ms] <- mmap=0x20001000 errno=14 cover=2228 #0 [76696ms] -> recvmmsg(0x4, 0x20004400, 0x1, 0x0, 0x0) #0 [76696ms] <- recvmmsg=0x1 errno=14 cover=1467 2021/11/11 12:43:03 result hanged=false: 2021/11/11 12:43:03 added new input for call #2 mmap to corpus: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=""/24, 0x18}}], 0x1, 0x0, 0x0) 2021/11/11 12:43:03 #0: triaging type=7 2021/11/11 12:43:03 triaging input for call #1 sendmsg$unix (new signal=6) 12:43:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=""/24, 0x18}}], 0x1, 0x0, 0x0) [76723ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3345 #0 [76733ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x20000480) #0 [76734ms] <- socketpair$unix=0x0 errno=14 cover=3599 #0 [76736ms] -> sendmsg$unix(0x3, 0x20000100, 0x0) #0 [76736ms] <- sendmsg$unix=0x0 errno=14 cover=1043 #0 [76737ms] -> mmap(0x20001000, 0x2000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) #0 [76737ms] <- mmap=0x20001000 errno=14 cover=2858 #0 [76738ms] -> recvmmsg(0x4, 0x20004400, 0x1, 0x0, 0x0) #0 [76738ms] <- recvmmsg=0x1 errno=14 cover=1518 12:43:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=""/24, 0x18}}], 0x1, 0x0, 0x0) 2021/11/11 12:43:03 result hanged=false: [76758ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3347 #0 [76769ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x20000480) #0 [76771ms] <- socketpair$unix=0x0 errno=14 cover=3636 #0 [76772ms] -> sendmsg$unix(0x3, 0x20000100, 0x0) #0 [76773ms] <- sendmsg$unix=0x0 errno=14 cover=870 #0 [76773ms] -> mmap(0x20001000, 0x2000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) #0 [76774ms] <- mmap=0x20001000 errno=14 cover=2603 #0 [76775ms] -> recvmmsg(0x4, 0x20004400, 0x1, 0x0, 0x0) #0 [76775ms] <- recvmmsg=0x1 errno=14 cover=1575 12:43:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=""/24, 0x18}}], 0x1, 0x0, 0x0) 2021/11/11 12:43:03 result hanged=false: [76796ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3349 #0 [76804ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x20000480) #0 [76805ms] <- socketpair$unix=0x0 errno=14 cover=3741 #0 [76806ms] -> sendmsg$unix(0x3, 0x20000100, 0x0) #0 [76806ms] <- sendmsg$unix=0x0 errno=14 cover=848 #0 [76806ms] -> mmap(0x20001000, 0x2000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) #0 [76808ms] <- mmap=0x20001000 errno=14 cover=8629 #0 [76808ms] -> recvmmsg(0x4, 0x20004400, 0x1, 0x0, 0x0) #0 [76809ms] <- recvmmsg=0x1 errno=14 cover=1518 2021/11/11 12:43:03 result hanged=false: 2021/11/11 12:43:03 added new input for call #1 sendmsg$unix to corpus: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=""/24, 0x18}}], 0x1, 0x0, 0x0) 12:43:03 executing program 0: utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) [76835ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3351 #0 [76843ms] -> utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) #0 [76843ms] <- utimensat=0xffffffffffffffff errno=22 cover=39 enabling collider #0 [76844ms] -> utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) #0 [76844ms] <- utimensat=0xffffffffffffffff errno=22 cover=39 12:43:03 executing program 0: utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) 2021/11/11 12:43:03 result hanged=false: 2021/11/11 12:43:03 #0: triaging type=7 2021/11/11 12:43:03 triaging input for call #0 utimensat (new signal=1) [76863ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3353 #0 [76874ms] -> utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) #0 [76874ms] <- utimensat=0xffffffffffffffff errno=22 cover=39 12:43:03 executing program 0: utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) 2021/11/11 12:43:03 result hanged=false: [76893ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3355 #0 [76903ms] -> utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) #0 [76906ms] <- utimensat=0xffffffffffffffff errno=22 cover=39 12:43:03 executing program 0: utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) 2021/11/11 12:43:03 result hanged=false: [76926ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3357 #0 [76935ms] -> utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) #0 [76936ms] <- utimensat=0xffffffffffffffff errno=22 cover=39 2021/11/11 12:43:03 result hanged=false: 2021/11/11 12:43:03 added new input for call #0 utimensat to corpus: utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) 12:43:03 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setsig(r0, 0xa, 0x17) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0, 0x0) [76963ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3359 #0 [76971ms] -> creat(0x20000000, 0x0) #0 [76972ms] <- creat=0x3 errno=14 cover=6711 #0 [76974ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [76975ms] <- perf_event_open=0x4 errno=14 cover=7458 #0 [76975ms] -> sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) #0 [76975ms] <- sendfile=0xffffffffffffffff errno=9 cover=77 #0 [76976ms] -> fcntl$setlease(0x3, 0x400, 0x1) #0 [76977ms] <- fcntl$setlease=0x0 errno=14 cover=1449 #0 [76977ms] -> fcntl$setsig(0x3, 0xa, 0x17) #0 [76977ms] <- fcntl$setsig=0x0 errno=14 cover=101 #0 [76978ms] -> openat$dir(0xffffffffffffff9c, 0x20000240, 0x0, 0x0) #0 [78082ms] <- openat$dir=0x5 errno=14 cover=262143 enabling collider #0 [78089ms] -> creat(0x20000000, 0x0) #0 [78092ms] <- creat=0x3 errno=14 cover=5002 #0 [78093ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [78096ms] <- perf_event_open=0x4 errno=14 cover=7213 pthread_create failed (errno 11) 2021/11/11 12:43:05 result hanged=false: 2021/11/11 12:43:05 #0: triaging type=7 12:43:05 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setsig(r0, 0xa, 0x17) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0, 0x0) 2021/11/11 12:43:05 triaging input for call #5 openat$dir (new signal=36) iptable filter/10: resetting iptable mangle/10: resetting [78163ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3461 #0 [78173ms] -> creat(0x20000000, 0x0) #0 [78174ms] <- creat=0x3 errno=14 cover=6693 #0 [78175ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [78177ms] <- perf_event_open=0x4 errno=14 cover=6835 #0 [78178ms] -> sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) #0 [78178ms] <- sendfile=0xffffffffffffffff errno=9 cover=77 #0 [78178ms] -> fcntl$setlease(0x3, 0x400, 0x1) #0 [78178ms] <- fcntl$setlease=0x0 errno=14 cover=1539 #0 [78179ms] -> fcntl$setsig(0x3, 0xa, 0x17) #0 [78179ms] <- fcntl$setsig=0x0 errno=14 cover=101 #0 [78179ms] -> openat$dir(0xffffffffffffff9c, 0x20000240, 0x0, 0x0) 2021/11/11 12:43:06 poll: candidates=0 inputs=0 signal=0 #0 [79297ms] <- openat$dir=0x5 errno=14 cover=249213 2021/11/11 12:43:06 result hanged=false: 12:43:06 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setsig(r0, 0xa, 0x17) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0, 0x0) [79331ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3463 #0 [79340ms] -> creat(0x20000000, 0x0) #0 [79341ms] <- creat=0x3 errno=14 cover=6735 #0 [79343ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [79344ms] <- perf_event_open=0x4 errno=14 cover=6665 #0 [79345ms] -> sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) #0 [79345ms] <- sendfile=0xffffffffffffffff errno=9 cover=77 #0 [79345ms] -> fcntl$setlease(0x3, 0x400, 0x1) #0 [79345ms] <- fcntl$setlease=0x0 errno=14 cover=1489 #0 [79346ms] -> fcntl$setsig(0x3, 0xa, 0x17) #0 [79347ms] <- fcntl$setsig=0x0 errno=14 cover=101 #0 [79347ms] -> openat$dir(0xffffffffffffff9c, 0x20000240, 0x0, 0x0) #0 [80465ms] <- openat$dir=0x5 errno=14 cover=242588 12:43:07 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setsig(r0, 0xa, 0x17) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0, 0x0) 2021/11/11 12:43:07 result hanged=false: [80493ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3465 #0 [80503ms] -> creat(0x20000000, 0x0) #0 [80504ms] <- creat=0x3 errno=14 cover=6768 #0 [80505ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [80507ms] <- perf_event_open=0x4 errno=14 cover=7033 #0 [80508ms] -> sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) #0 [80508ms] <- sendfile=0xffffffffffffffff errno=9 cover=77 #0 [80508ms] -> fcntl$setlease(0x3, 0x400, 0x1) #0 [80509ms] <- fcntl$setlease=0x0 errno=14 cover=1449 #0 [80510ms] -> fcntl$setsig(0x3, 0xa, 0x17) #0 [80510ms] <- fcntl$setsig=0x0 errno=14 cover=101 #0 [80510ms] -> openat$dir(0xffffffffffffff9c, 0x20000240, 0x0, 0x0) #0 [81629ms] <- openat$dir=0x5 errno=14 cover=262143 2021/11/11 12:43:08 result hanged=false: 2021/11/11 12:43:08 added new input for call #5 openat$dir to corpus: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setsig(r0, 0xa, 0x17) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0, 0x0) 2021/11/11 12:43:08 #0: triaging type=7 2021/11/11 12:43:08 triaging input for call #3 fcntl$setlease (new signal=10) 12:43:08 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setsig(r0, 0xa, 0x17) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0, 0x0) [81669ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3467 #0 [81680ms] -> creat(0x20000000, 0x0) #0 [81681ms] <- creat=0x3 errno=14 cover=6706 #0 [81682ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [81685ms] <- perf_event_open=0x4 errno=14 cover=6856 #0 [81686ms] -> sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) #0 [81686ms] <- sendfile=0xffffffffffffffff errno=9 cover=77 #0 [81686ms] -> fcntl$setlease(0x3, 0x400, 0x1) #0 [81686ms] <- fcntl$setlease=0x0 errno=14 cover=1449 #0 [81687ms] -> fcntl$setsig(0x3, 0xa, 0x17) #0 [81687ms] <- fcntl$setsig=0x0 errno=14 cover=101 #0 [81688ms] -> openat$dir(0xffffffffffffff9c, 0x20000240, 0x0, 0x0) #0 [82804ms] <- openat$dir=0x5 errno=14 cover=227378 12:43:09 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setsig(r0, 0xa, 0x17) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0, 0x0) 2021/11/11 12:43:09 result hanged=false: [82835ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3469 #0 [82845ms] -> creat(0x20000000, 0x0) #0 [82846ms] <- creat=0x3 errno=14 cover=6739 #0 [82847ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [82848ms] <- perf_event_open=0x4 errno=14 cover=6731 #0 [82849ms] -> sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) #0 [82849ms] <- sendfile=0xffffffffffffffff errno=9 cover=77 #0 [82849ms] -> fcntl$setlease(0x3, 0x400, 0x1) #0 [82850ms] <- fcntl$setlease=0x0 errno=14 cover=1438 #0 [82850ms] -> fcntl$setsig(0x3, 0xa, 0x17) #0 [82850ms] <- fcntl$setsig=0x0 errno=14 cover=101 #0 [82850ms] -> openat$dir(0xffffffffffffff9c, 0x20000240, 0x0, 0x0) #0 [83966ms] <- openat$dir=0x5 errno=14 cover=230012 12:43:10 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setsig(r0, 0xa, 0x17) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0, 0x0) 2021/11/11 12:43:10 result hanged=false: [83993ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3471 #0 [84003ms] -> creat(0x20000000, 0x0) #0 [84005ms] <- creat=0x3 errno=14 cover=6659 #0 [84006ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [84008ms] <- perf_event_open=0x4 errno=14 cover=7091 #0 [84009ms] -> sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) #0 [84009ms] <- sendfile=0xffffffffffffffff errno=9 cover=77 #0 [84009ms] -> fcntl$setlease(0x3, 0x400, 0x1) #0 [84009ms] <- fcntl$setlease=0x0 errno=14 cover=1463 #0 [84010ms] -> fcntl$setsig(0x3, 0xa, 0x17) #0 [84010ms] <- fcntl$setsig=0x0 errno=14 cover=101 #0 [84011ms] -> openat$dir(0xffffffffffffff9c, 0x20000240, 0x0, 0x0) #0 [85125ms] <- openat$dir=0x5 errno=14 cover=198704 2021/11/11 12:43:12 result hanged=false: 2021/11/11 12:43:12 added new input for call #3 fcntl$setlease to corpus: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setsig(r0, 0xa, 0x17) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0, 0x0) 12:43:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) [85163ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3473 #0 [85174ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [85174ms] <- socket$inet6_tcp=0x3 errno=14 cover=1724 #0 [85175ms] -> pkey_mprotect(0x20000000, 0x1000, 0x0, 0xffffffffffffffff) #0 [85176ms] <- pkey_mprotect=0x0 errno=14 cover=342 SIGSEGV on 0x20000000, skipping #0 [85176ms] -> setsockopt$inet6_tcp_TCP_ULP(0x3, 0x6, 0x1f, 0x20000000, 0x4) #0 [85176ms] <- setsockopt$inet6_tcp_TCP_ULP=0xffffffffffffffff errno=14 cover=265 enabling collider #0 [85176ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [85177ms] <- socket$inet6_tcp=0x3 errno=14 cover=1767 SIGSEGV on 0x20000000, skipping #0 [85178ms] -> pkey_mprotect(0x20000000, 0x1000, 0x0, 0xffffffffffffffff) #0 [85179ms] <- pkey_mprotect=0x0 errno=14 cover=83 pthread_create failed (errno 11) 12:43:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) [85233ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:12 result hanged=false: 2021/11/11 12:43:12 #0: triaging type=7 2021/11/11 12:43:12 triaging input for call #2 setsockopt$inet6_tcp_TCP_ULP (new signal=5) spawned worker pid 3575 #0 [85244ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [85247ms] <- socket$inet6_tcp=0x3 errno=14 cover=1724 #0 [85249ms] -> pkey_mprotect(0x20000000, 0x1000, 0x0, 0xffffffffffffffff) #0 [85249ms] <- pkey_mprotect=0x0 errno=14 cover=367 SIGSEGV on 0x20000000, skipping #0 [85249ms] -> setsockopt$inet6_tcp_TCP_ULP(0x3, 0x6, 0x1f, 0x20000000, 0x4) #0 [85249ms] <- setsockopt$inet6_tcp_TCP_ULP=0xffffffffffffffff errno=14 cover=265 12:43:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) 2021/11/11 12:43:12 result hanged=false: [85271ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3577 #0 [85281ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [85282ms] <- socket$inet6_tcp=0x3 errno=14 cover=1746 #0 [85283ms] -> pkey_mprotect(0x20000000, 0x1000, 0x0, 0xffffffffffffffff) #0 [85283ms] <- pkey_mprotect=0x0 errno=14 cover=429 SIGSEGV on 0x20000000, skipping #0 [85285ms] -> setsockopt$inet6_tcp_TCP_ULP(0x3, 0x6, 0x1f, 0x20000000, 0x4) #0 [85285ms] <- setsockopt$inet6_tcp_TCP_ULP=0xffffffffffffffff errno=14 cover=265 2021/11/11 12:43:12 result hanged=false: 12:43:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) [85307ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3579 #0 [85317ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [85319ms] <- socket$inet6_tcp=0x3 errno=14 cover=1779 #0 [85320ms] -> pkey_mprotect(0x20000000, 0x1000, 0x0, 0xffffffffffffffff) #0 [85321ms] <- pkey_mprotect=0x0 errno=14 cover=353 SIGSEGV on 0x20000000, skipping #0 [85321ms] -> setsockopt$inet6_tcp_TCP_ULP(0x3, 0x6, 0x1f, 0x20000000, 0x4) #0 [85321ms] <- setsockopt$inet6_tcp_TCP_ULP=0xffffffffffffffff errno=14 cover=265 2021/11/11 12:43:12 result hanged=false: 2021/11/11 12:43:12 added new input for call #2 setsockopt$inet6_tcp_TCP_ULP to corpus: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) 12:43:12 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind(r0, &(0x7f0000001780)=@nl=@unspec, 0x80) [85347ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3581 #0 [85356ms] -> socket$inet(0x2, 0x1, 0x0) #0 [85357ms] <- socket$inet=0x3 errno=14 cover=1769 #0 [85362ms] -> bind(0x3, 0x20001780, 0x80) #0 [85362ms] <- bind=0x0 errno=14 cover=370 enabling collider #0 [85364ms] -> socket$inet(0x2, 0x1, 0x0) #0 [85364ms] <- socket$inet=0x3 errno=14 cover=1858 2021/11/11 12:43:12 result hanged=false: 2021/11/11 12:43:12 #0: triaging type=7 2021/11/11 12:43:12 triaging input for call #1 bind (new signal=7) 12:43:12 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind(r0, &(0x7f0000001780)=@nl=@unspec, 0x80) [85394ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3583 #0 [85405ms] -> socket$inet(0x2, 0x1, 0x0) #0 [85405ms] <- socket$inet=0x3 errno=14 cover=1766 #0 [85406ms] -> bind(0x3, 0x20001780, 0x80) #0 [85407ms] <- bind=0x0 errno=14 cover=370 12:43:12 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind(r0, &(0x7f0000001780)=@nl=@unspec, 0x80) 2021/11/11 12:43:12 result hanged=false: [85428ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3585 #0 [85437ms] -> socket$inet(0x2, 0x1, 0x0) #0 [85437ms] <- socket$inet=0x3 errno=14 cover=1722 #0 [85438ms] -> bind(0x3, 0x20001780, 0x80) #0 [85438ms] <- bind=0x0 errno=14 cover=381 2021/11/11 12:43:12 result hanged=false: 12:43:12 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind(r0, &(0x7f0000001780)=@nl=@unspec, 0x80) [85459ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3587 #0 [85468ms] -> socket$inet(0x2, 0x1, 0x0) #0 [85469ms] <- socket$inet=0x3 errno=14 cover=1765 #0 [85472ms] -> bind(0x3, 0x20001780, 0x80) #0 [85472ms] <- bind=0x0 errno=14 cover=370 2021/11/11 12:43:12 result hanged=false: 2021/11/11 12:43:12 added new input for call #1 bind to corpus: r0 = socket$inet(0x2, 0x1, 0x0) bind(r0, &(0x7f0000001780)=@nl=@unspec, 0x80) 12:43:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) [85500ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3589 #0 [85508ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [85510ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6318 #0 [85511ms] -> sendmsg$NL802154_CMD_NEW_SEC_KEY(0x4, 0x0, 0x0) #0 [85511ms] <- sendmsg$NL802154_CMD_NEW_SEC_KEY=0xffffffffffffffff errno=14 cover=432 #0 [85511ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [85514ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5586 #0 [85514ms] -> sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, 0x20000680, 0x0) #0 [85515ms] <- sendmsg$IEEE802154_LLSEC_ADD_KEY=0xffffffffffffffff errno=9 cover=52 #0 [85515ms] -> sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) #0 [85515ms] <- sendmsg$IEEE802154_ADD_IFACE=0xffffffffffffffff errno=9 cover=52 #0 [85516ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [85516ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0xffffffffffffffff errno=14 cover=3909 enabling collider #0 [85517ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [85518ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5374 #0 [85519ms] -> sendmsg$NL802154_CMD_NEW_SEC_KEY(0x4, 0x0, 0x0) #0 [85520ms] <- sendmsg$NL802154_CMD_NEW_SEC_KEY=0xffffffffffffffff errno=14 cover=432 pthread_create failed (errno 11) 12:43:12 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 2021/11/11 12:43:12 result hanged=false: [85576ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3691 #0 [85585ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [85589ms] <- perf_event_open=0x3 errno=14 cover=6547 #0 [85589ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [85591ms] <- perf_event_open=0x4 errno=14 cover=6613 #0 [85591ms] -> ioctl$PERF_EVENT_IOC_SET_OUTPUT(0x3, 0x2405, 0x4) #0 [85591ms] <- ioctl$PERF_EVENT_IOC_SET_OUTPUT=0xffffffffffffffff errno=22 cover=2695 enabling collider #0 [85600ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [85604ms] <- perf_event_open=0x3 errno=14 cover=18704 #0 [85605ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [85606ms] <- perf_event_open=0x4 errno=14 cover=6597 pthread_create failed (errno 11) 12:43:12 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 2021/11/11 12:43:12 result hanged=false: 2021/11/11 12:43:12 #0: triaging type=7 2021/11/11 12:43:12 triaging input for call #2 ioctl$PERF_EVENT_IOC_SET_OUTPUT (new signal=25) [85674ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3793 #0 [85686ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [85687ms] <- perf_event_open=0x3 errno=14 cover=6565 #0 [85688ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [85689ms] <- perf_event_open=0x4 errno=14 cover=6504 #0 [85690ms] -> ioctl$PERF_EVENT_IOC_SET_OUTPUT(0x3, 0x2405, 0x4) #0 [85690ms] <- ioctl$PERF_EVENT_IOC_SET_OUTPUT=0xffffffffffffffff errno=22 cover=445 12:43:12 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 2021/11/11 12:43:12 result hanged=false: [85727ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3795 #0 [85738ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [85738ms] <- perf_event_open=0x3 errno=14 cover=6551 #0 [85740ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [85741ms] <- perf_event_open=0x4 errno=14 cover=6519 #0 [85742ms] -> ioctl$PERF_EVENT_IOC_SET_OUTPUT(0x3, 0x2405, 0x4) #0 [85742ms] <- ioctl$PERF_EVENT_IOC_SET_OUTPUT=0xffffffffffffffff errno=22 cover=445 12:43:12 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 2021/11/11 12:43:12 result hanged=false: [85775ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3797 #0 [85785ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [85788ms] <- perf_event_open=0x3 errno=14 cover=6523 #0 [85789ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [85790ms] <- perf_event_open=0x4 errno=14 cover=6522 #0 [85791ms] -> ioctl$PERF_EVENT_IOC_SET_OUTPUT(0x3, 0x2405, 0x4) #0 [85791ms] <- ioctl$PERF_EVENT_IOC_SET_OUTPUT=0xffffffffffffffff errno=22 cover=445 2021/11/11 12:43:12 result hanged=false: 2021/11/11 12:43:12 added new input for call #2 ioctl$PERF_EVENT_IOC_SET_OUTPUT to corpus: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 12:43:12 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 2021/11/11 12:43:12 #0: triaging type=7 2021/11/11 12:43:12 triaging input for call #1 perf_event_open (new signal=7) [85830ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3799 #0 [85839ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [85840ms] <- perf_event_open=0x3 errno=14 cover=6472 #0 [85842ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [85843ms] <- perf_event_open=0x4 errno=14 cover=6439 #0 [85844ms] -> ioctl$PERF_EVENT_IOC_SET_OUTPUT(0x3, 0x2405, 0x4) #0 [85844ms] <- ioctl$PERF_EVENT_IOC_SET_OUTPUT=0xffffffffffffffff errno=22 cover=445 12:43:12 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 2021/11/11 12:43:12 result hanged=false: [85874ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3801 #0 [85886ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [85887ms] <- perf_event_open=0x3 errno=14 cover=6767 #0 [85889ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [85889ms] <- perf_event_open=0x4 errno=14 cover=7074 #0 [85891ms] -> ioctl$PERF_EVENT_IOC_SET_OUTPUT(0x3, 0x2405, 0x4) #0 [85891ms] <- ioctl$PERF_EVENT_IOC_SET_OUTPUT=0xffffffffffffffff errno=22 cover=445 2021/11/11 12:43:12 result hanged=false: 12:43:12 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [85920ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3803 #0 [85930ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [85931ms] <- perf_event_open=0x3 errno=14 cover=7997 #0 [85932ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [85932ms] <- perf_event_open=0x4 errno=14 cover=6564 #0 [85933ms] -> ioctl$PERF_EVENT_IOC_SET_OUTPUT(0x3, 0x2405, 0x4) #0 [85933ms] <- ioctl$PERF_EVENT_IOC_SET_OUTPUT=0xffffffffffffffff errno=22 cover=445 2021/11/11 12:43:12 result hanged=false: 2021/11/11 12:43:12 added new input for call #1 perf_event_open to corpus: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 12:43:12 executing program 0: timer_create(0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) [85968ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3805 #0 [85979ms] -> timer_create(0x0, 0x20000c40, 0x0) #0 [85980ms] <- timer_create=0xffffffffffffffff errno=22 cover=385 enabling collider #0 [85981ms] -> timer_create(0x0, 0x20000c40, 0x0) #0 [85981ms] <- timer_create=0xffffffffffffffff errno=22 cover=385 2021/11/11 12:43:12 result hanged=false: 2021/11/11 12:43:12 #0: triaging type=7 12:43:12 executing program 0: timer_create(0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 2021/11/11 12:43:12 triaging input for call #0 timer_create (new signal=4) [86009ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3807 #0 [86023ms] -> timer_create(0x0, 0x20000c40, 0x0) #0 [86024ms] <- timer_create=0xffffffffffffffff errno=22 cover=385 2021/11/11 12:43:13 result hanged=false: 12:43:13 executing program 0: timer_create(0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) [86046ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3809 #0 [86055ms] -> timer_create(0x0, 0x20000c40, 0x0) #0 [86056ms] <- timer_create=0xffffffffffffffff errno=22 cover=385 2021/11/11 12:43:13 result hanged=false: 12:43:13 executing program 0: timer_create(0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) [86078ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3811 #0 [86089ms] -> timer_create(0x0, 0x20000c40, 0x0) #0 [86089ms] <- timer_create=0xffffffffffffffff errno=22 cover=374 2021/11/11 12:43:13 result hanged=false: 2021/11/11 12:43:13 added new input for call #0 timer_create to corpus: timer_create(0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 12:43:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) [86115ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:13 poll: candidates=8 inputs=0 signal=0 spawned worker pid 3813 #0 [86127ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [86128ms] <- socket$inet_tcp=0x3 errno=14 cover=1744 #0 [86129ms] -> socket$packet(0x11, 0x3, 0x300) #0 [86129ms] <- socket$packet=0x4 errno=14 cover=1854 #0 [86129ms] -> setsockopt$packet_fanout(0x4, 0x107, 0x12, 0x200000c0, 0x4) #0 [86130ms] <- setsockopt$packet_fanout=0x0 errno=14 cover=224 #0 [86130ms] -> setsockopt$packet_fanout_data(0x4, 0x107, 0x16, 0x20000080, 0x10) #0 [86195ms] <- setsockopt$packet_fanout_data=0x0 errno=14 cover=262143 #0 [86196ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000080, 0x4) #0 [86197ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [86197ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [86197ms] <- connect$inet=0x0 errno=14 cover=1222 #0 [86205ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000040, 0x4) #0 [86205ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=3804 enabling collider #0 [86220ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [86220ms] <- socket$inet_tcp=0x3 errno=14 cover=1869 #0 [86221ms] -> socket$packet(0x11, 0x3, 0x300) #0 [86223ms] <- socket$packet=0x4 errno=14 cover=1874 pthread_create failed (errno 11) 2021/11/11 12:43:13 result hanged=false: 12:43:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 2021/11/11 12:43:13 #0: triaging type=7 2021/11/11 12:43:13 triaging input for call #6 setsockopt$inet_tcp_TCP_REPAIR (new signal=30) iptable filter/2: resetting iptable mangle/2: resetting [86290ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3915 #0 [86300ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [86304ms] <- socket$inet_tcp=0x3 errno=14 cover=1711 #0 [86305ms] -> socket$packet(0x11, 0x3, 0x300) #0 [86306ms] <- socket$packet=0x4 errno=14 cover=1807 #0 [86307ms] -> setsockopt$packet_fanout(0x4, 0x107, 0x12, 0x200000c0, 0x4) #0 [86307ms] <- setsockopt$packet_fanout=0x0 errno=14 cover=235 #0 [86307ms] -> setsockopt$packet_fanout_data(0x4, 0x107, 0x16, 0x20000080, 0x10) #0 [86308ms] <- setsockopt$packet_fanout_data=0x0 errno=14 cover=4313 #0 [86308ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000080, 0x4) #0 [86308ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [86309ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [86309ms] <- connect$inet=0x0 errno=14 cover=1175 #0 [86310ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000040, 0x4) #0 [86310ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=1545 2021/11/11 12:43:13 result hanged=false: 12:43:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) iptable filter/2: resetting iptable mangle/2: resetting [86340ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3917 #0 [86349ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [86349ms] <- socket$inet_tcp=0x3 errno=14 cover=1733 #0 [86351ms] -> socket$packet(0x11, 0x3, 0x300) #0 [86352ms] <- socket$packet=0x4 errno=14 cover=1947 #0 [86354ms] -> setsockopt$packet_fanout(0x4, 0x107, 0x12, 0x200000c0, 0x4) #0 [86354ms] <- setsockopt$packet_fanout=0x0 errno=14 cover=235 #0 [86355ms] -> setsockopt$packet_fanout_data(0x4, 0x107, 0x16, 0x20000080, 0x10) #0 [86356ms] <- setsockopt$packet_fanout_data=0x0 errno=14 cover=3281 #0 [86357ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000080, 0x4) #0 [86357ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [86358ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [86358ms] <- connect$inet=0x0 errno=14 cover=1121 #0 [86360ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000040, 0x4) #0 [86361ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=1545 iptable filter/2: resetting iptable mangle/2: resetting 12:43:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 2021/11/11 12:43:13 result hanged=false: [86394ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3919 #0 [86404ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [86404ms] <- socket$inet_tcp=0x3 errno=14 cover=1744 #0 [86406ms] -> socket$packet(0x11, 0x3, 0x300) #0 [86406ms] <- socket$packet=0x4 errno=14 cover=1919 #0 [86408ms] -> setsockopt$packet_fanout(0x4, 0x107, 0x12, 0x200000c0, 0x4) #0 [86408ms] <- setsockopt$packet_fanout=0x0 errno=14 cover=235 #0 [86409ms] -> setsockopt$packet_fanout_data(0x4, 0x107, 0x16, 0x20000080, 0x10) #0 [86410ms] <- setsockopt$packet_fanout_data=0x0 errno=14 cover=3444 #0 [86413ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000080, 0x4) #0 [86413ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [86414ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [86414ms] <- connect$inet=0x0 errno=14 cover=1121 #0 [86415ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000040, 0x4) #0 [86417ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=1569 2021/11/11 12:43:13 result hanged=false: 2021/11/11 12:43:13 added new input for call #6 setsockopt$inet_tcp_TCP_REPAIR to corpus: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) iptable filter/2: resetting iptable mangle/2: resetting 12:43:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 2021/11/11 12:43:13 #0: triaging type=7 2021/11/11 12:43:13 triaging input for call #3 setsockopt$packet_fanout_data (new signal=1) [86456ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3921 #0 [86466ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [86466ms] <- socket$inet_tcp=0x3 errno=14 cover=1744 #0 [86467ms] -> socket$packet(0x11, 0x3, 0x300) #0 [86467ms] <- socket$packet=0x4 errno=14 cover=1744 #0 [86468ms] -> setsockopt$packet_fanout(0x4, 0x107, 0x12, 0x200000c0, 0x4) #0 [86468ms] <- setsockopt$packet_fanout=0x0 errno=14 cover=246 #0 [86468ms] -> setsockopt$packet_fanout_data(0x4, 0x107, 0x16, 0x20000080, 0x10) #0 [86469ms] <- setsockopt$packet_fanout_data=0x0 errno=14 cover=4403 #0 [86470ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000080, 0x4) #0 [86470ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [86470ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [86470ms] <- connect$inet=0x0 errno=14 cover=1121 #0 [86471ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000040, 0x4) #0 [86472ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=1552 12:43:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 2021/11/11 12:43:13 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [86505ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3923 #0 [86513ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [86514ms] <- socket$inet_tcp=0x3 errno=14 cover=1755 #0 [86514ms] -> socket$packet(0x11, 0x3, 0x300) #0 [86515ms] <- socket$packet=0x4 errno=14 cover=1854 #0 [86515ms] -> setsockopt$packet_fanout(0x4, 0x107, 0x12, 0x200000c0, 0x4) #0 [86515ms] <- setsockopt$packet_fanout=0x0 errno=14 cover=246 #0 [86516ms] -> setsockopt$packet_fanout_data(0x4, 0x107, 0x16, 0x20000080, 0x10) #0 [86517ms] <- setsockopt$packet_fanout_data=0x0 errno=14 cover=3301 #0 [86518ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000080, 0x4) #0 [86518ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [86521ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [86521ms] <- connect$inet=0x0 errno=14 cover=1132 #0 [86522ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000040, 0x4) #0 [86522ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=1534 12:43:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 2021/11/11 12:43:13 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [86554ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3925 #0 [86564ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [86565ms] <- socket$inet_tcp=0x3 errno=14 cover=1744 #0 [86565ms] -> socket$packet(0x11, 0x3, 0x300) #0 [86566ms] <- socket$packet=0x4 errno=14 cover=1788 #0 [86566ms] -> setsockopt$packet_fanout(0x4, 0x107, 0x12, 0x200000c0, 0x4) #0 [86566ms] <- setsockopt$packet_fanout=0x0 errno=14 cover=224 #0 [86570ms] -> setsockopt$packet_fanout_data(0x4, 0x107, 0x16, 0x20000080, 0x10) #0 [86570ms] <- setsockopt$packet_fanout_data=0x0 errno=14 cover=3252 #0 [86571ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000080, 0x4) #0 [86571ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=189 #0 [86575ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [86575ms] <- connect$inet=0x0 errno=14 cover=1121 #0 [86575ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000040, 0x4) #0 [86576ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=1570 2021/11/11 12:43:13 result hanged=false: 2021/11/11 12:43:13 added new input for call #3 setsockopt$packet_fanout_data to corpus: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) iptable filter/2: resetting iptable mangle/2: resetting 12:43:13 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[@ANYBLOB=',+'], 0x168) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x0) [86609ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3927 #0 [86619ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [86619ms] <- socket$inet6_udp=0x3 errno=14 cover=1684 #0 [86624ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x67, 0x20000080, 0x4) #0 [86624ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=106 #0 [86625ms] -> setsockopt$inet6_IPV6_DSTOPTS(0x3, 0x29, 0x3b, 0x200003c0, 0x168) #0 [86625ms] <- setsockopt$inet6_IPV6_DSTOPTS=0x0 errno=14 cover=522 #0 [86626ms] -> sendmsg$inet6(0x3, 0x20000880, 0x0) #0 [86626ms] <- sendmsg$inet6=0xffffffffffffffff errno=22 cover=1167 enabling collider #0 [86628ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [86628ms] <- socket$inet6_udp=0x3 errno=14 cover=1759 #0 [86630ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x67, 0x20000080, 0x4) #0 [86630ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=106 pthread_create failed (errno 11) 12:43:13 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[@ANYBLOB=',+'], 0x168) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x0) 2021/11/11 12:43:13 result hanged=false: 2021/11/11 12:43:13 #0: triaging type=7 2021/11/11 12:43:13 triaging input for call #3 sendmsg$inet6 (new signal=16) [86686ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4029 #0 [86695ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [86696ms] <- socket$inet6_udp=0x3 errno=14 cover=1734 #0 [86696ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x67, 0x20000080, 0x4) #0 [86696ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=106 #0 [86696ms] -> setsockopt$inet6_IPV6_DSTOPTS(0x3, 0x29, 0x3b, 0x200003c0, 0x168) #0 [86697ms] <- setsockopt$inet6_IPV6_DSTOPTS=0x0 errno=14 cover=584 #0 [86697ms] -> sendmsg$inet6(0x3, 0x20000880, 0x0) #0 [86697ms] <- sendmsg$inet6=0xffffffffffffffff errno=22 cover=1159 12:43:13 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[@ANYBLOB=',+'], 0x168) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x0) 2021/11/11 12:43:13 result hanged=false: [86722ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4031 #0 [86731ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [86731ms] <- socket$inet6_udp=0x3 errno=14 cover=1730 #0 [86732ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x67, 0x20000080, 0x4) #0 [86733ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=106 #0 [86733ms] -> setsockopt$inet6_IPV6_DSTOPTS(0x3, 0x29, 0x3b, 0x200003c0, 0x168) #0 [86733ms] <- setsockopt$inet6_IPV6_DSTOPTS=0x0 errno=14 cover=568 #0 [86733ms] -> sendmsg$inet6(0x3, 0x20000880, 0x0) #0 [86733ms] <- sendmsg$inet6=0xffffffffffffffff errno=22 cover=1145 12:43:13 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[@ANYBLOB=',+'], 0x168) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x0) 2021/11/11 12:43:13 result hanged=false: [86753ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4033 #0 [86764ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [86765ms] <- socket$inet6_udp=0x3 errno=14 cover=1738 #0 [86766ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x67, 0x20000080, 0x4) #0 [86766ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=106 #0 [86766ms] -> setsockopt$inet6_IPV6_DSTOPTS(0x3, 0x29, 0x3b, 0x200003c0, 0x168) #0 [86767ms] <- setsockopt$inet6_IPV6_DSTOPTS=0x0 errno=14 cover=521 #0 [86767ms] -> sendmsg$inet6(0x3, 0x20000880, 0x0) #0 [86768ms] <- sendmsg$inet6=0xffffffffffffffff errno=22 cover=1220 2021/11/11 12:43:13 result hanged=false: 2021/11/11 12:43:13 added new input for call #3 sendmsg$inet6 to corpus: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[@ANYBLOB=',+'], 0x168) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x0) 2021/11/11 12:43:13 #0: triaging type=7 2021/11/11 12:43:13 triaging input for call #1 setsockopt$inet6_udp_int (new signal=3) 12:43:13 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[@ANYBLOB=',+'], 0x168) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x0) [86799ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4035 #0 [86809ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [86809ms] <- socket$inet6_udp=0x3 errno=14 cover=1723 #0 [86810ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x67, 0x20000080, 0x4) #0 [86810ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=106 #0 [86811ms] -> setsockopt$inet6_IPV6_DSTOPTS(0x3, 0x29, 0x3b, 0x200003c0, 0x168) #0 [86811ms] <- setsockopt$inet6_IPV6_DSTOPTS=0x0 errno=14 cover=521 #0 [86812ms] -> sendmsg$inet6(0x3, 0x20000880, 0x0) #0 [86812ms] <- sendmsg$inet6=0xffffffffffffffff errno=22 cover=1167 2021/11/11 12:43:13 result hanged=false: 12:43:13 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[@ANYBLOB=',+'], 0x168) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x0) [86833ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4037 #0 [86841ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [86842ms] <- socket$inet6_udp=0x3 errno=14 cover=1717 #0 [86843ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x67, 0x20000080, 0x4) #0 [86843ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=106 #0 [86844ms] -> setsockopt$inet6_IPV6_DSTOPTS(0x3, 0x29, 0x3b, 0x200003c0, 0x168) #0 [86844ms] <- setsockopt$inet6_IPV6_DSTOPTS=0x0 errno=14 cover=533 #0 [86847ms] -> sendmsg$inet6(0x3, 0x20000880, 0x0) #0 [86847ms] <- sendmsg$inet6=0xffffffffffffffff errno=22 cover=1170 2021/11/11 12:43:13 result hanged=false: 12:43:13 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[@ANYBLOB=',+'], 0x168) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x0) [86868ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4039 #0 [86877ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [86879ms] <- socket$inet6_udp=0x3 errno=14 cover=1709 #0 [86880ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x67, 0x20000080, 0x4) #0 [86881ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=106 #0 [86881ms] -> setsockopt$inet6_IPV6_DSTOPTS(0x3, 0x29, 0x3b, 0x200003c0, 0x168) #0 [86881ms] <- setsockopt$inet6_IPV6_DSTOPTS=0x0 errno=14 cover=532 #0 [86882ms] -> sendmsg$inet6(0x3, 0x20000880, 0x0) #0 [86882ms] <- sendmsg$inet6=0xffffffffffffffff errno=22 cover=1156 2021/11/11 12:43:13 result hanged=false: 2021/11/11 12:43:13 added new input for call #1 setsockopt$inet6_udp_int to corpus: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[@ANYBLOB=',+'], 0x168) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0}, 0x0) 12:43:13 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84180, 0x0) [86903ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4041 #0 [86912ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [86914ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12159 #0 [86914ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [86915ms] <- perf_event_open=0x3 errno=14 cover=6458 #0 [86915ms] -> mount(0x0, 0x20000000, 0x20000140, 0x0, 0x0) #0 [86916ms] <- mount=0x0 errno=14 cover=3361 #0 [86916ms] -> openat$dir(0xffffffffffffff9c, 0x200000c0, 0x84180, 0x0) #0 [86916ms] <- openat$dir=0xffffffffffffffff errno=22 cover=1368 enabling collider #0 [86929ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [86929ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1348 #0 [86930ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [86932ms] <- perf_event_open=0x3 errno=14 cover=6307 pthread_create failed (errno 11) 2021/11/11 12:43:13 result hanged=false: 12:43:13 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84180, 0x0) 2021/11/11 12:43:13 #0: triaging type=7 2021/11/11 12:43:13 triaging input for call #3 openat$dir (new signal=8) umount(./534/file0) [87005ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4143 #0 [87015ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [87019ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12144 #0 [87020ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [87022ms] <- perf_event_open=0x3 errno=14 cover=6307 #0 [87023ms] -> mount(0x0, 0x20000000, 0x20000140, 0x0, 0x0) #0 [87025ms] <- mount=0x0 errno=14 cover=2169 #0 [87025ms] -> openat$dir(0xffffffffffffff9c, 0x200000c0, 0x84180, 0x0) #0 [87025ms] <- openat$dir=0xffffffffffffffff errno=22 cover=1353 2021/11/11 12:43:14 result hanged=false: 12:43:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84180, 0x0) umount(./535/file0) [87057ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4145 #0 [87066ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [87068ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12230 #0 [87070ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [87071ms] <- perf_event_open=0x3 errno=14 cover=7587 #0 [87073ms] -> mount(0x0, 0x20000000, 0x20000140, 0x0, 0x0) #0 [87073ms] <- mount=0x0 errno=14 cover=2169 #0 [87075ms] -> openat$dir(0xffffffffffffff9c, 0x200000c0, 0x84180, 0x0) #0 [87075ms] <- openat$dir=0xffffffffffffffff errno=22 cover=1441 12:43:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84180, 0x0) 2021/11/11 12:43:14 result hanged=false: umount(./536/file0) [87106ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4147 #0 [87117ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [87118ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12270 #0 [87124ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [87125ms] <- perf_event_open=0x3 errno=14 cover=6681 #0 [87125ms] -> mount(0x0, 0x20000000, 0x20000140, 0x0, 0x0) #0 [87126ms] <- mount=0x0 errno=14 cover=6541 #0 [87128ms] -> openat$dir(0xffffffffffffff9c, 0x200000c0, 0x84180, 0x0) #0 [87130ms] <- openat$dir=0xffffffffffffffff errno=22 cover=4217 2021/11/11 12:43:14 result hanged=false: 2021/11/11 12:43:14 added new input for call #3 openat$dir to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84180, 0x0) umount(./537/file0) 12:43:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84180, 0x0) [87167ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4149 2021/11/11 12:43:14 #0: triaging type=7 2021/11/11 12:43:14 triaging input for call #0 syz_mount_image$ext4 (new signal=2) #0 [87176ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [87177ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12107 #0 [87178ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [87178ms] <- perf_event_open=0x3 errno=14 cover=6434 #0 [87179ms] -> mount(0x0, 0x20000000, 0x20000140, 0x0, 0x0) #0 [87179ms] <- mount=0x0 errno=14 cover=2168 #0 [87180ms] -> openat$dir(0xffffffffffffff9c, 0x200000c0, 0x84180, 0x0) #0 [87180ms] <- openat$dir=0xffffffffffffffff errno=22 cover=1367 2021/11/11 12:43:14 result hanged=false: umount(./538/file0) 12:43:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84180, 0x0) [87216ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4151 #0 [87224ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [87225ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12140 #0 [87227ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [87228ms] <- perf_event_open=0x3 errno=14 cover=6280 #0 [87229ms] -> mount(0x0, 0x20000000, 0x20000140, 0x0, 0x0) #0 [87229ms] <- mount=0x0 errno=14 cover=2193 #0 [87229ms] -> openat$dir(0xffffffffffffff9c, 0x200000c0, 0x84180, 0x0) #0 [87230ms] <- openat$dir=0xffffffffffffffff errno=22 cover=1398 2021/11/11 12:43:14 result hanged=false: umount(./539/file0) 12:43:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84180, 0x0) [87261ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4153 #0 [87269ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [87271ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12254 #0 [87272ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [87273ms] <- perf_event_open=0x3 errno=14 cover=6664 #0 [87274ms] -> mount(0x0, 0x20000000, 0x20000140, 0x0, 0x0) #0 [87274ms] <- mount=0x0 errno=14 cover=2194 #0 [87274ms] -> openat$dir(0xffffffffffffff9c, 0x200000c0, 0x84180, 0x0) #0 [87275ms] <- openat$dir=0xffffffffffffffff errno=22 cover=1365 umount(./540/file0) 2021/11/11 12:43:14 result hanged=false: 2021/11/11 12:43:14 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84180, 0x0) 12:43:14 executing program 0: syz_io_uring_setup(0x6eb9, &(0x7f0000000340)={0x0, 0xf792}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) [87329ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4155 #0 [87340ms] -> syz_io_uring_setup(0x6eb9, 0x20000340, 0x20ffe000, 0x20ffd000, 0x200003c0, 0x20000400) #0 [87343ms] <- syz_io_uring_setup=0x3 errno=14 cover=21734 enabling collider #0 [87344ms] -> syz_io_uring_setup(0x6eb9, 0x20000340, 0x20ffe000, 0x20ffd000, 0x200003c0, 0x20000400) #0 [87347ms] <- syz_io_uring_setup=0x3 errno=14 cover=29227 12:43:14 executing program 0: syz_io_uring_setup(0x6eb9, &(0x7f0000000340)={0x0, 0xf792}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 2021/11/11 12:43:14 result hanged=false: 2021/11/11 12:43:14 #0: triaging type=7 2021/11/11 12:43:14 triaging input for call #0 syz_io_uring_setup (new signal=3) [87367ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4157 #0 [87377ms] -> syz_io_uring_setup(0x6eb9, 0x20000340, 0x20ffe000, 0x20ffd000, 0x200003c0, 0x20000400) #0 [87382ms] <- syz_io_uring_setup=0x3 errno=14 cover=22933 12:43:14 executing program 0: syz_io_uring_setup(0x6eb9, &(0x7f0000000340)={0x0, 0xf792}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 2021/11/11 12:43:14 result hanged=false: [87406ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4159 #0 [87415ms] -> syz_io_uring_setup(0x6eb9, 0x20000340, 0x20ffe000, 0x20ffd000, 0x200003c0, 0x20000400) #0 [87419ms] <- syz_io_uring_setup=0x3 errno=14 cover=21673 12:43:14 executing program 0: syz_io_uring_setup(0x6eb9, &(0x7f0000000340)={0x0, 0xf792}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 2021/11/11 12:43:14 result hanged=false: [87444ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4161 #0 [87453ms] -> syz_io_uring_setup(0x6eb9, 0x20000340, 0x20ffe000, 0x20ffd000, 0x200003c0, 0x20000400) #0 [87456ms] <- syz_io_uring_setup=0x3 errno=14 cover=21958 2021/11/11 12:43:14 result hanged=false: 2021/11/11 12:43:14 added new input for call #0 syz_io_uring_setup to corpus: syz_io_uring_setup(0x6eb9, &(0x7f0000000340)={0x0, 0xf792}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 12:43:14 executing program 0: clone3(&(0x7f0000000400)={0x100000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/94, 0x5e, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1}, 0x58) [87507ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4163 #0 [87516ms] -> clone3(0x20000400, 0x58) #0 [87535ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 enabling collider #0 [87538ms] -> clone3(0x20000400, 0x58) #0 [87560ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 12:43:14 executing program 0: clone3(&(0x7f0000000400)={0x100000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/94, 0x5e, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1}, 0x58) 2021/11/11 12:43:14 result hanged=false: 2021/11/11 12:43:14 #0: triaging type=7 2021/11/11 12:43:14 triaging input for call #0 clone3 (new signal=2) [87585ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4165 #0 [87594ms] -> clone3(0x20000400, 0x58) #0 [87614ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 2021/11/11 12:43:14 result hanged=false: 12:43:14 executing program 0: clone3(&(0x7f0000000400)={0x100000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/94, 0x5e, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1}, 0x58) [87652ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4167 #0 [87663ms] -> clone3(0x20000400, 0x58) #0 [87688ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 12:43:14 executing program 0: clone3(&(0x7f0000000400)={0x100000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/94, 0x5e, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1}, 0x58) 2021/11/11 12:43:14 result hanged=false: [87728ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4169 #0 [87740ms] -> clone3(0x20000400, 0x58) #0 [87758ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 2021/11/11 12:43:14 result hanged=false: 2021/11/11 12:43:14 added new input for call #0 clone3 to corpus: clone3(&(0x7f0000000400)={0x100000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/94, 0x5e, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1}, 0x58) 12:43:14 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_elf64(r0, 0x0, 0x1047) [87806ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4171 #0 [87814ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000700, 0x1, 0x0) #0 [87815ms] <- openat$tcp_mem=0x3 errno=14 cover=3393 #0 [87816ms] -> write$binfmt_elf64(0x3, 0x0, 0x1047) #0 [87823ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=6129 enabling collider #0 [87824ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000700, 0x1, 0x0) #0 [87824ms] <- openat$tcp_mem=0x3 errno=14 cover=1735 12:43:14 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_elf64(r0, 0x0, 0x1047) 2021/11/11 12:43:14 result hanged=false: 2021/11/11 12:43:14 #0: triaging type=7 2021/11/11 12:43:14 triaging input for call #1 write$binfmt_elf64 (new signal=1) [87845ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4173 #0 [87853ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000700, 0x1, 0x0) #0 [87854ms] <- openat$tcp_mem=0x3 errno=14 cover=1682 #0 [87856ms] -> write$binfmt_elf64(0x3, 0x0, 0x1047) #0 [87856ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=773 12:43:14 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_elf64(r0, 0x0, 0x1047) 2021/11/11 12:43:14 result hanged=false: [87880ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4175 #0 [87890ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000700, 0x1, 0x0) #0 [87890ms] <- openat$tcp_mem=0x3 errno=14 cover=1682 #0 [87892ms] -> write$binfmt_elf64(0x3, 0x0, 0x1047) #0 [87892ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=786 12:43:14 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_elf64(r0, 0x0, 0x1047) 2021/11/11 12:43:14 result hanged=false: [87913ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4177 #0 [87922ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000700, 0x1, 0x0) #0 [87923ms] <- openat$tcp_mem=0x3 errno=14 cover=1660 #0 [87925ms] -> write$binfmt_elf64(0x3, 0x0, 0x1047) #0 [87925ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=786 2021/11/11 12:43:14 result hanged=false: 2021/11/11 12:43:14 added new input for call #1 write$binfmt_elf64 to corpus: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_elf64(r0, 0x0, 0x1047) 12:43:14 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_elf64(r0, 0x0, 0x1047) [87949ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:14 #0: triaging type=7 2021/11/11 12:43:14 triaging input for call #0 openat$tcp_mem (new signal=2) spawned worker pid 4179 #0 [87959ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000700, 0x1, 0x0) #0 [87959ms] <- openat$tcp_mem=0x3 errno=14 cover=1682 #0 [87960ms] -> write$binfmt_elf64(0x3, 0x0, 0x1047) #0 [87960ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=785 12:43:14 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_elf64(r0, 0x0, 0x1047) 2021/11/11 12:43:14 result hanged=false: [87979ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4181 #0 [87991ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000700, 0x1, 0x0) #0 [87991ms] <- openat$tcp_mem=0x3 errno=14 cover=1785 #0 [87992ms] -> write$binfmt_elf64(0x3, 0x0, 0x1047) #0 [87992ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=784 12:43:14 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_elf64(r0, 0x0, 0x1047) 2021/11/11 12:43:14 result hanged=false: [88012ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4183 #0 [88020ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000700, 0x1, 0x0) #0 [88021ms] <- openat$tcp_mem=0x3 errno=14 cover=1660 #0 [88022ms] -> write$binfmt_elf64(0x3, 0x0, 0x1047) #0 [88022ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=775 2021/11/11 12:43:15 result hanged=false: 2021/11/11 12:43:15 added new input for call #0 openat$tcp_mem to corpus: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_elf64(r0, 0x0, 0x1047) 12:43:15 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) [88061ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4185 #0 [88070ms] -> openat$thread_pidfd(0xffffffffffffff9c, 0x20000640, 0x40000, 0x0) #0 [88071ms] <- openat$thread_pidfd=0x3 errno=14 cover=3286 enabling collider #0 [88074ms] -> openat$thread_pidfd(0xffffffffffffff9c, 0x20000640, 0x40000, 0x0) #0 [88074ms] <- openat$thread_pidfd=0x3 errno=14 cover=2303 12:43:15 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000500), 0xffffffffffffffff) 2021/11/11 12:43:15 result hanged=false: [88095ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4187 #0 [88106ms] -> syz_genetlink_get_family_id$l2tp(0x20000300, 0xffffffffffffffff) syz_genetlink_get_family_id(l2tp, -1) netlink: failed to get family id for l2tp: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [88122ms] <- syz_genetlink_get_family_id$l2tp=0xffffffffffffffff errno=2 cover=10684 #0 [88123ms] -> openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [88123ms] <- openat$vcsu=0xffffffffffffffff errno=14 cover=617 #0 [88124ms] -> syz_genetlink_get_family_id$SEG6(0x20000500, 0xffffffffffffffff) syz_genetlink_get_family_id(SEG6, -1) #0 [88126ms] <- syz_genetlink_get_family_id$SEG6=0x1f errno=14 cover=6860 enabling collider #0 [88130ms] -> syz_genetlink_get_family_id$l2tp(0x20000300, 0xffffffffffffffff) syz_genetlink_get_family_id(l2tp, -1) netlink: failed to get family id for l2tp: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [88147ms] <- syz_genetlink_get_family_id$l2tp=0xffffffffffffffff errno=2 cover=7981 #0 [88148ms] -> openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [88149ms] <- openat$vcsu=0xffffffffffffffff errno=14 cover=720 pthread_create failed (errno 11) 12:43:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000180)=0x27) 2021/11/11 12:43:15 result hanged=false: 2021/11/11 12:43:15 poll: candidates=8 inputs=0 signal=0 [88203ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4289 #0 [88212ms] -> socket$packet(0x11, 0x3, 0x300) #0 [88212ms] <- socket$packet=0x3 errno=14 cover=1789 #0 [88213ms] -> getsockopt$packet_int(0x3, 0x107, 0xb, 0x0, 0x20000180) #0 [88213ms] <- getsockopt$packet_int=0xffffffffffffffff errno=14 cover=457 enabling collider #0 [88225ms] -> socket$packet(0x11, 0x3, 0x300) #0 [88225ms] <- socket$packet=0x3 errno=14 cover=1821 #0 [88225ms] -> getsockopt$packet_int(0x3, 0x107, 0xb, 0x0, 0x20000180) #0 [88226ms] <- getsockopt$packet_int=0xffffffffffffffff errno=9 cover=50 12:43:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000180)=0x27) 2021/11/11 12:43:15 result hanged=false: 2021/11/11 12:43:15 #0: triaging type=7 2021/11/11 12:43:15 triaging input for call #1 getsockopt$packet_int (new signal=9) [88249ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4291 #0 [88258ms] -> socket$packet(0x11, 0x3, 0x300) #0 [88261ms] <- socket$packet=0x3 errno=14 cover=1804 #0 [88263ms] -> getsockopt$packet_int(0x3, 0x107, 0xb, 0x0, 0x20000180) #0 [88264ms] <- getsockopt$packet_int=0xffffffffffffffff errno=14 cover=457 2021/11/11 12:43:15 result hanged=false: 12:43:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000180)=0x27) [88287ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4293 #0 [88297ms] -> socket$packet(0x11, 0x3, 0x300) #0 [88300ms] <- socket$packet=0x3 errno=14 cover=1757 #0 [88302ms] -> getsockopt$packet_int(0x3, 0x107, 0xb, 0x0, 0x20000180) #0 [88304ms] <- getsockopt$packet_int=0xffffffffffffffff errno=14 cover=457 2021/11/11 12:43:15 result hanged=false: 12:43:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000180)=0x27) [88328ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4295 #0 [88337ms] -> socket$packet(0x11, 0x3, 0x300) #0 [88340ms] <- socket$packet=0x3 errno=14 cover=1768 #0 [88341ms] -> getsockopt$packet_int(0x3, 0x107, 0xb, 0x0, 0x20000180) #0 [88341ms] <- getsockopt$packet_int=0xffffffffffffffff errno=14 cover=457 2021/11/11 12:43:15 result hanged=false: 2021/11/11 12:43:15 added new input for call #1 getsockopt$packet_int to corpus: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000180)=0x27) 12:43:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) [88364ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4297 #0 [88372ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [88377ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6237 #0 [88377ms] -> sendmsg$NBD_CMD_DISCONNECT(0x4, 0x0, 0x0) #0 [88378ms] <- sendmsg$NBD_CMD_DISCONNECT=0xffffffffffffffff errno=14 cover=432 #0 [88378ms] -> syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [88378ms] <- syz_genetlink_get_family_id$nbd=0xffffffffffffffff errno=14 cover=3298 enabling collider #0 [88379ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [88380ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5459 #0 [88380ms] -> sendmsg$NBD_CMD_DISCONNECT(0x4, 0x0, 0x0) #0 [88380ms] <- sendmsg$NBD_CMD_DISCONNECT=0xffffffffffffffff errno=14 cover=432 pthread_create failed (errno 11) 2021/11/11 12:43:15 result hanged=false: 2021/11/11 12:43:15 #0: triaging type=7 12:43:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 2021/11/11 12:43:15 triaging input for call #0 syz_init_net_socket$nl_generic (new signal=2) [88432ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4399 #0 [88443ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [88447ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6282 #0 [88450ms] -> sendmsg$NBD_CMD_DISCONNECT(0x4, 0x0, 0x0) #0 [88451ms] <- sendmsg$NBD_CMD_DISCONNECT=0xffffffffffffffff errno=14 cover=432 #0 [88452ms] -> syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [88453ms] <- syz_genetlink_get_family_id$nbd=0xffffffffffffffff errno=14 cover=3373 2021/11/11 12:43:15 result hanged=false: 12:43:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) [88474ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4401 #0 [88483ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [88486ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6246 #0 [88488ms] -> sendmsg$NBD_CMD_DISCONNECT(0x4, 0x0, 0x0) #0 [88488ms] <- sendmsg$NBD_CMD_DISCONNECT=0xffffffffffffffff errno=14 cover=432 #0 [88489ms] -> syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [88492ms] <- syz_genetlink_get_family_id$nbd=0xffffffffffffffff errno=14 cover=3407 2021/11/11 12:43:15 result hanged=false: 12:43:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) [88514ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4403 #0 [88523ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [88527ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6328 #0 [88529ms] -> sendmsg$NBD_CMD_DISCONNECT(0x4, 0x0, 0x0) #0 [88532ms] <- sendmsg$NBD_CMD_DISCONNECT=0xffffffffffffffff errno=14 cover=432 #0 [88533ms] -> syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [88534ms] <- syz_genetlink_get_family_id$nbd=0xffffffffffffffff errno=14 cover=3227 2021/11/11 12:43:15 result hanged=false: 2021/11/11 12:43:15 added new input for call #0 syz_init_net_socket$nl_generic to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 12:43:15 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) [88567ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4405 #0 [88577ms] -> syz_genetlink_get_family_id$batadv(0x20000140, 0xffffffffffffffff) syz_genetlink_get_family_id(batadv, -1) netlink: failed to get family id for batadv: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [88592ms] <- syz_genetlink_get_family_id$batadv=0xffffffffffffffff errno=2 cover=10675 enabling collider #0 [88593ms] -> syz_genetlink_get_family_id$batadv(0x20000140, 0xffffffffffffffff) syz_genetlink_get_family_id(batadv, -1) netlink: failed to get family id for batadv: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [88610ms] <- syz_genetlink_get_family_id$batadv=0xffffffffffffffff errno=2 cover=15616 12:43:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@rand_addr=' \x01\x00'}, 0x14) 2021/11/11 12:43:15 result hanged=false: [88630ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4407 #0 [88639ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [88640ms] <- socket$inet6_udp=0x3 errno=14 cover=1695 #0 [88640ms] -> setsockopt$inet6_mreq(0x3, 0x29, 0x1b, 0x20000100, 0x14) #0 [88641ms] <- setsockopt$inet6_mreq=0xffffffffffffffff errno=99 cover=508 enabling collider #0 [88641ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [88641ms] <- socket$inet6_udp=0x3 errno=14 cover=1694 12:43:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@rand_addr=' \x01\x00'}, 0x14) 2021/11/11 12:43:15 result hanged=false: 2021/11/11 12:43:15 #0: triaging type=7 2021/11/11 12:43:15 triaging input for call #1 setsockopt$inet6_mreq (new signal=15) [88661ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4409 #0 [88670ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [88671ms] <- socket$inet6_udp=0x3 errno=14 cover=1684 #0 [88672ms] -> setsockopt$inet6_mreq(0x3, 0x29, 0x1b, 0x20000100, 0x14) #0 [88673ms] <- setsockopt$inet6_mreq=0xffffffffffffffff errno=99 cover=508 12:43:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@rand_addr=' \x01\x00'}, 0x14) 2021/11/11 12:43:15 result hanged=false: [88692ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4411 #0 [88701ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [88701ms] <- socket$inet6_udp=0x3 errno=14 cover=1684 #0 [88702ms] -> setsockopt$inet6_mreq(0x3, 0x29, 0x1b, 0x20000100, 0x14) #0 [88703ms] <- setsockopt$inet6_mreq=0xffffffffffffffff errno=99 cover=558 12:43:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@rand_addr=' \x01\x00'}, 0x14) 2021/11/11 12:43:15 result hanged=false: [88722ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4413 #0 [88732ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [88733ms] <- socket$inet6_udp=0x3 errno=14 cover=1737 #0 [88734ms] -> setsockopt$inet6_mreq(0x3, 0x29, 0x1b, 0x20000100, 0x14) #0 [88735ms] <- setsockopt$inet6_mreq=0xffffffffffffffff errno=99 cover=569 2021/11/11 12:43:15 result hanged=false: 2021/11/11 12:43:15 added new input for call #1 setsockopt$inet6_mreq to corpus: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@rand_addr=' \x01\x00'}, 0x14) 12:43:15 executing program 0: lremovexattr(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000040)=@known='user.incfs.id\x00') [88756ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4415 #0 [88765ms] -> lremovexattr(0x20000000, 0x20000040) #0 [88766ms] <- lremovexattr=0xffffffffffffffff errno=61 cover=6759 enabling collider #0 [88767ms] -> lremovexattr(0x20000000, 0x20000040) #0 [88767ms] <- lremovexattr=0xffffffffffffffff errno=61 cover=1567 2021/11/11 12:43:15 result hanged=false: 12:43:15 executing program 0: lremovexattr(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000040)=@known='user.incfs.id\x00') 2021/11/11 12:43:15 #0: triaging type=7 2021/11/11 12:43:15 triaging input for call #0 lremovexattr (new signal=32) [88787ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4417 #0 [88796ms] -> lremovexattr(0x20000000, 0x20000040) #0 [88798ms] <- lremovexattr=0xffffffffffffffff errno=61 cover=2360 12:43:15 executing program 0: lremovexattr(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000040)=@known='user.incfs.id\x00') 2021/11/11 12:43:15 result hanged=false: [88820ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4419 #0 [88830ms] -> lremovexattr(0x20000000, 0x20000040) #0 [88830ms] <- lremovexattr=0xffffffffffffffff errno=61 cover=2349 12:43:15 executing program 0: lremovexattr(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000040)=@known='user.incfs.id\x00') 2021/11/11 12:43:15 result hanged=false: [88853ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4421 #0 [88862ms] -> lremovexattr(0x20000000, 0x20000040) #0 [88862ms] <- lremovexattr=0xffffffffffffffff errno=61 cover=2355 2021/11/11 12:43:15 result hanged=false: 2021/11/11 12:43:15 added new input for call #0 lremovexattr to corpus: lremovexattr(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000040)=@known='user.incfs.id\x00') 12:43:15 executing program 0: clone3(&(0x7f0000000500)={0x40000000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {}, &(0x7f00000000c0)=""/232, 0xe8, &(0x7f00000001c0), &(0x7f0000000480)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) [88889ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4423 #0 [88898ms] -> clone3(0x20000500, 0x58) #0 [88936ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 enabling collider #0 [88942ms] -> clone3(0x20000500, 0x58) #0 [88983ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 2021/11/11 12:43:15 result hanged=false: 2021/11/11 12:43:15 #0: triaging type=7 12:43:15 executing program 0: clone3(&(0x7f0000000500)={0x40000000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {}, &(0x7f00000000c0)=""/232, 0xe8, &(0x7f00000001c0), &(0x7f0000000480)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) 2021/11/11 12:43:15 triaging input for call #0 clone3 (new signal=1) [89007ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4425 #0 [89016ms] -> clone3(0x20000500, 0x58) #0 [89054ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 2021/11/11 12:43:16 result hanged=false: 12:43:16 executing program 0: clone3(&(0x7f0000000500)={0x40000000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {}, &(0x7f00000000c0)=""/232, 0xe8, &(0x7f00000001c0), &(0x7f0000000480)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) [89095ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4427 #0 [89104ms] -> clone3(0x20000500, 0x58) #0 [89141ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 12:43:16 executing program 0: clone3(&(0x7f0000000500)={0x40000000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {}, &(0x7f00000000c0)=""/232, 0xe8, &(0x7f00000001c0), &(0x7f0000000480)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) 2021/11/11 12:43:16 result hanged=false: [89184ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4429 #0 [89192ms] -> clone3(0x20000500, 0x58) #0 [89235ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 2021/11/11 12:43:16 result hanged=false: 2021/11/11 12:43:16 added new input for call #0 clone3 to corpus: clone3(&(0x7f0000000500)={0x40000000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {}, &(0x7f00000000c0)=""/232, 0xe8, &(0x7f00000001c0), &(0x7f0000000480)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) 12:43:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1000}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0xae6}, 0x1c) [89291ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4431 #0 [89301ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [89301ms] <- socket$inet6_tcp=0x3 errno=14 cover=1702 #0 [89302ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [89303ms] <- connect$inet6=0xffffffffffffffff errno=101 cover=2931 #0 [89303ms] -> connect$inet6(0x3, 0x20000040, 0x1c) #0 [89303ms] <- connect$inet6=0xffffffffffffffff errno=22 cover=243 enabling collider #0 [89305ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [89305ms] <- socket$inet6_tcp=0x3 errno=14 cover=1723 #0 [89305ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [89306ms] <- connect$inet6=0xffffffffffffffff errno=101 cover=2981 pthread_create failed (errno 11) 12:43:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1000}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0xae6}, 0x1c) 2021/11/11 12:43:16 result hanged=false: 2021/11/11 12:43:16 #0: triaging type=7 2021/11/11 12:43:16 triaging input for call #2 connect$inet6 (new signal=1) [89359ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4533 #0 [89370ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [89375ms] <- socket$inet6_tcp=0x3 errno=14 cover=1767 #0 [89382ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [89382ms] <- connect$inet6=0xffffffffffffffff errno=101 cover=2981 #0 [89383ms] -> connect$inet6(0x3, 0x20000040, 0x1c) #0 [89383ms] <- connect$inet6=0xffffffffffffffff errno=22 cover=243 12:43:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1000}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0xae6}, 0x1c) 2021/11/11 12:43:16 result hanged=false: [89403ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4535 #0 [89412ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [89414ms] <- socket$inet6_tcp=0x3 errno=14 cover=1735 #0 [89414ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [89415ms] <- connect$inet6=0xffffffffffffffff errno=101 cover=2981 #0 [89416ms] -> connect$inet6(0x3, 0x20000040, 0x1c) #0 [89416ms] <- connect$inet6=0xffffffffffffffff errno=22 cover=243 12:43:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1000}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0xae6}, 0x1c) 2021/11/11 12:43:16 result hanged=false: [89438ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4537 #0 [89448ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [89453ms] <- socket$inet6_tcp=0x3 errno=14 cover=1713 #0 [89454ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [89454ms] <- connect$inet6=0xffffffffffffffff errno=101 cover=2931 #0 [89454ms] -> connect$inet6(0x3, 0x20000040, 0x1c) #0 [89454ms] <- connect$inet6=0xffffffffffffffff errno=22 cover=243 2021/11/11 12:43:16 result hanged=false: 2021/11/11 12:43:16 added new input for call #2 connect$inet6 to corpus: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1000}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0xae6}, 0x1c) 12:43:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1000}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0xae6}, 0x1c) 2021/11/11 12:43:16 #0: triaging type=7 2021/11/11 12:43:16 triaging input for call #1 connect$inet6 (new signal=1) [89480ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4539 #0 [89489ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [89491ms] <- socket$inet6_tcp=0x3 errno=14 cover=1746 #0 [89492ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [89492ms] <- connect$inet6=0xffffffffffffffff errno=101 cover=2931 #0 [89492ms] -> connect$inet6(0x3, 0x20000040, 0x1c) #0 [89492ms] <- connect$inet6=0xffffffffffffffff errno=22 cover=243 12:43:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1000}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0xae6}, 0x1c) 2021/11/11 12:43:16 result hanged=false: [89510ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4541 #0 [89520ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [89520ms] <- socket$inet6_tcp=0x3 errno=14 cover=1705 #0 [89521ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [89521ms] <- connect$inet6=0xffffffffffffffff errno=101 cover=2931 #0 [89522ms] -> connect$inet6(0x3, 0x20000040, 0x1c) #0 [89522ms] <- connect$inet6=0xffffffffffffffff errno=22 cover=243 12:43:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1000}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0xae6}, 0x1c) 2021/11/11 12:43:16 result hanged=false: [89540ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4543 #0 [89549ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [89552ms] <- socket$inet6_tcp=0x3 errno=14 cover=1746 #0 [89554ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [89554ms] <- connect$inet6=0xffffffffffffffff errno=101 cover=2931 #0 [89556ms] -> connect$inet6(0x3, 0x20000040, 0x1c) #0 [89556ms] <- connect$inet6=0xffffffffffffffff errno=22 cover=243 2021/11/11 12:43:16 result hanged=false: 2021/11/11 12:43:16 added new input for call #1 connect$inet6 to corpus: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1000}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0xae6}, 0x1c) 12:43:16 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "f453d4a3eb5a2a839dfa6df489064e56f134a15767ef096cdab4a9bac4d6df03a90db7c9fa5e9fab5b2dd8465ec26b585f01d80f38aeb5509a6e285b32fd1acd"}, 0x48, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x0) [89579ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4545 #0 [89588ms] -> add_key$fscrypt_v1(0x20000000, 0x20000040, 0x20000080, 0x48, 0xfffffffffffffffd) #0 [89593ms] <- add_key$fscrypt_v1=0x3e230ec8 errno=14 cover=1659 #0 [89594ms] -> keyctl$set_timeout(0xf, 0x3e230ec8, 0x0) #0 [89596ms] <- keyctl$set_timeout=0x0 errno=14 cover=4417 enabling collider #0 [89596ms] -> add_key$fscrypt_v1(0x20000000, 0x20000040, 0x20000080, 0x48, 0xfffffffffffffffd) #0 [89597ms] <- add_key$fscrypt_v1=0x3e230ec8 errno=14 cover=1226 12:43:16 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "f453d4a3eb5a2a839dfa6df489064e56f134a15767ef096cdab4a9bac4d6df03a90db7c9fa5e9fab5b2dd8465ec26b585f01d80f38aeb5509a6e285b32fd1acd"}, 0x48, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x0) 2021/11/11 12:43:16 result hanged=false: 2021/11/11 12:43:16 #0: triaging type=7 2021/11/11 12:43:16 triaging input for call #1 keyctl$set_timeout (new signal=4) [89616ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4547 #0 [89625ms] -> add_key$fscrypt_v1(0x20000000, 0x20000040, 0x20000080, 0x48, 0xfffffffffffffffd) #0 [89626ms] <- add_key$fscrypt_v1=0x3e230ec8 errno=14 cover=1196 #0 [89626ms] -> keyctl$set_timeout(0xf, 0x3e230ec8, 0x0) #0 [89626ms] <- keyctl$set_timeout=0x0 errno=14 cover=476 12:43:16 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "f453d4a3eb5a2a839dfa6df489064e56f134a15767ef096cdab4a9bac4d6df03a90db7c9fa5e9fab5b2dd8465ec26b585f01d80f38aeb5509a6e285b32fd1acd"}, 0x48, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x0) 2021/11/11 12:43:16 result hanged=false: [89647ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4549 #0 [89656ms] -> add_key$fscrypt_v1(0x20000000, 0x20000040, 0x20000080, 0x48, 0xfffffffffffffffd) #0 [89657ms] <- add_key$fscrypt_v1=0x3e230ec8 errno=14 cover=1157 #0 [89658ms] -> keyctl$set_timeout(0xf, 0x3e230ec8, 0x0) #0 [89658ms] <- keyctl$set_timeout=0x0 errno=14 cover=486 12:43:16 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "f453d4a3eb5a2a839dfa6df489064e56f134a15767ef096cdab4a9bac4d6df03a90db7c9fa5e9fab5b2dd8465ec26b585f01d80f38aeb5509a6e285b32fd1acd"}, 0x48, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x0) 2021/11/11 12:43:16 result hanged=false: [89680ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4551 #0 [89691ms] -> add_key$fscrypt_v1(0x20000000, 0x20000040, 0x20000080, 0x48, 0xfffffffffffffffd) #0 [89691ms] <- add_key$fscrypt_v1=0x3e230ec8 errno=14 cover=1179 #0 [89692ms] -> keyctl$set_timeout(0xf, 0x3e230ec8, 0x0) #0 [89692ms] <- keyctl$set_timeout=0x0 errno=14 cover=475 2021/11/11 12:43:16 result hanged=false: 2021/11/11 12:43:16 added new input for call #1 keyctl$set_timeout to corpus: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "f453d4a3eb5a2a839dfa6df489064e56f134a15767ef096cdab4a9bac4d6df03a90db7c9fa5e9fab5b2dd8465ec26b585f01d80f38aeb5509a6e285b32fd1acd"}, 0x48, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x0) 12:43:16 executing program 0: open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) [89714ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:16 poll: candidates=8 inputs=0 signal=0 spawned worker pid 4553 #0 [89723ms] -> open(0x20000440, 0x0, 0x0) #0 [89726ms] <- open=0xffffffffffffffff errno=2 cover=1382 enabling collider #0 [89728ms] -> open(0x20000440, 0x0, 0x0) #0 [89729ms] <- open=0xffffffffffffffff errno=2 cover=877 2021/11/11 12:43:16 result hanged=false: 12:43:16 executing program 0: ppoll(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) [89750ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4555 #0 [89760ms] -> ppoll(0x0, 0x0, 0x20000100, 0x0, 0x0) #0 [89760ms] <- ppoll=0x0 errno=14 cover=97 enabling collider #0 [89761ms] -> ppoll(0x0, 0x0, 0x20000100, 0x0, 0x0) #0 [89761ms] <- ppoll=0x0 errno=14 cover=97 2021/11/11 12:43:16 result hanged=false: 12:43:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001140)={0x0, 0x0}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) [89783ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4557 #0 [89792ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [89795ms] <- perf_event_open=0x3 errno=14 cover=7072 #0 [89796ms] -> pipe2(0x20001140, 0x0) #0 [89797ms] <- pipe2=0x0 errno=14 cover=5520 #0 [89797ms] -> fcntl$setpipe(0x4, 0x407, 0x0) #0 [89797ms] <- fcntl$setpipe=0x1000 errno=14 cover=1125 enabling collider #0 [89808ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [89809ms] <- perf_event_open=0x3 errno=14 cover=7202 #0 [89810ms] -> pipe2(0x20001140, 0x0) #0 [89811ms] <- pipe2=0x0 errno=14 cover=5421 pthread_create failed (errno 11) 2021/11/11 12:43:16 result hanged=false: 12:43:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001140)={0x0, 0x0}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 2021/11/11 12:43:16 #0: triaging type=7 2021/11/11 12:43:16 triaging input for call #2 fcntl$setpipe (new signal=8) [89880ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4659 #0 [89890ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [89891ms] <- perf_event_open=0x3 errno=14 cover=7363 #0 [89893ms] -> pipe2(0x20001140, 0x0) #0 [89893ms] <- pipe2=0x0 errno=14 cover=5000 #0 [89894ms] -> fcntl$setpipe(0x4, 0x407, 0x0) #0 [89894ms] <- fcntl$setpipe=0x1000 errno=14 cover=1005 12:43:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001140)={0x0, 0x0}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 2021/11/11 12:43:16 result hanged=false: [89925ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4661 #0 [89935ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [89940ms] <- perf_event_open=0x3 errno=14 cover=6565 #0 [89942ms] -> pipe2(0x20001140, 0x0) #0 [89944ms] <- pipe2=0x0 errno=14 cover=24734 #0 [89946ms] -> fcntl$setpipe(0x4, 0x407, 0x0) #0 [89950ms] <- fcntl$setpipe=0x1000 errno=14 cover=1005 12:43:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001140)={0x0, 0x0}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 2021/11/11 12:43:16 result hanged=false: [89978ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4663 #0 [89988ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [89992ms] <- perf_event_open=0x3 errno=14 cover=6746 #0 [89994ms] -> pipe2(0x20001140, 0x0) #0 [89995ms] <- pipe2=0x0 errno=14 cover=4869 #0 [89996ms] -> fcntl$setpipe(0x4, 0x407, 0x0) #0 [89996ms] <- fcntl$setpipe=0x1000 errno=14 cover=1005 2021/11/11 12:43:17 result hanged=false: 2021/11/11 12:43:17 added new input for call #2 fcntl$setpipe to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001140)={0x0, 0x0}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 12:43:17 executing program 0: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) [90026ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4665 #0 [90036ms] -> syz_genetlink_get_family_id$mptcp(0x20000000, 0xffffffffffffffff) syz_genetlink_get_family_id(mptcp_pm, -1) netlink: failed to get family id for mptcp_pm: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [90052ms] <- syz_genetlink_get_family_id$mptcp=0xffffffffffffffff errno=2 cover=10708 enabling collider #0 [90054ms] -> syz_genetlink_get_family_id$mptcp(0x20000000, 0xffffffffffffffff) syz_genetlink_get_family_id(mptcp_pm, -1) netlink: failed to get family id for mptcp_pm: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [90068ms] <- syz_genetlink_get_family_id$mptcp=0xffffffffffffffff errno=2 cover=8066 12:43:17 executing program 0: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 2021/11/11 12:43:17 result hanged=false: 2021/11/11 12:43:17 #0: triaging type=7 2021/11/11 12:43:17 triaging input for call #0 syz_genetlink_get_family_id$mptcp (new signal=1) [90092ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4667 #0 [90102ms] -> syz_genetlink_get_family_id$mptcp(0x20000000, 0xffffffffffffffff) syz_genetlink_get_family_id(mptcp_pm, -1) netlink: failed to get family id for mptcp_pm: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [90119ms] <- syz_genetlink_get_family_id$mptcp=0xffffffffffffffff errno=2 cover=10865 12:43:17 executing program 0: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 2021/11/11 12:43:17 result hanged=false: [90141ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4669 #0 [90151ms] -> syz_genetlink_get_family_id$mptcp(0x20000000, 0xffffffffffffffff) syz_genetlink_get_family_id(mptcp_pm, -1) netlink: failed to get family id for mptcp_pm: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [90164ms] <- syz_genetlink_get_family_id$mptcp=0xffffffffffffffff errno=2 cover=10831 2021/11/11 12:43:17 result hanged=false: 12:43:17 executing program 0: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) [90189ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4671 #0 [90199ms] -> syz_genetlink_get_family_id$mptcp(0x20000000, 0xffffffffffffffff) syz_genetlink_get_family_id(mptcp_pm, -1) netlink: failed to get family id for mptcp_pm: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [90216ms] <- syz_genetlink_get_family_id$mptcp=0xffffffffffffffff errno=2 cover=10899 2021/11/11 12:43:17 result hanged=false: 2021/11/11 12:43:17 added new input for call #0 syz_genetlink_get_family_id$mptcp to corpus: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 12:43:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000002400)=[{0x0}, {0x0, 0x39}, {&(0x7f0000002080)="bc", 0x1}], 0x3}}], 0x2, 0x8804) [90274ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4673 #0 [90283ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [90283ms] <- openat=0x3 errno=14 cover=6666 #0 [90285ms] -> close(0x3) #0 [90285ms] <- close=0x0 errno=14 cover=326 #0 [90286ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [90286ms] <- socket$inet_udp=0x3 errno=14 cover=1705 #0 [90286ms] -> sendmmsg$inet(0x3, 0x20005640, 0x2, 0x8804) #0 [90287ms] <- sendmmsg$inet=0x1 errno=14 cover=1737 enabling collider #0 [90287ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [90288ms] <- openat=0x3 errno=14 cover=1133 #0 [90288ms] -> close(0x3) #0 [90288ms] <- close=0x0 errno=14 cover=311 pthread_create failed (errno 11) 2021/11/11 12:43:17 result hanged=false: 12:43:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000002400)=[{0x0}, {0x0, 0x39}, {&(0x7f0000002080)="bc", 0x1}], 0x3}}], 0x2, 0x8804) 2021/11/11 12:43:17 #0: triaging type=7 2021/11/11 12:43:17 triaging input for call #3 sendmmsg$inet (new signal=16) [90344ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4775 #0 [90354ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [90358ms] <- openat=0x3 errno=14 cover=6687 #0 [90360ms] -> close(0x3) #0 [90360ms] <- close=0x0 errno=14 cover=326 #0 [90360ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [90360ms] <- socket$inet_udp=0x3 errno=14 cover=1683 #0 [90361ms] -> sendmmsg$inet(0x3, 0x20005640, 0x2, 0x8804) #0 [90361ms] <- sendmmsg$inet=0x1 errno=14 cover=1627 12:43:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000002400)=[{0x0}, {0x0, 0x39}, {&(0x7f0000002080)="bc", 0x1}], 0x3}}], 0x2, 0x8804) 2021/11/11 12:43:17 result hanged=false: [90381ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4777 #0 [90393ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [90399ms] <- openat=0x3 errno=14 cover=6691 #0 [90401ms] -> close(0x3) #0 [90401ms] <- close=0x0 errno=14 cover=326 #0 [90402ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [90403ms] <- socket$inet_udp=0x3 errno=14 cover=1661 #0 [90403ms] -> sendmmsg$inet(0x3, 0x20005640, 0x2, 0x8804) #0 [90404ms] <- sendmmsg$inet=0x1 errno=14 cover=1602 2021/11/11 12:43:17 result hanged=false: 12:43:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000002400)=[{0x0}, {0x0, 0x39}, {&(0x7f0000002080)="bc", 0x1}], 0x3}}], 0x2, 0x8804) [90425ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4779 #0 [90435ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [90440ms] <- openat=0x3 errno=14 cover=6718 #0 [90442ms] -> close(0x3) #0 [90442ms] <- close=0x0 errno=14 cover=326 #0 [90442ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [90442ms] <- socket$inet_udp=0x3 errno=14 cover=1672 #0 [90443ms] -> sendmmsg$inet(0x3, 0x20005640, 0x2, 0x8804) #0 [90443ms] <- sendmmsg$inet=0x1 errno=14 cover=1660 2021/11/11 12:43:17 result hanged=false: 2021/11/11 12:43:17 added new input for call #3 sendmmsg$inet to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000002400)=[{0x0}, {0x0, 0x39}, {&(0x7f0000002080)="bc", 0x1}], 0x3}}], 0x2, 0x8804) 12:43:17 executing program 0: syz_genetlink_get_family_id$SEG6(&(0x7f0000000840), 0xffffffffffffffff) [90472ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4781 #0 [90482ms] -> syz_genetlink_get_family_id$SEG6(0x20000840, 0xffffffffffffffff) syz_genetlink_get_family_id(SEG6, -1) #0 [90485ms] <- syz_genetlink_get_family_id$SEG6=0x1f errno=14 cover=8426 enabling collider #0 [90487ms] -> syz_genetlink_get_family_id$SEG6(0x20000840, 0xffffffffffffffff) syz_genetlink_get_family_id(SEG6, -1) #0 [90488ms] <- syz_genetlink_get_family_id$SEG6=0x1f errno=14 cover=6823 2021/11/11 12:43:17 result hanged=false: 12:43:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='check=strict']) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xee2, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) [90510ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4783 #0 [90519ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='check=strict' #0 [90527ms] <- syz_mount_image$vfat=0x5 errno=0 cover=27025 #0 [90528ms] -> chdir(0x20000040) #0 [90528ms] <- chdir=0x0 errno=14 cover=698 #0 [90528ms] -> openat(0xffffffffffffff9c, 0x20000040, 0xee2, 0x0) #0 [90529ms] <- openat=0x3 errno=14 cover=5652 #0 [90532ms] -> creat(0x20000180, 0x0) #0 [90533ms] <- creat=0x4 errno=14 cover=1368 enabling collider #0 [90533ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) #0 [90535ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=16 cover=5790 #0 [90535ms] -> chdir(0x20000040) #0 [90535ms] <- chdir=0xffffffffffffffff errno=20 cover=586 pthread_create failed (errno 11) 2021/11/11 12:43:17 result hanged=false: 2021/11/11 12:43:17 #0: triaging type=7 12:43:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='check=strict']) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xee2, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) 2021/11/11 12:43:17 triaging input for call #3 creat (new signal=18) umount(./605/file0) [90601ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4885 #0 [90610ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='check=strict' #0 [90620ms] <- syz_mount_image$vfat=0x5 errno=0 cover=26923 #0 [90622ms] -> chdir(0x20000040) #0 [90622ms] <- chdir=0x0 errno=14 cover=654 #0 [90623ms] -> openat(0xffffffffffffff9c, 0x20000040, 0xee2, 0x0) #0 [90624ms] <- openat=0x3 errno=14 cover=5554 #0 [90625ms] -> creat(0x20000180, 0x0) #0 [90626ms] <- creat=0x4 errno=14 cover=1375 2021/11/11 12:43:17 result hanged=false: 12:43:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='check=strict']) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xee2, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) umount(./606/file0) [90652ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4887 #0 [90661ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='check=strict' #0 [90673ms] <- syz_mount_image$vfat=0x5 errno=0 cover=27681 #0 [90676ms] -> chdir(0x20000040) #0 [90676ms] <- chdir=0x0 errno=14 cover=665 #0 [90676ms] -> openat(0xffffffffffffff9c, 0x20000040, 0xee2, 0x0) #0 [90677ms] <- openat=0x3 errno=14 cover=5506 #0 [90677ms] -> creat(0x20000180, 0x0) #0 [90677ms] <- creat=0x4 errno=14 cover=1324 12:43:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='check=strict']) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xee2, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) 2021/11/11 12:43:17 result hanged=false: umount(./607/file0) [90702ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4889 #0 [90711ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='check=strict' #0 [90731ms] <- syz_mount_image$vfat=0x5 errno=0 cover=29656 #0 [90735ms] -> chdir(0x20000040) #0 [90735ms] <- chdir=0x0 errno=14 cover=665 #0 [90735ms] -> openat(0xffffffffffffff9c, 0x20000040, 0xee2, 0x0) #0 [90736ms] <- openat=0x3 errno=14 cover=5794 #0 [90736ms] -> creat(0x20000180, 0x0) #0 [90737ms] <- creat=0x4 errno=14 cover=1335 2021/11/11 12:43:17 result hanged=false: 2021/11/11 12:43:17 added new input for call #3 creat to corpus: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='check=strict']) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xee2, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) umount(./608/file0) 2021/11/11 12:43:17 #0: triaging type=7 2021/11/11 12:43:17 triaging input for call #2 openat (new signal=7) 12:43:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='check=strict']) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xee2, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) [90770ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4891 #0 [90782ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='check=strict' #0 [90790ms] <- syz_mount_image$vfat=0x5 errno=0 cover=27601 #0 [90792ms] -> chdir(0x20000040) #0 [90792ms] <- chdir=0x0 errno=14 cover=665 #0 [90792ms] -> openat(0xffffffffffffff9c, 0x20000040, 0xee2, 0x0) #0 [90793ms] <- openat=0x3 errno=14 cover=5711 #0 [90793ms] -> creat(0x20000180, 0x0) #0 [90794ms] <- creat=0x4 errno=14 cover=1325 12:43:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='check=strict']) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xee2, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) 2021/11/11 12:43:17 result hanged=false: umount(./609/file0) [90831ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4893 #0 [90842ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='check=strict' #0 [90855ms] <- syz_mount_image$vfat=0x5 errno=0 cover=25454 #0 [90858ms] -> chdir(0x20000040) #0 [90858ms] <- chdir=0x0 errno=14 cover=675 #0 [90858ms] -> openat(0xffffffffffffff9c, 0x20000040, 0xee2, 0x0) #0 [90858ms] <- openat=0x3 errno=14 cover=5506 #0 [90859ms] -> creat(0x20000180, 0x0) #0 [90859ms] <- creat=0x4 errno=14 cover=1347 12:43:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='check=strict']) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xee2, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) 2021/11/11 12:43:17 result hanged=false: umount(./610/file0) [90886ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4895 #0 [90900ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='check=strict' #0 [90909ms] <- syz_mount_image$vfat=0x5 errno=0 cover=35132 #0 [90912ms] -> chdir(0x20000040) #0 [90912ms] <- chdir=0x0 errno=14 cover=664 #0 [90912ms] -> openat(0xffffffffffffff9c, 0x20000040, 0xee2, 0x0) #0 [90913ms] <- openat=0x3 errno=14 cover=5571 #0 [90914ms] -> creat(0x20000180, 0x0) #0 [90915ms] <- creat=0x4 errno=14 cover=1340 2021/11/11 12:43:17 result hanged=false: 2021/11/11 12:43:17 added new input for call #2 openat to corpus: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='check=strict']) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xee2, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) umount(./611/file0) 12:43:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='check=strict']) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xee2, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) [90963ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:17 #0: triaging type=7 2021/11/11 12:43:17 triaging input for call #0 syz_mount_image$vfat (new signal=4) spawned worker pid 4897 #0 [90972ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='check=strict' #0 [90983ms] <- syz_mount_image$vfat=0x5 errno=0 cover=26710 #0 [90987ms] -> chdir(0x20000040) #0 [90988ms] <- chdir=0x0 errno=14 cover=752 #0 [90988ms] -> openat(0xffffffffffffff9c, 0x20000040, 0xee2, 0x0) #0 [90989ms] <- openat=0x3 errno=14 cover=6442 #0 [90989ms] -> creat(0x20000180, 0x0) #0 [90990ms] <- creat=0x4 errno=14 cover=1365 2021/11/11 12:43:17 result hanged=false: 12:43:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='check=strict']) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xee2, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) umount(./612/file0) [91024ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4899 #0 [91034ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='check=strict' #0 [91041ms] <- syz_mount_image$vfat=0x5 errno=0 cover=27271 #0 [91043ms] -> chdir(0x20000040) #0 [91043ms] <- chdir=0x0 errno=14 cover=655 #0 [91043ms] -> openat(0xffffffffffffff9c, 0x20000040, 0xee2, 0x0) #0 [91044ms] <- openat=0x3 errno=14 cover=5562 #0 [91044ms] -> creat(0x20000180, 0x0) #0 [91045ms] <- creat=0x4 errno=14 cover=1337 umount(./613/file0) 12:43:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='check=strict']) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xee2, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) 2021/11/11 12:43:18 result hanged=false: [91075ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4901 #0 [91084ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='check=strict' #0 [91092ms] <- syz_mount_image$vfat=0x5 errno=0 cover=27103 #0 [91096ms] -> chdir(0x20000040) #0 [91097ms] <- chdir=0x0 errno=14 cover=654 #0 [91098ms] -> openat(0xffffffffffffff9c, 0x20000040, 0xee2, 0x0) #0 [91099ms] <- openat=0x3 errno=14 cover=5645 #0 [91100ms] -> creat(0x20000180, 0x0) #0 [91100ms] <- creat=0x4 errno=14 cover=1337 2021/11/11 12:43:18 poll: candidates=0 inputs=0 signal=0 umount(./614/file0) 2021/11/11 12:43:18 result hanged=false: 2021/11/11 12:43:18 added new input for call #0 syz_mount_image$vfat to corpus: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='check=strict']) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xee2, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) 12:43:18 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fork() [91175ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 4903 #0 [91185ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [91186ms] <- perf_event_open=0x3 errno=14 cover=6810 #0 [91187ms] -> mmap(0x20ffc000, 0x2000, 0x0, 0x13, 0x3, 0x0) #0 [91188ms] <- mmap=0x20ffc000 errno=14 cover=11918 #0 [91188ms] -> fork() #0 [91258ms] <- fork=0xffffffffffffffff errno=11 cover=262143 enabling collider #0 [91260ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [91261ms] <- perf_event_open=0x3 errno=14 cover=16119 #0 [91262ms] -> mmap(0x20ffc000, 0x2000, 0x0, 0x13, 0x3, 0x0) #0 [91268ms] <- mmap=0x20ffc000 errno=14 cover=18661 pthread_create failed (errno 11) 12:43:18 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fork() 2021/11/11 12:43:18 result hanged=false: 2021/11/11 12:43:18 #0: triaging type=7 2021/11/11 12:43:18 triaging input for call #2 fork (new signal=18) [91330ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5006 #0 [91344ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [91346ms] <- perf_event_open=0x3 errno=14 cover=6892 #0 [91348ms] -> mmap(0x20ffc000, 0x2000, 0x0, 0x13, 0x3, 0x0) #0 [91349ms] <- mmap=0x20ffc000 errno=14 cover=15272 #0 [91351ms] -> fork() #0 [91410ms] <- fork=0xffffffffffffffff errno=11 cover=262143 2021/11/11 12:43:18 result hanged=false: 12:43:18 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fork() [91501ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5009 #0 [91509ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [91510ms] <- perf_event_open=0x3 errno=14 cover=7118 #0 [91511ms] -> mmap(0x20ffc000, 0x2000, 0x0, 0x13, 0x3, 0x0) #0 [91514ms] <- mmap=0x20ffc000 errno=14 cover=13620 #0 [91515ms] -> fork() #0 [91580ms] <- fork=0xffffffffffffffff errno=11 cover=262143 2021/11/11 12:43:18 result hanged=false: 12:43:18 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fork() [91670ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5012 #0 [91679ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [91679ms] <- perf_event_open=0x3 errno=14 cover=6994 #0 [91680ms] -> mmap(0x20ffc000, 0x2000, 0x0, 0x13, 0x3, 0x0) #0 [91681ms] <- mmap=0x20ffc000 errno=14 cover=13083 #0 [91682ms] -> fork() #0 [91753ms] <- fork=0xffffffffffffffff errno=11 cover=262143 2021/11/11 12:43:18 result hanged=false: 2021/11/11 12:43:18 added new input for call #2 fork to corpus: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fork() 12:43:18 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fork() [91850ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5015 2021/11/11 12:43:18 #0: triaging type=7 2021/11/11 12:43:18 triaging input for call #1 mmap (new signal=64) #0 [91859ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [91860ms] <- perf_event_open=0x3 errno=14 cover=6689 #0 [91864ms] -> mmap(0x20ffc000, 0x2000, 0x0, 0x13, 0x3, 0x0) #0 [91867ms] <- mmap=0x20ffc000 errno=14 cover=12508 #0 [91868ms] -> fork() #0 [91941ms] <- fork=0xffffffffffffffff errno=11 cover=262143 12:43:19 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fork() 2021/11/11 12:43:19 result hanged=false: [92025ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5018 #0 [92036ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [92036ms] <- perf_event_open=0x3 errno=14 cover=6723 #0 [92038ms] -> mmap(0x20ffc000, 0x2000, 0x0, 0x13, 0x3, 0x0) #0 [92041ms] <- mmap=0x20ffc000 errno=14 cover=12814 #0 [92042ms] -> fork() #0 [92262ms] <- fork=0xffffffffffffffff errno=11 cover=262143 2021/11/11 12:43:19 result hanged=false: 12:43:19 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fork() [92315ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5021 #0 [92324ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [92325ms] <- perf_event_open=0x3 errno=14 cover=8600 #0 [92326ms] -> mmap(0x20ffc000, 0x2000, 0x0, 0x13, 0x3, 0x0) #0 [92327ms] <- mmap=0x20ffc000 errno=14 cover=13069 #0 [92328ms] -> fork() #0 [92394ms] <- fork=0xffffffffffffffff errno=11 cover=262143 2021/11/11 12:43:19 result hanged=false: 2021/11/11 12:43:19 added new input for call #1 mmap to corpus: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fork() 12:43:19 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fork() [92484ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:19 #0: triaging type=7 2021/11/11 12:43:19 triaging input for call #0 perf_event_open (new signal=11) spawned worker pid 5024 #0 [92493ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [92494ms] <- perf_event_open=0x3 errno=14 cover=6548 #0 [92502ms] -> mmap(0x20ffc000, 0x2000, 0x0, 0x13, 0x3, 0x0) #0 [92505ms] <- mmap=0x20ffc000 errno=14 cover=15259 #0 [92506ms] -> fork() #0 [92576ms] <- fork=0xffffffffffffffff errno=11 cover=262143 2021/11/11 12:43:19 result hanged=false: 12:43:19 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fork() [92666ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5027 #0 [92676ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [92676ms] <- perf_event_open=0x3 errno=14 cover=6726 #0 [92677ms] -> mmap(0x20ffc000, 0x2000, 0x0, 0x13, 0x3, 0x0) #0 [92678ms] <- mmap=0x20ffc000 errno=14 cover=12698 #0 [92680ms] -> fork() #0 [92761ms] <- fork=0xffffffffffffffff errno=11 cover=262143 2021/11/11 12:43:19 result hanged=false: 12:43:19 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fork() [92853ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5030 #0 [92863ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [92867ms] <- perf_event_open=0x3 errno=14 cover=6719 #0 [92868ms] -> mmap(0x20ffc000, 0x2000, 0x0, 0x13, 0x3, 0x0) #0 [92871ms] <- mmap=0x20ffc000 errno=14 cover=13009 #0 [92874ms] -> fork() #0 [92941ms] <- fork=0xffffffffffffffff errno=11 cover=262143 2021/11/11 12:43:20 result hanged=false: 2021/11/11 12:43:20 added new input for call #0 perf_event_open to corpus: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fork() 12:43:20 executing program 0: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)=0x6) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8090}, 0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x40840, 0x0) mkdirat$cgroup(r2, &(0x7f0000000380)='syz0\x00', 0x1ff) read$char_usb(0xffffffffffffffff, &(0x7f0000000400)=""/11, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)={0x0, 0x0}) gettid() clone3(&(0x7f00000028c0)={0x4000000, &(0x7f0000000480), &(0x7f00000004c0), 0x0, {0x3c}, &(0x7f0000000540)=""/4096, 0x1000, &(0x7f0000001540)=""/50, &(0x7f0000002880)=[r3, 0x0, 0x0, 0x0], 0x4}, 0x58) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002940)='memory.swap.current\x00', 0x0, 0x0) [93050ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5033 2021/11/11 12:43:20 poll: candidates=8 inputs=0 signal=0 #0 [93060ms] -> ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x20000000) #0 [93060ms] <- ioctl$TUNSETSNDBUF=0xffffffffffffffff errno=9 cover=45 #0 [93061ms] -> openat$cgroup_ro(0xffffffffffffffff, 0x20000040, 0x0, 0x0) #0 [93061ms] <- openat$cgroup_ro=0xffffffffffffffff errno=9 cover=743 #0 [93061ms] -> ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) #0 [93061ms] <- ioctl$TUNSETLINK=0xffffffffffffffff errno=9 cover=45 #0 [93062ms] -> openat$procfs(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [93062ms] <- openat$procfs=0x3 errno=14 cover=1419 #0 [93066ms] -> sendmsg$BATADV_CMD_GET_HARDIF(0x3, 0x20000180, 0x0) #0 [93066ms] <- sendmsg$BATADV_CMD_GET_HARDIF=0xffffffffffffffff errno=88 cover=64 #0 [93072ms] -> sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x20000280, 0x4) #0 [93072ms] <- sendmsg$BATADV_CMD_TP_METER_CANCEL=0xffffffffffffffff errno=9 cover=52 #0 [93072ms] -> openat$cgroup_devices(0xffffffffffffffff, 0x20000300, 0x2, 0x0) #0 [93072ms] <- openat$cgroup_devices=0xffffffffffffffff errno=9 cover=791 #0 [93073ms] -> openat$vcs(0xffffffffffffff9c, 0x0, 0x40840, 0x0) #0 [93073ms] <- openat$vcs=0xffffffffffffffff errno=14 cover=674 #0 [93073ms] -> mkdirat$cgroup(0xffffffffffffffff, 0x20000380, 0x1ff) #0 [93073ms] <- mkdirat$cgroup=0xffffffffffffffff errno=9 cover=291 #0 [93074ms] -> read$char_usb(0xffffffffffffffff, 0x20000400, 0xb) #0 [93074ms] <- read$char_usb=0xffffffffffffffff errno=9 cover=47 #0 [93074ms] -> ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x20001580) #0 [93074ms] <- ioctl$SECCOMP_IOCTL_NOTIF_RECV=0xffffffffffffffff errno=9 cover=45 #0 [93075ms] -> gettid() #0 [93075ms] <- gettid=0x13aa errno=14 cover=48 #0 [93075ms] -> clone3(0x200028c0, 0x58) #0 [93094ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 #0 [93099ms] -> openat$cgroup_ro(0xffffffffffffffff, 0x20002940, 0x0, 0x0) #0 [93102ms] <- openat$cgroup_ro=0xffffffffffffffff errno=9 cover=761 enabling collider #0 [93102ms] -> ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x20000000) #0 [93102ms] <- ioctl$TUNSETSNDBUF=0xffffffffffffffff errno=9 cover=45 #0 [93103ms] -> openat$cgroup_ro(0xffffffffffffffff, 0x20000040, 0x0, 0x0) #0 [93103ms] <- openat$cgroup_ro=0xffffffffffffffff errno=9 cover=731 pthread_create failed (errno 11) 2021/11/11 12:43:20 result hanged=false: 12:43:20 executing program 0: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)=0x6) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8090}, 0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x40840, 0x0) mkdirat$cgroup(r2, &(0x7f0000000380)='syz0\x00', 0x1ff) read$char_usb(0xffffffffffffffff, &(0x7f0000000400)=""/11, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)={0x0, 0x0}) gettid() clone3(&(0x7f00000028c0)={0x4000000, &(0x7f0000000480), &(0x7f00000004c0), 0x0, {0x3c}, &(0x7f0000000540)=""/4096, 0x1000, &(0x7f0000001540)=""/50, &(0x7f0000002880)=[r3, 0x0, 0x0, 0x0], 0x4}, 0x58) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002940)='memory.swap.current\x00', 0x0, 0x0) 2021/11/11 12:43:20 #0: triaging type=7 2021/11/11 12:43:20 triaging input for call #12 clone3 (new signal=2) [93159ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5135 #0 [93169ms] -> ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x20000000) #0 [93172ms] <- ioctl$TUNSETSNDBUF=0xffffffffffffffff errno=9 cover=45 #0 [93172ms] -> openat$cgroup_ro(0xffffffffffffffff, 0x20000040, 0x0, 0x0) #0 [93173ms] <- openat$cgroup_ro=0xffffffffffffffff errno=9 cover=719 #0 [93173ms] -> ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) #0 [93173ms] <- ioctl$TUNSETLINK=0xffffffffffffffff errno=9 cover=45 #0 [93174ms] -> openat$procfs(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [93174ms] <- openat$procfs=0x3 errno=14 cover=1417 #0 [93175ms] -> sendmsg$BATADV_CMD_GET_HARDIF(0x3, 0x20000180, 0x0) #0 [93175ms] <- sendmsg$BATADV_CMD_GET_HARDIF=0xffffffffffffffff errno=88 cover=64 #0 [93175ms] -> sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x20000280, 0x4) #0 [93175ms] <- sendmsg$BATADV_CMD_TP_METER_CANCEL=0xffffffffffffffff errno=9 cover=52 #0 [93175ms] -> openat$cgroup_devices(0xffffffffffffffff, 0x20000300, 0x2, 0x0) #0 [93175ms] <- openat$cgroup_devices=0xffffffffffffffff errno=9 cover=705 #0 [93176ms] -> openat$vcs(0xffffffffffffff9c, 0x0, 0x40840, 0x0) #0 [93176ms] <- openat$vcs=0xffffffffffffffff errno=14 cover=620 #0 [93176ms] -> mkdirat$cgroup(0xffffffffffffffff, 0x20000380, 0x1ff) #0 [93176ms] <- mkdirat$cgroup=0xffffffffffffffff errno=9 cover=302 #0 [93176ms] -> read$char_usb(0xffffffffffffffff, 0x20000400, 0xb) #0 [93176ms] <- read$char_usb=0xffffffffffffffff errno=9 cover=47 #0 [93177ms] -> ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x20001580) #0 [93177ms] <- ioctl$SECCOMP_IOCTL_NOTIF_RECV=0xffffffffffffffff errno=9 cover=45 #0 [93177ms] -> gettid() #0 [93177ms] <- gettid=0x1410 errno=14 cover=48 #0 [93177ms] -> clone3(0x200028c0, 0x58) #0 [93198ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 #0 [93214ms] -> openat$cgroup_ro(0xffffffffffffffff, 0x20002940, 0x0, 0x0) #0 [93218ms] <- openat$cgroup_ro=0xffffffffffffffff errno=9 cover=706 2021/11/11 12:43:20 result hanged=false: 12:43:20 executing program 0: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)=0x6) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8090}, 0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x40840, 0x0) mkdirat$cgroup(r2, &(0x7f0000000380)='syz0\x00', 0x1ff) read$char_usb(0xffffffffffffffff, &(0x7f0000000400)=""/11, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)={0x0, 0x0}) gettid() clone3(&(0x7f00000028c0)={0x4000000, &(0x7f0000000480), &(0x7f00000004c0), 0x0, {0x3c}, &(0x7f0000000540)=""/4096, 0x1000, &(0x7f0000001540)=""/50, &(0x7f0000002880)=[r3, 0x0, 0x0, 0x0], 0x4}, 0x58) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002940)='memory.swap.current\x00', 0x0, 0x0) [93240ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5137 #0 [93252ms] -> ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x20000000) #0 [93252ms] <- ioctl$TUNSETSNDBUF=0xffffffffffffffff errno=9 cover=45 #0 [93253ms] -> openat$cgroup_ro(0xffffffffffffffff, 0x20000040, 0x0, 0x0) #0 [93253ms] <- openat$cgroup_ro=0xffffffffffffffff errno=9 cover=752 #0 [93253ms] -> ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) #0 [93253ms] <- ioctl$TUNSETLINK=0xffffffffffffffff errno=9 cover=45 #0 [93253ms] -> openat$procfs(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [93255ms] <- openat$procfs=0x3 errno=14 cover=1482 #0 [93255ms] -> sendmsg$BATADV_CMD_GET_HARDIF(0x3, 0x20000180, 0x0) #0 [93255ms] <- sendmsg$BATADV_CMD_GET_HARDIF=0xffffffffffffffff errno=88 cover=64 #0 [93255ms] -> sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x20000280, 0x4) #0 [93256ms] <- sendmsg$BATADV_CMD_TP_METER_CANCEL=0xffffffffffffffff errno=9 cover=52 #0 [93256ms] -> openat$cgroup_devices(0xffffffffffffffff, 0x20000300, 0x2, 0x0) #0 [93256ms] <- openat$cgroup_devices=0xffffffffffffffff errno=9 cover=705 #0 [93257ms] -> openat$vcs(0xffffffffffffff9c, 0x0, 0x40840, 0x0) #0 [93257ms] <- openat$vcs=0xffffffffffffffff errno=14 cover=631 #0 [93257ms] -> mkdirat$cgroup(0xffffffffffffffff, 0x20000380, 0x1ff) #0 [93257ms] <- mkdirat$cgroup=0xffffffffffffffff errno=9 cover=303 #0 [93258ms] -> read$char_usb(0xffffffffffffffff, 0x20000400, 0xb) #0 [93258ms] <- read$char_usb=0xffffffffffffffff errno=9 cover=47 #0 [93258ms] -> ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x20001580) #0 [93258ms] <- ioctl$SECCOMP_IOCTL_NOTIF_RECV=0xffffffffffffffff errno=9 cover=45 #0 [93258ms] -> gettid() #0 [93258ms] <- gettid=0x1412 errno=14 cover=48 #0 [93258ms] -> clone3(0x200028c0, 0x58) #0 [93278ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 #0 [93294ms] -> openat$cgroup_ro(0xffffffffffffffff, 0x20002940, 0x0, 0x0) #0 [93298ms] <- openat$cgroup_ro=0xffffffffffffffff errno=9 cover=739 12:43:20 executing program 0: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)=0x6) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8090}, 0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x40840, 0x0) mkdirat$cgroup(r2, &(0x7f0000000380)='syz0\x00', 0x1ff) read$char_usb(0xffffffffffffffff, &(0x7f0000000400)=""/11, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)={0x0, 0x0}) gettid() clone3(&(0x7f00000028c0)={0x4000000, &(0x7f0000000480), &(0x7f00000004c0), 0x0, {0x3c}, &(0x7f0000000540)=""/4096, 0x1000, &(0x7f0000001540)=""/50, &(0x7f0000002880)=[r3, 0x0, 0x0, 0x0], 0x4}, 0x58) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002940)='memory.swap.current\x00', 0x0, 0x0) 2021/11/11 12:43:20 result hanged=false: [93320ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5139 #0 [93330ms] -> ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x20000000) #0 [93330ms] <- ioctl$TUNSETSNDBUF=0xffffffffffffffff errno=9 cover=45 #0 [93330ms] -> openat$cgroup_ro(0xffffffffffffffff, 0x20000040, 0x0, 0x0) #0 [93331ms] <- openat$cgroup_ro=0xffffffffffffffff errno=9 cover=722 #0 [93331ms] -> ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) #0 [93332ms] <- ioctl$TUNSETLINK=0xffffffffffffffff errno=9 cover=45 #0 [93332ms] -> openat$procfs(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [93334ms] <- openat$procfs=0x3 errno=14 cover=5600 #0 [93334ms] -> sendmsg$BATADV_CMD_GET_HARDIF(0x3, 0x20000180, 0x0) #0 [93334ms] <- sendmsg$BATADV_CMD_GET_HARDIF=0xffffffffffffffff errno=88 cover=64 #0 [93334ms] -> sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x20000280, 0x4) #0 [93334ms] <- sendmsg$BATADV_CMD_TP_METER_CANCEL=0xffffffffffffffff errno=9 cover=52 #0 [93335ms] -> openat$cgroup_devices(0xffffffffffffffff, 0x20000300, 0x2, 0x0) #0 [93335ms] <- openat$cgroup_devices=0xffffffffffffffff errno=9 cover=705 #0 [93336ms] -> openat$vcs(0xffffffffffffff9c, 0x0, 0x40840, 0x0) #0 [93336ms] <- openat$vcs=0xffffffffffffffff errno=14 cover=620 #0 [93336ms] -> mkdirat$cgroup(0xffffffffffffffff, 0x20000380, 0x1ff) #0 [93337ms] <- mkdirat$cgroup=0xffffffffffffffff errno=9 cover=306 #0 [93337ms] -> read$char_usb(0xffffffffffffffff, 0x20000400, 0xb) #0 [93337ms] <- read$char_usb=0xffffffffffffffff errno=9 cover=47 #0 [93338ms] -> ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x20001580) #0 [93338ms] <- ioctl$SECCOMP_IOCTL_NOTIF_RECV=0xffffffffffffffff errno=9 cover=45 #0 [93338ms] -> gettid() #0 [93338ms] <- gettid=0x1414 errno=14 cover=48 #0 [93338ms] -> clone3(0x200028c0, 0x58) #0 [93363ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 #0 [93379ms] -> openat$cgroup_ro(0xffffffffffffffff, 0x20002940, 0x0, 0x0) #0 [93382ms] <- openat$cgroup_ro=0xffffffffffffffff errno=9 cover=717 2021/11/11 12:43:20 result hanged=false: 2021/11/11 12:43:20 added new input for call #12 clone3 to corpus: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)=0x6) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8090}, 0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x40840, 0x0) mkdirat$cgroup(r2, &(0x7f0000000380)='syz0\x00', 0x1ff) read$char_usb(0xffffffffffffffff, &(0x7f0000000400)=""/11, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)={0x0, 0x0}) gettid() clone3(&(0x7f00000028c0)={0x4000000, &(0x7f0000000480), &(0x7f00000004c0), 0x0, {0x3c}, &(0x7f0000000540)=""/4096, 0x1000, &(0x7f0000001540)=""/50, &(0x7f0000002880)=[r3, 0x0, 0x0, 0x0], 0x4}, 0x58) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002940)='memory.swap.current\x00', 0x0, 0x0) 12:43:20 executing program 0: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)=0x6) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8090}, 0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x40840, 0x0) mkdirat$cgroup(r2, &(0x7f0000000380)='syz0\x00', 0x1ff) read$char_usb(0xffffffffffffffff, &(0x7f0000000400)=""/11, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)={0x0, 0x0}) gettid() clone3(&(0x7f00000028c0)={0x4000000, &(0x7f0000000480), &(0x7f00000004c0), 0x0, {0x3c}, &(0x7f0000000540)=""/4096, 0x1000, &(0x7f0000001540)=""/50, &(0x7f0000002880)=[r3, 0x0, 0x0, 0x0], 0x4}, 0x58) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002940)='memory.swap.current\x00', 0x0, 0x0) [93418ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:20 #0: triaging type=7 2021/11/11 12:43:20 triaging input for call #1 openat$cgroup_ro (new signal=2) spawned worker pid 5141 #0 [93427ms] -> ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x20000000) #0 [93427ms] <- ioctl$TUNSETSNDBUF=0xffffffffffffffff errno=9 cover=45 #0 [93427ms] -> openat$cgroup_ro(0xffffffffffffffff, 0x20000040, 0x0, 0x0) #0 [93427ms] <- openat$cgroup_ro=0xffffffffffffffff errno=9 cover=696 #0 [93427ms] -> ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) #0 [93427ms] <- ioctl$TUNSETLINK=0xffffffffffffffff errno=9 cover=45 #0 [93428ms] -> openat$procfs(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [93428ms] <- openat$procfs=0x3 errno=14 cover=1449 #0 [93428ms] -> sendmsg$BATADV_CMD_GET_HARDIF(0x3, 0x20000180, 0x0) #0 [93428ms] <- sendmsg$BATADV_CMD_GET_HARDIF=0xffffffffffffffff errno=88 cover=64 #0 [93428ms] -> sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x20000280, 0x4) #0 [93428ms] <- sendmsg$BATADV_CMD_TP_METER_CANCEL=0xffffffffffffffff errno=9 cover=52 #0 [93428ms] -> openat$cgroup_devices(0xffffffffffffffff, 0x20000300, 0x2, 0x0) #0 [93429ms] <- openat$cgroup_devices=0xffffffffffffffff errno=9 cover=704 #0 [93429ms] -> openat$vcs(0xffffffffffffff9c, 0x0, 0x40840, 0x0) #0 [93429ms] <- openat$vcs=0xffffffffffffffff errno=14 cover=662 #0 [93429ms] -> mkdirat$cgroup(0xffffffffffffffff, 0x20000380, 0x1ff) #0 [93429ms] <- mkdirat$cgroup=0xffffffffffffffff errno=9 cover=301 #0 [93429ms] -> read$char_usb(0xffffffffffffffff, 0x20000400, 0xb) #0 [93429ms] <- read$char_usb=0xffffffffffffffff errno=9 cover=47 #0 [93429ms] -> ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x20001580) #0 [93429ms] <- ioctl$SECCOMP_IOCTL_NOTIF_RECV=0xffffffffffffffff errno=9 cover=45 #0 [93429ms] -> gettid() #0 [93429ms] <- gettid=0x1416 errno=14 cover=48 #0 [93429ms] -> clone3(0x200028c0, 0x58) #0 [93449ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 #0 [93465ms] -> openat$cgroup_ro(0xffffffffffffffff, 0x20002940, 0x0, 0x0) #0 [93465ms] <- openat$cgroup_ro=0xffffffffffffffff errno=9 cover=787 12:43:20 executing program 0: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)=0x6) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8090}, 0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x40840, 0x0) mkdirat$cgroup(r2, &(0x7f0000000380)='syz0\x00', 0x1ff) read$char_usb(0xffffffffffffffff, &(0x7f0000000400)=""/11, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)={0x0, 0x0}) gettid() clone3(&(0x7f00000028c0)={0x4000000, &(0x7f0000000480), &(0x7f00000004c0), 0x0, {0x3c}, &(0x7f0000000540)=""/4096, 0x1000, &(0x7f0000001540)=""/50, &(0x7f0000002880)=[r3, 0x0, 0x0, 0x0], 0x4}, 0x58) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002940)='memory.swap.current\x00', 0x0, 0x0) 2021/11/11 12:43:20 result hanged=false: [93485ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5143 #0 [93495ms] -> ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x20000000) #0 [93495ms] <- ioctl$TUNSETSNDBUF=0xffffffffffffffff errno=9 cover=45 #0 [93497ms] -> openat$cgroup_ro(0xffffffffffffffff, 0x20000040, 0x0, 0x0) #0 [93497ms] <- openat$cgroup_ro=0xffffffffffffffff errno=9 cover=730 #0 [93497ms] -> ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) #0 [93497ms] <- ioctl$TUNSETLINK=0xffffffffffffffff errno=9 cover=45 #0 [93497ms] -> openat$procfs(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [93498ms] <- openat$procfs=0x3 errno=14 cover=1492 #0 [93498ms] -> sendmsg$BATADV_CMD_GET_HARDIF(0x3, 0x20000180, 0x0) #0 [93499ms] <- sendmsg$BATADV_CMD_GET_HARDIF=0xffffffffffffffff errno=88 cover=64 #0 [93499ms] -> sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x20000280, 0x4) #0 [93499ms] <- sendmsg$BATADV_CMD_TP_METER_CANCEL=0xffffffffffffffff errno=9 cover=52 #0 [93500ms] -> openat$cgroup_devices(0xffffffffffffffff, 0x20000300, 0x2, 0x0) #0 [93500ms] <- openat$cgroup_devices=0xffffffffffffffff errno=9 cover=733 #0 [93501ms] -> openat$vcs(0xffffffffffffff9c, 0x0, 0x40840, 0x0) #0 [93501ms] <- openat$vcs=0xffffffffffffffff errno=14 cover=620 #0 [93501ms] -> mkdirat$cgroup(0xffffffffffffffff, 0x20000380, 0x1ff) #0 [93501ms] <- mkdirat$cgroup=0xffffffffffffffff errno=9 cover=301 #0 [93502ms] -> read$char_usb(0xffffffffffffffff, 0x20000400, 0xb) #0 [93502ms] <- read$char_usb=0xffffffffffffffff errno=9 cover=47 #0 [93502ms] -> ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x20001580) #0 [93503ms] <- ioctl$SECCOMP_IOCTL_NOTIF_RECV=0xffffffffffffffff errno=9 cover=45 #0 [93503ms] -> gettid() #0 [93503ms] <- gettid=0x1418 errno=14 cover=48 #0 [93503ms] -> clone3(0x200028c0, 0x58) #0 [93528ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 #0 [93544ms] -> openat$cgroup_ro(0xffffffffffffffff, 0x20002940, 0x0, 0x0) #0 [93547ms] <- openat$cgroup_ro=0xffffffffffffffff errno=9 cover=695 12:43:20 executing program 0: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)=0x6) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8090}, 0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x40840, 0x0) mkdirat$cgroup(r2, &(0x7f0000000380)='syz0\x00', 0x1ff) read$char_usb(0xffffffffffffffff, &(0x7f0000000400)=""/11, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)={0x0, 0x0}) gettid() clone3(&(0x7f00000028c0)={0x4000000, &(0x7f0000000480), &(0x7f00000004c0), 0x0, {0x3c}, &(0x7f0000000540)=""/4096, 0x1000, &(0x7f0000001540)=""/50, &(0x7f0000002880)=[r3, 0x0, 0x0, 0x0], 0x4}, 0x58) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002940)='memory.swap.current\x00', 0x0, 0x0) 2021/11/11 12:43:20 result hanged=false: [93569ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5145 #0 [93579ms] -> ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x20000000) #0 [93579ms] <- ioctl$TUNSETSNDBUF=0xffffffffffffffff errno=9 cover=45 #0 [93579ms] -> openat$cgroup_ro(0xffffffffffffffff, 0x20000040, 0x0, 0x0) #0 [93579ms] <- openat$cgroup_ro=0xffffffffffffffff errno=9 cover=707 #0 [93579ms] -> ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) #0 [93579ms] <- ioctl$TUNSETLINK=0xffffffffffffffff errno=9 cover=45 #0 [93579ms] -> openat$procfs(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [93580ms] <- openat$procfs=0x3 errno=14 cover=1415 #0 [93580ms] -> sendmsg$BATADV_CMD_GET_HARDIF(0x3, 0x20000180, 0x0) #0 [93580ms] <- sendmsg$BATADV_CMD_GET_HARDIF=0xffffffffffffffff errno=88 cover=64 #0 [93580ms] -> sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x20000280, 0x4) #0 [93580ms] <- sendmsg$BATADV_CMD_TP_METER_CANCEL=0xffffffffffffffff errno=9 cover=52 #0 [93581ms] -> openat$cgroup_devices(0xffffffffffffffff, 0x20000300, 0x2, 0x0) #0 [93581ms] <- openat$cgroup_devices=0xffffffffffffffff errno=9 cover=704 #0 [93581ms] -> openat$vcs(0xffffffffffffff9c, 0x0, 0x40840, 0x0) #0 [93581ms] <- openat$vcs=0xffffffffffffffff errno=14 cover=644 #0 [93582ms] -> mkdirat$cgroup(0xffffffffffffffff, 0x20000380, 0x1ff) #0 [93582ms] <- mkdirat$cgroup=0xffffffffffffffff errno=9 cover=302 #0 [93582ms] -> read$char_usb(0xffffffffffffffff, 0x20000400, 0xb) #0 [93582ms] <- read$char_usb=0xffffffffffffffff errno=9 cover=47 #0 [93582ms] -> ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x20001580) #0 [93583ms] <- ioctl$SECCOMP_IOCTL_NOTIF_RECV=0xffffffffffffffff errno=9 cover=45 #0 [93583ms] -> gettid() #0 [93583ms] <- gettid=0x141a errno=14 cover=48 #0 [93583ms] -> clone3(0x200028c0, 0x58) #0 [93604ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 #0 [93620ms] -> openat$cgroup_ro(0xffffffffffffffff, 0x20002940, 0x0, 0x0) #0 [93623ms] <- openat$cgroup_ro=0xffffffffffffffff errno=9 cover=727 2021/11/11 12:43:20 result hanged=false: 2021/11/11 12:43:20 added new input for call #1 openat$cgroup_ro to corpus: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)=0x6) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8090}, 0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x40840, 0x0) mkdirat$cgroup(r2, &(0x7f0000000380)='syz0\x00', 0x1ff) read$char_usb(0xffffffffffffffff, &(0x7f0000000400)=""/11, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)={0x0, 0x0}) gettid() clone3(&(0x7f00000028c0)={0x4000000, &(0x7f0000000480), &(0x7f00000004c0), 0x0, {0x3c}, &(0x7f0000000540)=""/4096, 0x1000, &(0x7f0000001540)=""/50, &(0x7f0000002880)=[r3, 0x0, 0x0, 0x0], 0x4}, 0x58) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002940)='memory.swap.current\x00', 0x0, 0x0) 12:43:20 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000200)=""/129) [93649ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5147 #0 [93658ms] -> syz_open_dev$evdev(0x200001c0, 0x0, 0x0) #0 [93658ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1290 #0 [93659ms] -> ioctl$EVIOCGLED(0x3, 0x80404519, 0x20000200) #0 [93660ms] <- ioctl$EVIOCGLED=0x8 errno=14 cover=3496 enabling collider #0 [93675ms] -> syz_open_dev$evdev(0x200001c0, 0x0, 0x0) #0 [93675ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1278 #0 [93675ms] -> ioctl$EVIOCGLED(0x3, 0x80404519, 0x20000200) #0 [93675ms] <- ioctl$EVIOCGLED=0xffffffffffffffff errno=9 cover=46 12:43:20 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000200)=""/129) 2021/11/11 12:43:20 result hanged=false: 2021/11/11 12:43:20 #0: triaging type=7 2021/11/11 12:43:20 triaging input for call #1 ioctl$EVIOCGLED (new signal=15) [93706ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5149 #0 [93715ms] -> syz_open_dev$evdev(0x200001c0, 0x0, 0x0) #0 [93716ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1289 #0 [93720ms] -> ioctl$EVIOCGLED(0x3, 0x80404519, 0x20000200) #0 [93720ms] <- ioctl$EVIOCGLED=0x8 errno=14 cover=357 12:43:20 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000200)=""/129) 2021/11/11 12:43:20 result hanged=false: [93748ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5151 #0 [93758ms] -> syz_open_dev$evdev(0x200001c0, 0x0, 0x0) #0 [93758ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1300 #0 [93759ms] -> ioctl$EVIOCGLED(0x3, 0x80404519, 0x20000200) #0 [93759ms] <- ioctl$EVIOCGLED=0x8 errno=14 cover=360 12:43:20 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000200)=""/129) 2021/11/11 12:43:20 result hanged=false: [93803ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5153 #0 [93812ms] -> syz_open_dev$evdev(0x200001c0, 0x0, 0x0) #0 [93814ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1321 #0 [93819ms] -> ioctl$EVIOCGLED(0x3, 0x80404519, 0x20000200) #0 [93819ms] <- ioctl$EVIOCGLED=0x8 errno=14 cover=357 2021/11/11 12:43:20 result hanged=false: 2021/11/11 12:43:20 added new input for call #1 ioctl$EVIOCGLED to corpus: r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000200)=""/129) 12:43:20 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) [93861ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5155 #0 [93871ms] -> openat$binderfs(0xffffffffffffff9c, 0x200000c0, 0x0, 0x0) #0 [93871ms] <- openat$binderfs=0xffffffffffffffff errno=2 cover=2673 #0 [93872ms] -> ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x20000080) #0 [93872ms] <- ioctl$BINDER_SET_CONTEXT_MGR_EXT=0xffffffffffffffff errno=9 cover=45 #0 [93873ms] -> mmap$binder(0x200a0000, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) #0 [93873ms] <- mmap$binder=0xffffffffffffffff errno=9 cover=44 #0 [93874ms] -> openat$binderfs(0xffffffffffffff9c, 0x200000c0, 0x0, 0x0) #0 [93875ms] <- openat$binderfs=0xffffffffffffffff errno=2 cover=1847 #0 [93876ms] -> mmap$binder(0x200c0000, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) #0 [93876ms] <- mmap$binder=0xffffffffffffffff errno=9 cover=44 #0 [93877ms] -> ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x20000100) #0 [93877ms] <- ioctl$BINDER_WRITE_READ=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [93878ms] -> openat$binderfs(0xffffffffffffff9c, 0x200000c0, 0x0, 0x0) #0 [93879ms] <- openat$binderfs=0xffffffffffffffff errno=2 cover=1874 #0 [93882ms] -> ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x20000080) #0 [93882ms] <- ioctl$BINDER_SET_CONTEXT_MGR_EXT=0xffffffffffffffff errno=9 cover=45 pthread_create failed (errno 11) 2021/11/11 12:43:20 result hanged=false: 2021/11/11 12:43:20 #0: triaging type=7 2021/11/11 12:43:20 triaging input for call #0 openat$binderfs (new signal=2) 12:43:20 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) [93943ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5257 #0 [93953ms] -> openat$binderfs(0xffffffffffffff9c, 0x200000c0, 0x0, 0x0) #0 [93953ms] <- openat$binderfs=0xffffffffffffffff errno=2 cover=2696 #0 [93955ms] -> ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x20000080) #0 [93955ms] <- ioctl$BINDER_SET_CONTEXT_MGR_EXT=0xffffffffffffffff errno=9 cover=45 #0 [93956ms] -> mmap$binder(0x200a0000, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) #0 [93956ms] <- mmap$binder=0xffffffffffffffff errno=9 cover=44 #0 [93956ms] -> openat$binderfs(0xffffffffffffff9c, 0x200000c0, 0x0, 0x0) #0 [93957ms] <- openat$binderfs=0xffffffffffffffff errno=2 cover=1857 #0 [93962ms] -> mmap$binder(0x200c0000, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) #0 [93962ms] <- mmap$binder=0xffffffffffffffff errno=9 cover=44 #0 [93963ms] -> ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x20000100) #0 [93963ms] <- ioctl$BINDER_WRITE_READ=0xffffffffffffffff errno=9 cover=45 12:43:20 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 2021/11/11 12:43:20 result hanged=false: [93983ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5259 #0 [93991ms] -> openat$binderfs(0xffffffffffffff9c, 0x200000c0, 0x0, 0x0) #0 [93996ms] <- openat$binderfs=0xffffffffffffffff errno=2 cover=2697 #0 [93997ms] -> ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x20000080) #0 [93997ms] <- ioctl$BINDER_SET_CONTEXT_MGR_EXT=0xffffffffffffffff errno=9 cover=45 #0 [93997ms] -> mmap$binder(0x200a0000, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) #0 [93997ms] <- mmap$binder=0xffffffffffffffff errno=9 cover=44 #0 [93997ms] -> openat$binderfs(0xffffffffffffff9c, 0x200000c0, 0x0, 0x0) #0 [93998ms] <- openat$binderfs=0xffffffffffffffff errno=2 cover=1755 #0 [93999ms] -> mmap$binder(0x200c0000, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) #0 [93999ms] <- mmap$binder=0xffffffffffffffff errno=9 cover=44 #0 [94000ms] -> ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x20000100) #0 [94000ms] <- ioctl$BINDER_WRITE_READ=0xffffffffffffffff errno=9 cover=45 12:43:21 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 2021/11/11 12:43:21 result hanged=false: [94019ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5261 #0 [94030ms] -> openat$binderfs(0xffffffffffffff9c, 0x200000c0, 0x0, 0x0) #0 [94030ms] <- openat$binderfs=0xffffffffffffffff errno=2 cover=2599 #0 [94031ms] -> ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x20000080) #0 [94031ms] <- ioctl$BINDER_SET_CONTEXT_MGR_EXT=0xffffffffffffffff errno=9 cover=45 #0 [94031ms] -> mmap$binder(0x200a0000, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) #0 [94031ms] <- mmap$binder=0xffffffffffffffff errno=9 cover=44 #0 [94031ms] -> openat$binderfs(0xffffffffffffff9c, 0x200000c0, 0x0, 0x0) #0 [94032ms] <- openat$binderfs=0xffffffffffffffff errno=2 cover=1749 #0 [94032ms] -> mmap$binder(0x200c0000, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) #0 [94032ms] <- mmap$binder=0xffffffffffffffff errno=9 cover=44 #0 [94032ms] -> ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x20000100) #0 [94032ms] <- ioctl$BINDER_WRITE_READ=0xffffffffffffffff errno=9 cover=45 2021/11/11 12:43:21 result hanged=false: 2021/11/11 12:43:21 added new input for call #0 openat$binderfs to corpus: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 12:43:21 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1e68, &(0x7f0000001600), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001680), &(0x7f00000016c0)) [94068ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5263 #0 [94076ms] -> syz_io_uring_setup(0x0, 0x0, 0x20ffa000, 0x20ffc000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [94076ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=1409 #0 [94077ms] -> syz_io_uring_setup(0x1e68, 0x20001600, 0x20ffc000, 0x20ffc000, 0x20001680, 0x200016c0) #0 [94079ms] <- syz_io_uring_setup=0x3 errno=14 cover=10730 enabling collider #0 [94080ms] -> syz_io_uring_setup(0x0, 0x0, 0x20ffa000, 0x20ffc000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [94080ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=1170 12:43:21 executing program 0: prctl$PR_SET_PDEATHSIG(0x1, 0x0) 2021/11/11 12:43:21 result hanged=false: [94100ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5265 #0 [94112ms] -> prctl$PR_SET_PDEATHSIG(0x1, 0x0) #0 [94112ms] <- prctl$PR_SET_PDEATHSIG=0x0 errno=22 cover=44 enabling collider #0 [94113ms] -> prctl$PR_SET_PDEATHSIG(0x1, 0x0) #0 [94113ms] <- prctl$PR_SET_PDEATHSIG=0x0 errno=22 cover=44 12:43:21 executing program 0: prctl$PR_SET_PDEATHSIG(0x1, 0x0) 2021/11/11 12:43:21 result hanged=false: 2021/11/11 12:43:21 #0: triaging type=7 2021/11/11 12:43:21 triaging input for call #0 prctl$PR_SET_PDEATHSIG (new signal=3) [94133ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5267 #0 [94144ms] -> prctl$PR_SET_PDEATHSIG(0x1, 0x0) #0 [94144ms] <- prctl$PR_SET_PDEATHSIG=0x0 errno=22 cover=44 12:43:21 executing program 0: prctl$PR_SET_PDEATHSIG(0x1, 0x0) 2021/11/11 12:43:21 result hanged=false: [94167ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5269 #0 [94179ms] -> prctl$PR_SET_PDEATHSIG(0x1, 0x0) #0 [94179ms] <- prctl$PR_SET_PDEATHSIG=0x0 errno=22 cover=44 12:43:21 executing program 0: prctl$PR_SET_PDEATHSIG(0x1, 0x0) 2021/11/11 12:43:21 result hanged=false: [94199ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5271 #0 [94207ms] -> prctl$PR_SET_PDEATHSIG(0x1, 0x0) #0 [94207ms] <- prctl$PR_SET_PDEATHSIG=0x0 errno=22 cover=44 2021/11/11 12:43:21 result hanged=false: 2021/11/11 12:43:21 added new input for call #0 prctl$PR_SET_PDEATHSIG to corpus: prctl$PR_SET_PDEATHSIG(0x1, 0x0) 12:43:21 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) [94233ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5273 #0 [94242ms] -> openat$hwrng(0xffffffffffffff9c, 0x20000140, 0x0, 0x0) #0 [94242ms] <- openat$hwrng=0x3 errno=14 cover=1082 enabling collider #0 [94243ms] -> openat$hwrng(0xffffffffffffff9c, 0x20000140, 0x0, 0x0) #0 [94243ms] <- openat$hwrng=0x3 errno=14 cover=1070 12:43:21 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) sendto(r0, &(0x7f0000000140)="3ceb226d", 0x4, 0x0, &(0x7f00000000c0)=@nl=@unspec, 0x80) 2021/11/11 12:43:21 result hanged=false: [94267ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5275 #0 [94277ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [94279ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1752 #0 [94280ms] -> setsockopt$inet6_mtu(0x3, 0x29, 0x17, 0x20000080, 0x4) #0 [94280ms] <- setsockopt$inet6_mtu=0x0 errno=14 cover=152 #0 [94280ms] -> sendto(0x3, 0x20000140, 0x4, 0x0, 0x200000c0, 0x80) #0 [94281ms] <- sendto=0x4 errno=14 cover=1585 enabling collider #0 [94282ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [94283ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1764 #0 [94284ms] -> setsockopt$inet6_mtu(0x3, 0x29, 0x17, 0x20000080, 0x4) #0 [94284ms] <- setsockopt$inet6_mtu=0x0 errno=14 cover=152 pthread_create failed (errno 11) 12:43:21 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) sendto(r0, &(0x7f0000000140)="3ceb226d", 0x4, 0x0, &(0x7f00000000c0)=@nl=@unspec, 0x80) 2021/11/11 12:43:21 result hanged=false: 2021/11/11 12:43:21 #0: triaging type=7 2021/11/11 12:43:21 triaging input for call #2 sendto (new signal=16) iptable filter/10: resetting iptable mangle/10: resetting [94338ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5377 #0 [94347ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [94349ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1687 #0 [94353ms] -> setsockopt$inet6_mtu(0x3, 0x29, 0x17, 0x20000080, 0x4) #0 [94353ms] <- setsockopt$inet6_mtu=0x0 errno=14 cover=152 #0 [94354ms] -> sendto(0x3, 0x20000140, 0x4, 0x0, 0x200000c0, 0x80) #0 [94354ms] <- sendto=0x4 errno=14 cover=1477 12:43:21 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) sendto(r0, &(0x7f0000000140)="3ceb226d", 0x4, 0x0, &(0x7f00000000c0)=@nl=@unspec, 0x80) 2021/11/11 12:43:21 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [94375ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5379 #0 [94388ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [94389ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1709 #0 [94390ms] -> setsockopt$inet6_mtu(0x3, 0x29, 0x17, 0x20000080, 0x4) #0 [94390ms] <- setsockopt$inet6_mtu=0x0 errno=14 cover=152 #0 [94391ms] -> sendto(0x3, 0x20000140, 0x4, 0x0, 0x200000c0, 0x80) #0 [94391ms] <- sendto=0x4 errno=14 cover=1452 2021/11/11 12:43:21 result hanged=false: 12:43:21 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) sendto(r0, &(0x7f0000000140)="3ceb226d", 0x4, 0x0, &(0x7f00000000c0)=@nl=@unspec, 0x80) iptable filter/10: resetting iptable mangle/10: resetting [94414ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5381 #0 [94422ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [94424ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1701 #0 [94428ms] -> setsockopt$inet6_mtu(0x3, 0x29, 0x17, 0x20000080, 0x4) #0 [94428ms] <- setsockopt$inet6_mtu=0x0 errno=14 cover=152 #0 [94429ms] -> sendto(0x3, 0x20000140, 0x4, 0x0, 0x200000c0, 0x80) #0 [94430ms] <- sendto=0x4 errno=14 cover=1452 2021/11/11 12:43:21 result hanged=false: 2021/11/11 12:43:21 added new input for call #2 sendto to corpus: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) sendto(r0, &(0x7f0000000140)="3ceb226d", 0x4, 0x0, &(0x7f00000000c0)=@nl=@unspec, 0x80) iptable filter/10: resetting iptable mangle/10: resetting 2021/11/11 12:43:21 #0: triaging type=7 12:43:21 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) sendto(r0, &(0x7f0000000140)="3ceb226d", 0x4, 0x0, &(0x7f00000000c0)=@nl=@unspec, 0x80) 2021/11/11 12:43:21 triaging input for call #1 setsockopt$inet6_mtu (new signal=4) [94465ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5383 #0 [94475ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [94475ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1720 #0 [94476ms] -> setsockopt$inet6_mtu(0x3, 0x29, 0x17, 0x20000080, 0x4) #0 [94476ms] <- setsockopt$inet6_mtu=0x0 errno=14 cover=152 #0 [94476ms] -> sendto(0x3, 0x20000140, 0x4, 0x0, 0x200000c0, 0x80) #0 [94477ms] <- sendto=0x4 errno=14 cover=1499 12:43:21 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) sendto(r0, &(0x7f0000000140)="3ceb226d", 0x4, 0x0, &(0x7f00000000c0)=@nl=@unspec, 0x80) 2021/11/11 12:43:21 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [94502ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5385 #0 [94510ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [94512ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1676 #0 [94514ms] -> setsockopt$inet6_mtu(0x3, 0x29, 0x17, 0x20000080, 0x4) #0 [94514ms] <- setsockopt$inet6_mtu=0x0 errno=14 cover=152 #0 [94518ms] -> sendto(0x3, 0x20000140, 0x4, 0x0, 0x200000c0, 0x80) #0 [94518ms] <- sendto=0x4 errno=14 cover=1441 12:43:21 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) sendto(r0, &(0x7f0000000140)="3ceb226d", 0x4, 0x0, &(0x7f00000000c0)=@nl=@unspec, 0x80) 2021/11/11 12:43:21 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [94543ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5387 #0 [94554ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [94554ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1687 #0 [94556ms] -> setsockopt$inet6_mtu(0x3, 0x29, 0x17, 0x20000080, 0x4) #0 [94556ms] <- setsockopt$inet6_mtu=0x0 errno=14 cover=152 #0 [94556ms] -> sendto(0x3, 0x20000140, 0x4, 0x0, 0x200000c0, 0x80) #0 [94557ms] <- sendto=0x4 errno=14 cover=1441 2021/11/11 12:43:21 result hanged=false: 2021/11/11 12:43:21 added new input for call #1 setsockopt$inet6_mtu to corpus: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) sendto(r0, &(0x7f0000000140)="3ceb226d", 0x4, 0x0, &(0x7f00000000c0)=@nl=@unspec, 0x80) 12:43:21 executing program 0: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000800)=[{0x0}], 0x0, 0x0) iptable filter/10: resetting iptable mangle/10: resetting [94578ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5389 #0 [94590ms] -> syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, 0x20000800, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [94592ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=14 cover=9705 enabling collider #0 [94596ms] -> syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, 0x20000800, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [94603ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=14 cover=15621 12:43:21 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 2021/11/11 12:43:21 result hanged=false: 2021/11/11 12:43:21 poll: candidates=8 inputs=0 signal=0 [94626ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5391 #0 [94635ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [94635ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [94636ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [94636ms] <- openat$tun=0x3 errno=14 cover=1361 #0 [94636ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [94642ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=48352 #0 [94643ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000040) #0 [94643ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=301 #0 [94643ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x200000c0) #0 [94644ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=244 #0 [94644ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000080) #0 [94644ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=156 enabling collider #0 [94653ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [94653ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [94654ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [94654ms] <- openat$tun=0x3 errno=14 cover=1399 pthread_create failed (errno 11) 2021/11/11 12:43:21 result hanged=false: 12:43:21 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) [94712ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:21 #0: triaging type=7 2021/11/11 12:43:21 triaging input for call #5 ioctl$TUNSETCARRIER (new signal=2) spawned worker pid 5493 #0 [94723ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [94723ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [94724ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [94724ms] <- openat$tun=0x3 errno=14 cover=1394 #0 [94726ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [94735ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=43888 #0 [94739ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000040) #0 [94739ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=193 #0 [94739ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x200000c0) #0 [94739ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=157 #0 [94739ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000080) #0 [94740ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=156 12:43:21 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 2021/11/11 12:43:21 result hanged=false: [94771ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5495 #0 [94781ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [94782ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [94782ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [94782ms] <- openat$tun=0x3 errno=14 cover=1404 #0 [94782ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [94787ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=43964 #0 [94792ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000040) #0 [94792ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=193 #0 [94792ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x200000c0) #0 [94792ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=157 #0 [94792ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000080) #0 [94792ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=156 12:43:21 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 2021/11/11 12:43:21 result hanged=false: [94823ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5497 #0 [94833ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [94833ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [94835ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [94836ms] <- openat$tun=0x3 errno=14 cover=1395 #0 [94837ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [94847ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=43909 #0 [94856ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000040) #0 [94856ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=193 #0 [94856ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x200000c0) #0 [94856ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=157 #0 [94856ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000080) #0 [94857ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=156 2021/11/11 12:43:21 result hanged=false: 2021/11/11 12:43:21 added new input for call #5 ioctl$TUNSETCARRIER to corpus: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 12:43:21 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 2021/11/11 12:43:21 #0: triaging type=7 2021/11/11 12:43:21 triaging input for call #4 ioctl$TUNSETCARRIER (new signal=9) [94889ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5499 #0 [94899ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [94899ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [94901ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [94901ms] <- openat$tun=0x3 errno=14 cover=1493 #0 [94903ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [94908ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=43813 #0 [94913ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000040) #0 [94913ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=193 #0 [94914ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x200000c0) #0 [94914ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=157 #0 [94916ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000080) #0 [94916ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=156 12:43:21 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 2021/11/11 12:43:21 result hanged=false: [94954ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5501 #0 [94962ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [94963ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [94964ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [94966ms] <- openat$tun=0x3 errno=14 cover=4399 #0 [94966ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [94971ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=43904 #0 [94975ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000040) #0 [94975ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=193 #0 [94975ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x200000c0) #0 [94975ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=157 #0 [94975ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000080) #0 [94976ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=156 12:43:21 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 2021/11/11 12:43:21 result hanged=false: [95009ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5503 #0 [95019ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [95019ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [95020ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [95020ms] <- openat$tun=0x3 errno=14 cover=1429 #0 [95021ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [95026ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=44064 #0 [95030ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000040) #0 [95030ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=193 #0 [95030ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x200000c0) #0 [95030ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=157 #0 [95030ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000080) #0 [95030ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=156 2021/11/11 12:43:22 result hanged=false: 2021/11/11 12:43:22 added new input for call #4 ioctl$TUNSETCARRIER to corpus: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 12:43:22 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 2021/11/11 12:43:22 #0: triaging type=7 2021/11/11 12:43:22 triaging input for call #3 ioctl$TUNSETCARRIER (new signal=7) [95067ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5505 #0 [95075ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [95076ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [95077ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [95077ms] <- openat$tun=0x3 errno=14 cover=1405 #0 [95078ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [95083ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=45146 #0 [95087ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000040) #0 [95087ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=207 #0 [95087ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x200000c0) #0 [95087ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=157 #0 [95087ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000080) #0 [95088ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=170 12:43:22 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 2021/11/11 12:43:22 result hanged=false: [95124ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5507 #0 [95135ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [95135ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [95136ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [95137ms] <- openat$tun=0x3 errno=14 cover=1384 #0 [95138ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [95151ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=49129 #0 [95158ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000040) #0 [95158ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=193 #0 [95158ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x200000c0) #0 [95159ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=157 #0 [95159ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000080) #0 [95159ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=156 2021/11/11 12:43:22 result hanged=false: 12:43:22 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) [95188ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5509 #0 [95197ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [95197ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [95198ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [95198ms] <- openat$tun=0x3 errno=14 cover=1420 #0 [95199ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [95212ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=49761 #0 [95223ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000040) #0 [95226ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=193 #0 [95226ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x200000c0) #0 [95226ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=157 #0 [95226ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000080) #0 [95226ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=156 2021/11/11 12:43:22 result hanged=false: 2021/11/11 12:43:22 added new input for call #3 ioctl$TUNSETCARRIER to corpus: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 12:43:22 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 2021/11/11 12:43:22 #0: triaging type=7 2021/11/11 12:43:22 triaging input for call #2 ioctl$TUNSETQUEUE (new signal=23) [95257ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5511 #0 [95265ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [95266ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [95269ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [95269ms] <- openat$tun=0x3 errno=14 cover=1462 #0 [95270ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [95274ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=44051 #0 [95281ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000040) #0 [95281ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=193 #0 [95285ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x200000c0) #0 [95285ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=157 #0 [95287ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000080) #0 [95287ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=156 12:43:22 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 2021/11/11 12:43:22 result hanged=false: [95323ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5513 #0 [95332ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [95332ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [95333ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [95334ms] <- openat$tun=0x3 errno=14 cover=1404 #0 [95335ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [95341ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=51018 #0 [95350ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000040) #0 [95350ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=193 #0 [95351ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x200000c0) #0 [95351ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=157 #0 [95351ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000080) #0 [95351ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=156 12:43:22 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 2021/11/11 12:43:22 result hanged=false: [95383ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5515 #0 [95394ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [95394ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [95394ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [95396ms] <- openat$tun=0x3 errno=14 cover=7433 #0 [95397ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [95402ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=44302 #0 [95406ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000040) #0 [95406ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=193 #0 [95406ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x200000c0) #0 [95406ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=157 #0 [95406ms] -> ioctl$TUNSETCARRIER(0x3, 0x400454e2, 0x20000080) #0 [95407ms] <- ioctl$TUNSETCARRIER=0x0 errno=14 cover=156 2021/11/11 12:43:22 result hanged=false: 2021/11/11 12:43:22 added new input for call #2 ioctl$TUNSETQUEUE to corpus: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 12:43:22 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/mnt\x00') [95458ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5517 #0 [95466ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000080) #0 [95467ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8492 enabling collider #0 [95468ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000080) #0 [95469ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=6441 12:43:22 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), 0xffffffffffffffff) 2021/11/11 12:43:22 result hanged=false: [95490ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5519 #0 [95499ms] -> syz_genetlink_get_family_id$nl80211(0x20001780, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [95500ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=13017 enabling collider #0 [95501ms] -> syz_genetlink_get_family_id$nl80211(0x20001780, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [95501ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11339 12:43:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000005, 0x11, r0, 0x0) 2021/11/11 12:43:22 result hanged=false: [95525ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5521 #0 [95535ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [95537ms] <- socket$inet6_tcp=0x3 errno=14 cover=1741 #0 [95537ms] -> mmap(0x20ffc000, 0x3000, 0x3000005, 0x11, 0x3, 0x0) #0 [95538ms] <- mmap=0xffffffffffffffff errno=1 cover=1616 enabling collider #0 [95539ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [95539ms] <- socket$inet6_tcp=0x3 errno=14 cover=1734 12:43:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000005, 0x11, r0, 0x0) 2021/11/11 12:43:22 result hanged=false: 2021/11/11 12:43:22 #0: triaging type=7 2021/11/11 12:43:22 triaging input for call #1 mmap (new signal=3) [95559ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5523 #0 [95569ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [95569ms] <- socket$inet6_tcp=0x3 errno=14 cover=1702 #0 [95571ms] -> mmap(0x20ffc000, 0x3000, 0x3000005, 0x11, 0x3, 0x0) #0 [95571ms] <- mmap=0xffffffffffffffff errno=1 cover=1709 12:43:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000005, 0x11, r0, 0x0) 2021/11/11 12:43:22 result hanged=false: [95592ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5525 #0 [95602ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [95602ms] <- socket$inet6_tcp=0x3 errno=14 cover=1702 #0 [95603ms] -> mmap(0x20ffc000, 0x3000, 0x3000005, 0x11, 0x3, 0x0) #0 [95604ms] <- mmap=0xffffffffffffffff errno=1 cover=1638 12:43:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000005, 0x11, r0, 0x0) 2021/11/11 12:43:22 result hanged=false: [95625ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5527 #0 [95634ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [95635ms] <- socket$inet6_tcp=0x3 errno=14 cover=1794 #0 [95637ms] -> mmap(0x20ffc000, 0x3000, 0x3000005, 0x11, 0x3, 0x0) #0 [95637ms] <- mmap=0xffffffffffffffff errno=1 cover=1618 2021/11/11 12:43:22 result hanged=false: 2021/11/11 12:43:22 added new input for call #1 mmap to corpus: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000005, 0x11, r0, 0x0) 12:43:22 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsync(r0) [95668ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5529 #0 [95676ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [95676ms] <- close_range=0x0 errno=14 cover=1275 #0 [95677ms] -> creat(0x20000040, 0x0) #0 [95677ms] <- creat=0x3 errno=14 cover=6689 #0 [95678ms] -> fsync(0x3) #0 [95682ms] <- fsync=0x0 errno=14 cover=344 enabling collider #0 [95682ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [95682ms] <- close_range=0x0 errno=14 cover=51 #0 [95682ms] -> creat(0x20000040, 0x0) #0 [95683ms] <- creat=0x4 errno=14 cover=5472 pthread_create failed (errno 11) 12:43:22 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsync(r0) 2021/11/11 12:43:22 result hanged=false: 2021/11/11 12:43:22 #0: triaging type=7 2021/11/11 12:43:22 triaging input for call #2 fsync (new signal=7) [95733ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5631 #0 [95745ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [95745ms] <- close_range=0x0 errno=14 cover=1348 #0 [95747ms] -> creat(0x20000040, 0x0) #0 [95747ms] <- creat=0x3 errno=14 cover=6726 #0 [95748ms] -> fsync(0x3) #0 [95751ms] <- fsync=0x0 errno=14 cover=288 12:43:22 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsync(r0) 2021/11/11 12:43:22 result hanged=false: [95771ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5633 #0 [95779ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [95780ms] <- close_range=0x0 errno=14 cover=1319 #0 [95781ms] -> creat(0x20000040, 0x0) #0 [95781ms] <- creat=0x3 errno=14 cover=6693 #0 [95782ms] -> fsync(0x3) #0 [95785ms] <- fsync=0x0 errno=14 cover=313 12:43:22 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsync(r0) 2021/11/11 12:43:22 result hanged=false: [95805ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5635 #0 [95815ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [95816ms] <- close_range=0x0 errno=14 cover=1319 #0 [95817ms] -> creat(0x20000040, 0x0) #0 [95818ms] <- creat=0x3 errno=14 cover=6692 #0 [95819ms] -> fsync(0x3) #0 [95822ms] <- fsync=0x0 errno=14 cover=375 2021/11/11 12:43:22 result hanged=false: 2021/11/11 12:43:22 added new input for call #2 fsync to corpus: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsync(r0) 12:43:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000880)='ext3\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)={[], [{@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '!,1'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@euid_lt}]}) fsmount(0xffffffffffffffff, 0x1, 0x0) [95845ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5637 #0 [95853ms] -> syz_mount_image$ext4(0x20000880, 0x200008c0, 0x0, 0x0, 0x200009c0, 0x0, 0x20000a00) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file0' fs='ext3' flags=0 opts='dont_measure,smackfstransmute=!,1,func=MMAP_CHECK,euid<00000000000000000000,,errors=continue' [ 3001.322404] EXT4-fs (loop0): VFS: Can't find ext4 filesystem syz_mount_image > mount error: 22 #0 [95870ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=26544 #0 [95871ms] -> fsmount(0xffffffffffffffff, 0x1, 0x0) #0 [95871ms] <- fsmount=0xffffffffffffffff errno=9 cover=97 enabling collider #0 [95872ms] -> syz_mount_image$ext4(0x20000880, 0x200008c0, 0x0, 0x0, 0x200009c0, 0x0, 0x20000a00) #0 [95880ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=16 cover=11145 2021/11/11 12:43:22 result hanged=false: 2021/11/11 12:43:22 #0: triaging type=7 2021/11/11 12:43:22 triaging input for call #0 syz_mount_image$ext4 (new signal=1) 12:43:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000880)='ext3\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)={[], [{@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '!,1'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@euid_lt}]}) fsmount(0xffffffffffffffff, 0x1, 0x0) [95902ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5639 #0 [95911ms] -> syz_mount_image$ext4(0x20000880, 0x200008c0, 0x0, 0x0, 0x200009c0, 0x0, 0x20000a00) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file0' fs='ext3' flags=0 opts='dont_measure,smackfstransmute=!,1,func=MMAP_CHECK,euid<00000000000000000000,,errors=continue' [ 3001.378966] EXT4-fs (loop0): VFS: Can't find ext4 filesystem syz_mount_image > mount error: 22 #0 [95925ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=35807 #0 [95928ms] -> fsmount(0xffffffffffffffff, 0x1, 0x0) #0 [95928ms] <- fsmount=0xffffffffffffffff errno=9 cover=97 2021/11/11 12:43:22 result hanged=false: 12:43:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000880)='ext3\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)={[], [{@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '!,1'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@euid_lt}]}) fsmount(0xffffffffffffffff, 0x1, 0x0) [95951ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5641 #0 [95960ms] -> syz_mount_image$ext4(0x20000880, 0x200008c0, 0x0, 0x0, 0x200009c0, 0x0, 0x20000a00) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file0' fs='ext3' flags=0 opts='dont_measure,smackfstransmute=!,1,func=MMAP_CHECK,euid<00000000000000000000,,errors=continue' [ 3001.426925] EXT4-fs (loop0): VFS: Can't find ext4 filesystem syz_mount_image > mount error: 22 #0 [95969ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=26561 #0 [95971ms] -> fsmount(0xffffffffffffffff, 0x1, 0x0) #0 [95971ms] <- fsmount=0xffffffffffffffff errno=9 cover=97 2021/11/11 12:43:22 result hanged=false: 12:43:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000880)='ext3\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)={[], [{@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '!,1'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@euid_lt}]}) fsmount(0xffffffffffffffff, 0x1, 0x0) [95994ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5643 #0 [96004ms] -> syz_mount_image$ext4(0x20000880, 0x200008c0, 0x0, 0x0, 0x200009c0, 0x0, 0x20000a00) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file0' fs='ext3' flags=0 opts='dont_measure,smackfstransmute=!,1,func=MMAP_CHECK,euid<00000000000000000000,,errors=continue' [ 3001.470836] EXT4-fs (loop0): VFS: Can't find ext4 filesystem syz_mount_image > mount error: 22 #0 [96012ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=26392 #0 [96014ms] -> fsmount(0xffffffffffffffff, 0x1, 0x0) #0 [96015ms] <- fsmount=0xffffffffffffffff errno=9 cover=97 2021/11/11 12:43:23 result hanged=false: 2021/11/11 12:43:23 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(&(0x7f0000000880)='ext3\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)={[], [{@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '!,1'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@euid_lt}]}) fsmount(0xffffffffffffffff, 0x1, 0x0) 12:43:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a80), r0) [96071ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5645 #0 [96081ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [96082ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6321 #0 [96083ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x20000a80, 0x4) syz_genetlink_get_family_id(NLBL_MGMT, 4) #0 [96084ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0x14 errno=14 cover=4557 enabling collider #0 [96085ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [96085ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5446 2021/11/11 12:43:23 result hanged=false: 12:43:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a80), r0) 2021/11/11 12:43:23 #0: triaging type=7 2021/11/11 12:43:23 triaging input for call #0 syz_init_net_socket$nl_generic (new signal=2) [96107ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5647 #0 [96117ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [96118ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6318 #0 [96120ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x20000a80, 0x4) syz_genetlink_get_family_id(NLBL_MGMT, 4) #0 [96121ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0x14 errno=14 cover=4588 12:43:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a80), r0) 2021/11/11 12:43:23 result hanged=false: [96144ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5649 #0 [96154ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [96155ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6248 #0 [96157ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x20000a80, 0x4) syz_genetlink_get_family_id(NLBL_MGMT, 4) #0 [96157ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0x14 errno=14 cover=4535 12:43:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a80), r0) 2021/11/11 12:43:23 result hanged=false: [96179ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5651 #0 [96189ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [96190ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6324 #0 [96192ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x20000a80, 0x4) syz_genetlink_get_family_id(NLBL_MGMT, 4) #0 [96194ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0x14 errno=14 cover=4578 2021/11/11 12:43:23 result hanged=false: 2021/11/11 12:43:23 added new input for call #0 syz_init_net_socket$nl_generic to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a80), r0) 12:43:23 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x2, 0x2, [{}, {0x0, 0x8}]}}) [96245ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5653 #0 [96253ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [96254ms] <- socket$inet6_udplite=0x3 errno=14 cover=1613 #0 [96255ms] -> ioctl$sock_SIOCETHTOOL(0x3, 0x8946, 0x20000000) #0 [96255ms] <- ioctl$sock_SIOCETHTOOL=0xffffffffffffffff errno=22 cover=274 enabling collider #0 [96256ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [96256ms] <- socket$inet6_udplite=0x3 errno=14 cover=1656 2021/11/11 12:43:23 result hanged=false: 2021/11/11 12:43:23 #0: triaging type=7 2021/11/11 12:43:23 triaging input for call #1 ioctl$sock_SIOCETHTOOL (new signal=13) 12:43:23 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x2, 0x2, [{}, {0x0, 0x8}]}}) [96276ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5655 #0 [96286ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [96287ms] <- socket$inet6_udplite=0x3 errno=14 cover=1685 #0 [96289ms] -> ioctl$sock_SIOCETHTOOL(0x3, 0x8946, 0x20000000) #0 [96289ms] <- ioctl$sock_SIOCETHTOOL=0xffffffffffffffff errno=22 cover=274 12:43:23 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x2, 0x2, [{}, {0x0, 0x8}]}}) [96309ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:23 result hanged=false: spawned worker pid 5657 #0 [96319ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [96321ms] <- socket$inet6_udplite=0x3 errno=14 cover=1635 #0 [96322ms] -> ioctl$sock_SIOCETHTOOL(0x3, 0x8946, 0x20000000) #0 [96322ms] <- ioctl$sock_SIOCETHTOOL=0xffffffffffffffff errno=22 cover=274 2021/11/11 12:43:23 result hanged=false: 12:43:23 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x2, 0x2, [{}, {0x0, 0x8}]}}) [96342ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5659 #0 [96353ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [96354ms] <- socket$inet6_udplite=0x3 errno=14 cover=1663 #0 [96356ms] -> ioctl$sock_SIOCETHTOOL(0x3, 0x8946, 0x20000000) #0 [96356ms] <- ioctl$sock_SIOCETHTOOL=0xffffffffffffffff errno=22 cover=274 2021/11/11 12:43:23 result hanged=false: 2021/11/11 12:43:23 added new input for call #1 ioctl$sock_SIOCETHTOOL to corpus: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x2, 0x2, [{}, {0x0, 0x8}]}}) 12:43:23 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) dup2(r1, r0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x541b, 0x0) [96383ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:23 poll: candidates=8 inputs=0 signal=0 spawned worker pid 5661 #0 [96392ms] -> openat$zero(0xffffffffffffff9c, 0x200014c0, 0x0, 0x0) #0 [96392ms] <- openat$zero=0x3 errno=14 cover=1063 #0 [96393ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [96393ms] <- syz_open_dev$sg=0x4 errno=14 cover=1391 #0 [96394ms] -> dup2(0x4, 0x3) #0 [96394ms] <- dup2=0x3 errno=14 cover=305 #0 [96394ms] -> ioctl$SG_SET_RESERVED_SIZE(0x3, 0x541b, 0x0) #0 [96394ms] <- ioctl$SG_SET_RESERVED_SIZE=0xffffffffffffffff errno=1 cover=108 enabling collider #0 [96395ms] -> openat$zero(0xffffffffffffff9c, 0x200014c0, 0x0, 0x0) #0 [96396ms] <- openat$zero=0x3 errno=14 cover=1083 #0 [96396ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [96396ms] <- syz_open_dev$sg=0x4 errno=14 cover=1367 pthread_create failed (errno 11) 12:43:23 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) dup2(r1, r0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x541b, 0x0) 2021/11/11 12:43:23 result hanged=false: 2021/11/11 12:43:23 #0: triaging type=7 2021/11/11 12:43:23 triaging input for call #3 ioctl$SG_SET_RESERVED_SIZE (new signal=4) [96445ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5763 #0 [96454ms] -> openat$zero(0xffffffffffffff9c, 0x200014c0, 0x0, 0x0) #0 [96454ms] <- openat$zero=0x3 errno=14 cover=1085 #0 [96455ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [96456ms] <- syz_open_dev$sg=0x4 errno=14 cover=1369 #0 [96456ms] -> dup2(0x4, 0x3) #0 [96456ms] <- dup2=0x3 errno=14 cover=305 #0 [96456ms] -> ioctl$SG_SET_RESERVED_SIZE(0x3, 0x541b, 0x0) #0 [96456ms] <- ioctl$SG_SET_RESERVED_SIZE=0xffffffffffffffff errno=1 cover=108 12:43:23 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) dup2(r1, r0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x541b, 0x0) 2021/11/11 12:43:23 result hanged=false: [96474ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5765 #0 [96484ms] -> openat$zero(0xffffffffffffff9c, 0x200014c0, 0x0, 0x0) #0 [96484ms] <- openat$zero=0x3 errno=14 cover=1084 #0 [96485ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [96485ms] <- syz_open_dev$sg=0x4 errno=14 cover=1390 #0 [96485ms] -> dup2(0x4, 0x3) #0 [96485ms] <- dup2=0x3 errno=14 cover=305 #0 [96485ms] -> ioctl$SG_SET_RESERVED_SIZE(0x3, 0x541b, 0x0) #0 [96485ms] <- ioctl$SG_SET_RESERVED_SIZE=0xffffffffffffffff errno=1 cover=108 12:43:23 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) dup2(r1, r0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x541b, 0x0) 2021/11/11 12:43:23 result hanged=false: [96503ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5767 #0 [96513ms] -> openat$zero(0xffffffffffffff9c, 0x200014c0, 0x0, 0x0) #0 [96514ms] <- openat$zero=0x3 errno=14 cover=1084 #0 [96514ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [96514ms] <- syz_open_dev$sg=0x4 errno=14 cover=1407 #0 [96515ms] -> dup2(0x4, 0x3) #0 [96515ms] <- dup2=0x3 errno=14 cover=305 #0 [96515ms] -> ioctl$SG_SET_RESERVED_SIZE(0x3, 0x541b, 0x0) #0 [96515ms] <- ioctl$SG_SET_RESERVED_SIZE=0xffffffffffffffff errno=1 cover=108 2021/11/11 12:43:23 result hanged=false: 2021/11/11 12:43:23 added new input for call #3 ioctl$SG_SET_RESERVED_SIZE to corpus: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) dup2(r1, r0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x541b, 0x0) 12:43:23 executing program 0: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) [96533ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5769 #0 [96543ms] -> syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x20000540, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [96545ms] <- syz_mount_image$nfs=0xffffffffffffffff errno=14 cover=9501 enabling collider #0 [96545ms] -> syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x20000540, 0x0, 0x0) #0 [96547ms] <- syz_mount_image$nfs=0xffffffffffffffff errno=16 cover=4651 2021/11/11 12:43:23 result hanged=false: 12:43:23 executing program 0: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 2021/11/11 12:43:23 #0: triaging type=7 2021/11/11 12:43:23 triaging input for call #0 syz_mount_image$nfs (new signal=3) [96565ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5771 #0 [96574ms] -> syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x20000540, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [96576ms] <- syz_mount_image$nfs=0xffffffffffffffff errno=14 cover=9552 12:43:23 executing program 0: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 2021/11/11 12:43:23 result hanged=false: [96599ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5773 #0 [96608ms] -> syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x20000540, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [96609ms] <- syz_mount_image$nfs=0xffffffffffffffff errno=14 cover=9519 12:43:23 executing program 0: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 2021/11/11 12:43:23 result hanged=false: [96666ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5775 #0 [96679ms] -> syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x20000540, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [96680ms] <- syz_mount_image$nfs=0xffffffffffffffff errno=14 cover=9661 2021/11/11 12:43:23 result hanged=false: 2021/11/11 12:43:23 added new input for call #0 syz_mount_image$nfs to corpus: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 12:43:23 executing program 0: clone3(&(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [96740ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5777 #0 [96748ms] -> clone3(0x200016c0, 0x58) #0 [96771ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 enabling collider #0 [96774ms] -> clone3(0x200016c0, 0x58) #0 [96798ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 12:43:23 executing program 0: msgrcv(0x0, 0x0, 0x0, 0x8000000000000000, 0x0) 2021/11/11 12:43:23 result hanged=false: [96821ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5781 #0 [96831ms] -> msgrcv(0x0, 0x0, 0x0, 0x8000000000000000, 0x0) #0 [96833ms] <- msgrcv=0xffffffffffffffff errno=22 cover=56 enabling collider #0 [96833ms] -> msgrcv(0x0, 0x0, 0x0, 0x8000000000000000, 0x0) #0 [96833ms] <- msgrcv=0xffffffffffffffff errno=22 cover=56 2021/11/11 12:43:23 result hanged=false: 2021/11/11 12:43:23 #0: triaging type=7 2021/11/11 12:43:23 triaging input for call #0 msgrcv (new signal=2) 12:43:23 executing program 0: msgrcv(0x0, 0x0, 0x0, 0x8000000000000000, 0x0) [96857ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5783 #0 [96868ms] -> msgrcv(0x0, 0x0, 0x0, 0x8000000000000000, 0x0) #0 [96868ms] <- msgrcv=0xffffffffffffffff errno=22 cover=56 2021/11/11 12:43:23 result hanged=false: 12:43:23 executing program 0: msgrcv(0x0, 0x0, 0x0, 0x8000000000000000, 0x0) [96891ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5785 #0 [96901ms] -> msgrcv(0x0, 0x0, 0x0, 0x8000000000000000, 0x0) #0 [96902ms] <- msgrcv=0xffffffffffffffff errno=22 cover=56 12:43:23 executing program 0: msgrcv(0x0, 0x0, 0x0, 0x8000000000000000, 0x0) 2021/11/11 12:43:23 result hanged=false: [96924ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5787 #0 [96934ms] -> msgrcv(0x0, 0x0, 0x0, 0x8000000000000000, 0x0) #0 [96934ms] <- msgrcv=0xffffffffffffffff errno=22 cover=56 2021/11/11 12:43:23 result hanged=false: 2021/11/11 12:43:23 added new input for call #0 msgrcv to corpus: msgrcv(0x0, 0x0, 0x0, 0x8000000000000000, 0x0) 12:43:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r3, 0x0, r2, 0x0, 0x2, 0x0) close_range(r1, r3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [96957ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5789 #0 [96967ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [96968ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3409 #0 [96969ms] -> pipe(0x20000040) #0 [96970ms] <- pipe=0x0 errno=14 cover=1918 #0 [96972ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [96972ms] <- syz_open_dev$tty20=0x6 errno=14 cover=1715 #0 [96974ms] -> splice(0x6, 0x0, 0x5, 0x0, 0x2, 0x0) pthread_create failed (errno 11) 2021/11/11 12:43:25 result hanged=false: 12:43:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/71, 0x47}], 0x1, 0x0, 0x0) [98031ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5891 #0 [98041ms] -> perf_event_open(0x20000180, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [98045ms] <- perf_event_open=0x3 errno=14 cover=6773 #0 [98046ms] -> openat$procfs(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [98047ms] <- openat$procfs=0x4 errno=14 cover=4278 #0 [98048ms] -> preadv(0x4, 0x20000180, 0x1, 0x0, 0x0) #0 [98048ms] <- preadv=0x47 errno=14 cover=3694 enabling collider #0 [98062ms] -> perf_event_open(0x20000180, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [98064ms] <- perf_event_open=0x3 errno=14 cover=6550 #0 [98064ms] -> openat$procfs(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [98065ms] <- openat$procfs=0x4 errno=14 cover=1526 pthread_create failed (errno 11) 2021/11/11 12:43:25 result hanged=false: 2021/11/11 12:43:25 #0: triaging type=7 12:43:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/71, 0x47}], 0x1, 0x0, 0x0) 2021/11/11 12:43:25 triaging input for call #2 preadv (new signal=19) [98133ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5993 #0 [98143ms] -> perf_event_open(0x20000180, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [98144ms] <- perf_event_open=0x3 errno=14 cover=6818 #0 [98145ms] -> openat$procfs(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [98146ms] <- openat$procfs=0x4 errno=14 cover=4198 #0 [98148ms] -> preadv(0x4, 0x20000180, 0x1, 0x0, 0x0) #0 [98148ms] <- preadv=0x47 errno=14 cover=1285 12:43:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/71, 0x47}], 0x1, 0x0, 0x0) 2021/11/11 12:43:25 result hanged=false: [98183ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5995 #0 [98193ms] -> perf_event_open(0x20000180, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [98195ms] <- perf_event_open=0x3 errno=14 cover=6542 #0 [98196ms] -> openat$procfs(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [98197ms] <- openat$procfs=0x4 errno=14 cover=4373 #0 [98197ms] -> preadv(0x4, 0x20000180, 0x1, 0x0, 0x0) #0 [98198ms] <- preadv=0x47 errno=14 cover=1246 12:43:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/71, 0x47}], 0x1, 0x0, 0x0) 2021/11/11 12:43:25 result hanged=false: [98230ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5997 #0 [98241ms] -> perf_event_open(0x20000180, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [98244ms] <- perf_event_open=0x3 errno=14 cover=6543 #0 [98246ms] -> openat$procfs(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [98247ms] <- openat$procfs=0x4 errno=14 cover=4334 #0 [98249ms] -> preadv(0x4, 0x20000180, 0x1, 0x0, 0x0) #0 [98249ms] <- preadv=0x47 errno=14 cover=1256 2021/11/11 12:43:25 result hanged=false: 2021/11/11 12:43:25 added new input for call #2 preadv to corpus: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/71, 0x47}], 0x1, 0x0, 0x0) 12:43:25 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) [98280ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5999 #0 [98286ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98286ms] <- socket$unix=0x3 errno=14 cover=1413 #0 [98286ms] -> bind$unix(0x3, 0x20000080, 0x6e) #0 [98287ms] <- bind$unix=0x0 errno=14 cover=5917 #0 [98288ms] -> listen(0x3, 0x0) #0 [98288ms] <- listen=0x0 errno=14 cover=87 #0 [98288ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98288ms] <- socket$unix=0x4 errno=14 cover=1475 #0 [98288ms] -> connect$unix(0x4, 0x20000140, 0x6e) #0 [98288ms] <- connect$unix=0x0 errno=14 cover=2179 #0 [98288ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98288ms] <- socket$unix=0x5 errno=14 cover=1424 #0 [98288ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98289ms] <- socket$unix=0x6 errno=14 cover=1435 #0 [98289ms] -> sendmsg$unix(0x4, 0x200002c0, 0x0) #0 [98289ms] <- sendmsg$unix=0x0 errno=14 cover=591 enabling collider #0 [98289ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98289ms] <- socket$unix=0x3 errno=14 cover=1445 #0 [98290ms] -> bind$unix(0x3, 0x20000080, 0x6e) #0 [98290ms] <- bind$unix=0xffffffffffffffff errno=98 cover=602 pthread_create failed (errno 11) 12:43:25 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 2021/11/11 12:43:25 result hanged=false: 2021/11/11 12:43:25 #0: triaging type=7 2021/11/11 12:43:25 triaging input for call #7 sendmsg$unix (new signal=1) [98339ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6101 #0 [98350ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98352ms] <- socket$unix=0x3 errno=14 cover=1413 #0 [98353ms] -> bind$unix(0x3, 0x20000080, 0x6e) #0 [98354ms] <- bind$unix=0x0 errno=14 cover=5885 #0 [98357ms] -> listen(0x3, 0x0) #0 [98357ms] <- listen=0x0 errno=14 cover=87 #0 [98357ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98358ms] <- socket$unix=0x4 errno=14 cover=1561 #0 [98358ms] -> connect$unix(0x4, 0x20000140, 0x6e) #0 [98358ms] <- connect$unix=0x0 errno=14 cover=2149 #0 [98359ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98359ms] <- socket$unix=0x5 errno=14 cover=1423 #0 [98360ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98360ms] <- socket$unix=0x6 errno=14 cover=1445 #0 [98360ms] -> sendmsg$unix(0x4, 0x200002c0, 0x0) #0 [98361ms] <- sendmsg$unix=0x0 errno=14 cover=563 2021/11/11 12:43:25 result hanged=false: 12:43:25 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) [98381ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6103 #0 [98393ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98394ms] <- socket$unix=0x3 errno=14 cover=1478 #0 [98395ms] -> bind$unix(0x3, 0x20000080, 0x6e) #0 [98396ms] <- bind$unix=0x0 errno=14 cover=5839 #0 [98396ms] -> listen(0x3, 0x0) #0 [98396ms] <- listen=0x0 errno=14 cover=87 #0 [98397ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98397ms] <- socket$unix=0x4 errno=14 cover=1435 #0 [98397ms] -> connect$unix(0x4, 0x20000140, 0x6e) #0 [98397ms] <- connect$unix=0x0 errno=14 cover=2157 #0 [98398ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98398ms] <- socket$unix=0x5 errno=14 cover=1477 #0 [98398ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98398ms] <- socket$unix=0x6 errno=14 cover=1445 #0 [98399ms] -> sendmsg$unix(0x4, 0x200002c0, 0x0) #0 [98399ms] <- sendmsg$unix=0x0 errno=14 cover=602 2021/11/11 12:43:25 result hanged=false: 12:43:25 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) [98422ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6105 #0 [98432ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98433ms] <- socket$unix=0x3 errno=14 cover=1489 #0 [98435ms] -> bind$unix(0x3, 0x20000080, 0x6e) #0 [98436ms] <- bind$unix=0x0 errno=14 cover=5904 #0 [98437ms] -> listen(0x3, 0x0) #0 [98438ms] <- listen=0x0 errno=14 cover=87 #0 [98438ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98438ms] <- socket$unix=0x4 errno=14 cover=1540 #0 [98439ms] -> connect$unix(0x4, 0x20000140, 0x6e) #0 [98440ms] <- connect$unix=0x0 errno=14 cover=2174 #0 [98440ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98440ms] <- socket$unix=0x5 errno=14 cover=1434 #0 [98441ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98441ms] <- socket$unix=0x6 errno=14 cover=1462 #0 [98441ms] -> sendmsg$unix(0x4, 0x200002c0, 0x0) #0 [98441ms] <- sendmsg$unix=0x0 errno=14 cover=538 2021/11/11 12:43:25 result hanged=false: 2021/11/11 12:43:25 added new input for call #7 sendmsg$unix to corpus: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 12:43:25 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 2021/11/11 12:43:25 #0: triaging type=7 2021/11/11 12:43:25 triaging input for call #4 connect$unix (new signal=2) [98465ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6107 #0 [98474ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98476ms] <- socket$unix=0x3 errno=14 cover=1522 #0 [98478ms] -> bind$unix(0x3, 0x20000080, 0x6e) #0 [98479ms] <- bind$unix=0x0 errno=14 cover=5893 #0 [98480ms] -> listen(0x3, 0x0) #0 [98481ms] <- listen=0x0 errno=14 cover=87 #0 [98481ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98482ms] <- socket$unix=0x4 errno=14 cover=1481 #0 [98482ms] -> connect$unix(0x4, 0x20000140, 0x6e) #0 [98483ms] <- connect$unix=0x0 errno=14 cover=2156 #0 [98483ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98483ms] <- socket$unix=0x5 errno=14 cover=1456 #0 [98484ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98484ms] <- socket$unix=0x6 errno=14 cover=1412 #0 [98484ms] -> sendmsg$unix(0x4, 0x200002c0, 0x0) #0 [98484ms] <- sendmsg$unix=0x0 errno=14 cover=527 12:43:25 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) [98503ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:25 result hanged=false: spawned worker pid 6109 #0 [98511ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98511ms] <- socket$unix=0x3 errno=14 cover=1460 #0 [98514ms] -> bind$unix(0x3, 0x20000080, 0x6e) #0 [98515ms] <- bind$unix=0x0 errno=14 cover=6064 #0 [98518ms] -> listen(0x3, 0x0) #0 [98518ms] <- listen=0x0 errno=14 cover=87 #0 [98519ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98519ms] <- socket$unix=0x4 errno=14 cover=1496 #0 [98519ms] -> connect$unix(0x4, 0x20000140, 0x6e) #0 [98521ms] <- connect$unix=0x0 errno=14 cover=2177 #0 [98524ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98525ms] <- socket$unix=0x5 errno=14 cover=1652 #0 [98526ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98526ms] <- socket$unix=0x6 errno=14 cover=1434 #0 [98527ms] -> sendmsg$unix(0x4, 0x200002c0, 0x0) #0 [98527ms] <- sendmsg$unix=0x0 errno=14 cover=700 12:43:25 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) [98548ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:25 result hanged=false: spawned worker pid 6111 #0 [98555ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98556ms] <- socket$unix=0x3 errno=14 cover=1457 #0 [98556ms] -> bind$unix(0x3, 0x20000080, 0x6e) #0 [98557ms] <- bind$unix=0x0 errno=14 cover=6077 #0 [98558ms] -> listen(0x3, 0x0) #0 [98558ms] <- listen=0x0 errno=14 cover=87 #0 [98558ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98558ms] <- socket$unix=0x4 errno=14 cover=1435 #0 [98559ms] -> connect$unix(0x4, 0x20000140, 0x6e) #0 [98559ms] <- connect$unix=0x0 errno=14 cover=2174 #0 [98560ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98560ms] <- socket$unix=0x5 errno=14 cover=1412 #0 [98561ms] -> socket$unix(0x1, 0x5, 0x0) #0 [98561ms] <- socket$unix=0x6 errno=14 cover=1434 #0 [98562ms] -> sendmsg$unix(0x4, 0x200002c0, 0x0) #0 [98562ms] <- sendmsg$unix=0x0 errno=14 cover=516 2021/11/11 12:43:25 result hanged=false: 2021/11/11 12:43:25 added new input for call #4 connect$unix to corpus: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 12:43:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) sendmsg$inet6(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)='\"', 0x1}], 0x1}, 0x80) recvfrom$inet6(r0, &(0x7f0000000700)=""/4096, 0xe34e, 0xcd08, 0x0, 0x6b4) [98588ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6113 #0 [98595ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [98596ms] <- socket$inet6_tcp=0x3 errno=14 cover=1724 #0 [98599ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x2, 0x20000080, 0x4) #0 [98599ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=142 #0 [98600ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [98600ms] <- bind$inet6=0x0 errno=14 cover=436 #0 [98600ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [98601ms] <- connect$inet6=0x0 errno=14 cover=5135 #0 [98601ms] -> setsockopt$sock_int(0x3, 0x1, 0x8, 0x20002ec0, 0x4) #0 [98601ms] <- setsockopt$sock_int=0x0 errno=14 cover=136 #0 [98602ms] -> sendmsg$inet6(0x3, 0x200006c0, 0x10044001) pthread_create failed (errno 11) 12:43:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, 0x0) 2021/11/11 12:43:26 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [99661ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:26 poll: candidates=8 inputs=0 signal=0 spawned worker pid 6215 #0 [99670ms] -> syz_open_procfs(0x0, 0x20000000) #0 [99671ms] <- syz_open_procfs=0x3 errno=13 cover=7362 #0 [99672ms] -> ioctl$SG_SET_KEEP_ORPHAN(0x3, 0x2287, 0x0) #0 [99672ms] <- ioctl$SG_SET_KEEP_ORPHAN=0xffffffffffffffff errno=25 cover=107 enabling collider #0 [99672ms] -> syz_open_procfs(0x0, 0x20000000) #0 [99673ms] <- syz_open_procfs=0x3 errno=13 cover=6836 2021/11/11 12:43:26 result hanged=false: 2021/11/11 12:43:26 #0: triaging type=7 12:43:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, 0x0) 2021/11/11 12:43:26 triaging input for call #0 syz_open_procfs (new signal=3) [99696ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6217 #0 [99707ms] -> syz_open_procfs(0x0, 0x20000000) #0 [99708ms] <- syz_open_procfs=0x3 errno=13 cover=7304 #0 [99710ms] -> ioctl$SG_SET_KEEP_ORPHAN(0x3, 0x2287, 0x0) #0 [99710ms] <- ioctl$SG_SET_KEEP_ORPHAN=0xffffffffffffffff errno=25 cover=107 2021/11/11 12:43:26 result hanged=false: 12:43:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, 0x0) [99729ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6219 #0 [99738ms] -> syz_open_procfs(0x0, 0x20000000) #0 [99741ms] <- syz_open_procfs=0x3 errno=13 cover=7247 #0 [99743ms] -> ioctl$SG_SET_KEEP_ORPHAN(0x3, 0x2287, 0x0) #0 [99743ms] <- ioctl$SG_SET_KEEP_ORPHAN=0xffffffffffffffff errno=25 cover=107 12:43:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, 0x0) 2021/11/11 12:43:26 result hanged=false: [99763ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6221 #0 [99771ms] -> syz_open_procfs(0x0, 0x20000000) #0 [99772ms] <- syz_open_procfs=0x3 errno=13 cover=7384 #0 [99774ms] -> ioctl$SG_SET_KEEP_ORPHAN(0x3, 0x2287, 0x0) #0 [99774ms] <- ioctl$SG_SET_KEEP_ORPHAN=0xffffffffffffffff errno=25 cover=107 2021/11/11 12:43:26 result hanged=false: 2021/11/11 12:43:26 added new input for call #0 syz_open_procfs to corpus: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, 0x0) 12:43:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x5b) [99810ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6223 #0 [99818ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [99819ms] <- socket$netlink=0x3 errno=14 cover=1421 #0 [99819ms] -> setsockopt$netlink_NETLINK_PKTINFO(0x3, 0x10e, 0x3, 0x0, 0x5b) #0 [99819ms] <- setsockopt$netlink_NETLINK_PKTINFO=0xffffffffffffffff errno=14 cover=457 enabling collider #0 [99820ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [99821ms] <- socket$netlink=0x3 errno=14 cover=1448 12:43:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x5b) 2021/11/11 12:43:26 result hanged=false: 2021/11/11 12:43:26 #0: triaging type=7 2021/11/11 12:43:26 triaging input for call #1 setsockopt$netlink_NETLINK_PKTINFO (new signal=1) [99842ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6225 #0 [99853ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [99853ms] <- socket$netlink=0x3 errno=14 cover=1410 #0 [99855ms] -> setsockopt$netlink_NETLINK_PKTINFO(0x3, 0x10e, 0x3, 0x0, 0x5b) #0 [99855ms] <- setsockopt$netlink_NETLINK_PKTINFO=0xffffffffffffffff errno=14 cover=457 12:43:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x5b) 2021/11/11 12:43:26 result hanged=false: [99879ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6227 #0 [99889ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [99891ms] <- socket$netlink=0x3 errno=14 cover=1421 #0 [99891ms] -> setsockopt$netlink_NETLINK_PKTINFO(0x3, 0x10e, 0x3, 0x0, 0x5b) #0 [99891ms] <- setsockopt$netlink_NETLINK_PKTINFO=0xffffffffffffffff errno=14 cover=457 12:43:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x5b) 2021/11/11 12:43:26 result hanged=false: [99912ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6229 #0 [99921ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [99921ms] <- socket$netlink=0x3 errno=14 cover=1443 #0 [99923ms] -> setsockopt$netlink_NETLINK_PKTINFO(0x3, 0x10e, 0x3, 0x0, 0x5b) #0 [99924ms] <- setsockopt$netlink_NETLINK_PKTINFO=0xffffffffffffffff errno=14 cover=457 2021/11/11 12:43:26 result hanged=false: 2021/11/11 12:43:26 added new input for call #1 setsockopt$netlink_NETLINK_PKTINFO to corpus: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x5b) 12:43:26 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b", 0x55}], 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000000080), 0x4) [99949ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6231 #0 [99958ms] -> syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, 0x20000200, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [99963ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=10309 #0 [99964ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [99965ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=1719 #0 [99965ms] -> setsockopt$inet6_int(0x5, 0x29, 0x40, 0x20000080, 0x4) #0 [99965ms] <- setsockopt$inet6_int=0xffffffffffffffff errno=22 cover=705 enabling collider #0 [99977ms] -> syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, 0x20000200, 0x0, 0x0) #0 [99979ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=16 cover=5699 #0 [99980ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [99980ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1773 pthread_create failed (errno 11) 12:43:27 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b", 0x55}], 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000000080), 0x4) 2021/11/11 12:43:27 result hanged=false: 2021/11/11 12:43:27 #0: triaging type=7 2021/11/11 12:43:27 triaging input for call #2 setsockopt$inet6_int (new signal=26) [100050ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6333 #0 [100060ms] -> syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, 0x20000200, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [100066ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=16241 #0 [100067ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [100068ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=1697 #0 [100068ms] -> setsockopt$inet6_int(0x5, 0x29, 0x40, 0x20000080, 0x4) #0 [100068ms] <- setsockopt$inet6_int=0xffffffffffffffff errno=22 cover=640 2021/11/11 12:43:27 result hanged=false: 12:43:27 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b", 0x55}], 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000000080), 0x4) [100091ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6335 #0 [100102ms] -> syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, 0x20000200, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [100104ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=10255 #0 [100105ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [100106ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=1675 #0 [100106ms] -> setsockopt$inet6_int(0x5, 0x29, 0x40, 0x20000080, 0x4) #0 [100106ms] <- setsockopt$inet6_int=0xffffffffffffffff errno=22 cover=640 12:43:27 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b", 0x55}], 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000000080), 0x4) 2021/11/11 12:43:27 result hanged=false: [100129ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6337 #0 [100138ms] -> syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, 0x20000200, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [100145ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=10535 #0 [100147ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [100148ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=1719 #0 [100150ms] -> setsockopt$inet6_int(0x5, 0x29, 0x40, 0x20000080, 0x4) #0 [100150ms] <- setsockopt$inet6_int=0xffffffffffffffff errno=22 cover=639 2021/11/11 12:43:27 result hanged=false: 2021/11/11 12:43:27 added new input for call #2 setsockopt$inet6_int to corpus: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b", 0x55}], 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000000080), 0x4) 12:43:27 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r1, &(0x7f0000000180)='./file0/file0\x00', 0x20) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x10000400) [100176ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6339 #0 [100185ms] -> syz_mount_image$ext4(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [100188ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12849 #0 [100191ms] -> inotify_init1(0x0) #0 [100191ms] <- inotify_init1=0x3 errno=14 cover=680 #0 [100192ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [100192ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [100193ms] -> inotify_add_watch(0x4, 0x20000180, 0x20) #0 [100193ms] <- inotify_add_watch=0xffffffffffffffff errno=2 cover=1112 #0 [100195ms] -> inotify_init1(0x0) #0 [100195ms] <- inotify_init1=0x5 errno=14 cover=682 #0 [100196ms] -> inotify_add_watch(0x5, 0x20000000, 0x10000400) #0 [100197ms] <- inotify_add_watch=0x1 errno=14 cover=1166 enabling collider #0 [100198ms] -> syz_mount_image$ext4(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [100199ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1426 #0 [100200ms] -> inotify_init1(0x0) #0 [100200ms] <- inotify_init1=0x3 errno=14 cover=682 pthread_create failed (errno 11) 12:43:27 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r1, &(0x7f0000000180)='./file0/file0\x00', 0x20) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x10000400) 2021/11/11 12:43:27 result hanged=false: 2021/11/11 12:43:27 #0: triaging type=7 2021/11/11 12:43:27 triaging input for call #5 inotify_add_watch (new signal=1) [100259ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6441 #0 [100269ms] -> syz_mount_image$ext4(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [100271ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12643 #0 [100274ms] -> inotify_init1(0x0) #0 [100274ms] <- inotify_init1=0x3 errno=14 cover=582 #0 [100275ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [100275ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [100276ms] -> inotify_add_watch(0x4, 0x20000180, 0x20) #0 [100276ms] <- inotify_add_watch=0xffffffffffffffff errno=2 cover=1043 #0 [100277ms] -> inotify_init1(0x0) #0 [100277ms] <- inotify_init1=0x5 errno=14 cover=592 #0 [100278ms] -> inotify_add_watch(0x5, 0x20000000, 0x10000400) #0 [100279ms] <- inotify_add_watch=0x1 errno=14 cover=1076 12:43:27 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r1, &(0x7f0000000180)='./file0/file0\x00', 0x20) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x10000400) 2021/11/11 12:43:27 result hanged=false: [100303ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6443 #0 [100311ms] -> syz_mount_image$ext4(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [100312ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12651 #0 [100314ms] -> inotify_init1(0x0) #0 [100314ms] <- inotify_init1=0x3 errno=14 cover=596 #0 [100314ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [100314ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [100314ms] -> inotify_add_watch(0x4, 0x20000180, 0x20) #0 [100314ms] <- inotify_add_watch=0xffffffffffffffff errno=2 cover=1029 #0 [100314ms] -> inotify_init1(0x0) #0 [100315ms] <- inotify_init1=0x5 errno=14 cover=570 #0 [100315ms] -> inotify_add_watch(0x5, 0x20000000, 0x10000400) #0 [100315ms] <- inotify_add_watch=0x1 errno=14 cover=1144 12:43:27 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r1, &(0x7f0000000180)='./file0/file0\x00', 0x20) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x10000400) 2021/11/11 12:43:27 result hanged=false: [100339ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6445 #0 [100348ms] -> syz_mount_image$ext4(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [100349ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12706 #0 [100351ms] -> inotify_init1(0x0) #0 [100351ms] <- inotify_init1=0x3 errno=14 cover=643 #0 [100351ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [100351ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [100351ms] -> inotify_add_watch(0x4, 0x20000180, 0x20) #0 [100352ms] <- inotify_add_watch=0xffffffffffffffff errno=2 cover=1029 #0 [100352ms] -> inotify_init1(0x0) #0 [100352ms] <- inotify_init1=0x5 errno=14 cover=581 #0 [100352ms] -> inotify_add_watch(0x5, 0x20000000, 0x10000400) #0 [100352ms] <- inotify_add_watch=0x1 errno=14 cover=1064 2021/11/11 12:43:27 result hanged=false: 2021/11/11 12:43:27 added new input for call #5 inotify_add_watch to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r1, &(0x7f0000000180)='./file0/file0\x00', 0x20) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x10000400) 2021/11/11 12:43:27 #0: triaging type=7 12:43:27 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r1, &(0x7f0000000180)='./file0/file0\x00', 0x20) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x10000400) [100376ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:27 triaging input for call #3 inotify_add_watch (new signal=3) spawned worker pid 6447 #0 [100386ms] -> syz_mount_image$ext4(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [100387ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12845 #0 [100388ms] -> inotify_init1(0x0) #0 [100388ms] <- inotify_init1=0x3 errno=14 cover=626 #0 [100389ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [100389ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [100390ms] -> inotify_add_watch(0x4, 0x20000180, 0x20) #0 [100390ms] <- inotify_add_watch=0xffffffffffffffff errno=2 cover=1037 #0 [100391ms] -> inotify_init1(0x0) #0 [100391ms] <- inotify_init1=0x5 errno=14 cover=570 #0 [100391ms] -> inotify_add_watch(0x5, 0x20000000, 0x10000400) #0 [100392ms] <- inotify_add_watch=0x1 errno=14 cover=1076 12:43:27 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r1, &(0x7f0000000180)='./file0/file0\x00', 0x20) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x10000400) 2021/11/11 12:43:27 result hanged=false: [100413ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6449 #0 [100424ms] -> syz_mount_image$ext4(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [100425ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12809 #0 [100427ms] -> inotify_init1(0x0) #0 [100427ms] <- inotify_init1=0x3 errno=14 cover=585 #0 [100427ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [100427ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [100427ms] -> inotify_add_watch(0x4, 0x20000180, 0x20) #0 [100427ms] <- inotify_add_watch=0xffffffffffffffff errno=2 cover=1029 #0 [100428ms] -> inotify_init1(0x0) #0 [100428ms] <- inotify_init1=0x5 errno=14 cover=632 #0 [100428ms] -> inotify_add_watch(0x5, 0x20000000, 0x10000400) #0 [100428ms] <- inotify_add_watch=0x1 errno=14 cover=1076 12:43:27 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r1, &(0x7f0000000180)='./file0/file0\x00', 0x20) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x10000400) 2021/11/11 12:43:27 result hanged=false: [100449ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6451 #0 [100459ms] -> syz_mount_image$ext4(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [100462ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12805 #0 [100465ms] -> inotify_init1(0x0) #0 [100465ms] <- inotify_init1=0x3 errno=14 cover=582 #0 [100466ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [100466ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [100466ms] -> inotify_add_watch(0x4, 0x20000180, 0x20) #0 [100467ms] <- inotify_add_watch=0xffffffffffffffff errno=2 cover=1025 #0 [100467ms] -> inotify_init1(0x0) #0 [100467ms] <- inotify_init1=0x5 errno=14 cover=625 #0 [100468ms] -> inotify_add_watch(0x5, 0x20000000, 0x10000400) #0 [100468ms] <- inotify_add_watch=0x1 errno=14 cover=1076 2021/11/11 12:43:27 result hanged=false: 2021/11/11 12:43:27 added new input for call #3 inotify_add_watch to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r1, &(0x7f0000000180)='./file0/file0\x00', 0x20) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x10000400) 12:43:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x2, &(0x7f0000000340)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000200)="02000000030000000464a79749ad3f7818e021478f4689e4e539609e5637a9ab64012a85b92342f61b3e9c0246da01b87512f553f1c8fb68d129aa9f225d8562d9116581cd1d62aa346a140d512159f3c7f5cbbf642b3dd25f5b2e116ca10bddaf22249e02d75705388f76c9443e8864a3cbd3b248816983f752709d286fb5822153454c39c04d7b4c95fa9826bda9c5bb00d1d031d4f0cd14", 0x99, 0x90}], 0x1010809, &(0x7f0000000100)=ANY=[]) [100496ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6453 #0 [100504ms] -> syz_mount_image$ext4(0x20000300, 0x20000040, 0x40000, 0x2, 0x20000340, 0x1010809, 0x20000100) syz_mount_image: size=262144 segs=2 loop='/dev/loop0' dir='./file0' fs='ext2' flags=16844809 opts=',errors=continue' [ 3005.973967] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 3005.976062] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3005.978026] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3005.979907] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3005.985196] EXT4-fs error (device loop0): ext4_fill_super:4960: inode #2: comm syz-executor.0: casefold flag without casefold feature [ 3005.990673] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 3005.992082] EXT4-fs (loop0): mount failed syz_mount_image > mount error: 22 #0 [100552ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=94487 enabling collider #0 [100556ms] -> syz_mount_image$ext4(0x20000300, 0x20000040, 0x40000, 0x2, 0x20000340, 0x1010809, 0x20000100) syz_mount_image: size=262144 segs=2 loop='/dev/loop0' dir='./file0' fs='ext2' flags=16844809 opts=',errors=continue' [ 3006.024183] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 3006.026974] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3006.028910] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3006.030822] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3006.034878] EXT4-fs error (device loop0): ext4_fill_super:4960: inode #2: comm syz-executor.0: casefold flag without casefold feature [ 3006.037726] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 3006.040047] EXT4-fs (loop0): mount failed syz_mount_image > mount error: 22 #0 [100590ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=65633 2021/11/11 12:43:27 result hanged=false: 2021/11/11 12:43:27 #0: triaging type=7 2021/11/11 12:43:27 triaging input for call #0 syz_mount_image$ext4 (new signal=66) 12:43:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x2, &(0x7f0000000340)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000200)="02000000030000000464a79749ad3f7818e021478f4689e4e539609e5637a9ab64012a85b92342f61b3e9c0246da01b87512f553f1c8fb68d129aa9f225d8562d9116581cd1d62aa346a140d512159f3c7f5cbbf642b3dd25f5b2e116ca10bddaf22249e02d75705388f76c9443e8864a3cbd3b248816983f752709d286fb5822153454c39c04d7b4c95fa9826bda9c5bb00d1d031d4f0cd14", 0x99, 0x90}], 0x1010809, &(0x7f0000000100)=ANY=[]) [100620ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6455 #0 [100632ms] -> syz_mount_image$ext4(0x20000300, 0x20000040, 0x40000, 0x2, 0x20000340, 0x1010809, 0x20000100) syz_mount_image: size=262144 segs=2 loop='/dev/loop0' dir='./file0' fs='ext2' flags=16844809 opts=',errors=continue' [ 3006.103340] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 3006.110605] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3006.112512] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3006.114475] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3006.122446] EXT4-fs error (device loop0): ext4_fill_super:4960: inode #2: comm syz-executor.0: casefold flag without casefold feature [ 3006.126199] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 3006.127785] EXT4-fs (loop0): mount failed syz_mount_image > mount error: 22 #0 [100676ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=54048 2021/11/11 12:43:27 result hanged=false: 12:43:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x2, &(0x7f0000000340)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000200)="02000000030000000464a79749ad3f7818e021478f4689e4e539609e5637a9ab64012a85b92342f61b3e9c0246da01b87512f553f1c8fb68d129aa9f225d8562d9116581cd1d62aa346a140d512159f3c7f5cbbf642b3dd25f5b2e116ca10bddaf22249e02d75705388f76c9443e8864a3cbd3b248816983f752709d286fb5822153454c39c04d7b4c95fa9826bda9c5bb00d1d031d4f0cd14", 0x99, 0x90}], 0x1010809, &(0x7f0000000100)=ANY=[]) [100707ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6457 #0 [100719ms] -> syz_mount_image$ext4(0x20000300, 0x20000040, 0x40000, 0x2, 0x20000340, 0x1010809, 0x20000100) syz_mount_image: size=262144 segs=2 loop='/dev/loop0' dir='./file0' fs='ext2' flags=16844809 opts=',errors=continue' [ 3006.191606] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 3006.199435] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3006.201351] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3006.203207] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3006.209479] EXT4-fs error (device loop0): ext4_fill_super:4960: inode #2: comm syz-executor.0: casefold flag without casefold feature [ 3006.212923] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 3006.214382] EXT4-fs (loop0): mount failed syz_mount_image > mount error: 22 #0 [100761ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=54637 12:43:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x2, &(0x7f0000000340)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000200)="02000000030000000464a79749ad3f7818e021478f4689e4e539609e5637a9ab64012a85b92342f61b3e9c0246da01b87512f553f1c8fb68d129aa9f225d8562d9116581cd1d62aa346a140d512159f3c7f5cbbf642b3dd25f5b2e116ca10bddaf22249e02d75705388f76c9443e8864a3cbd3b248816983f752709d286fb5822153454c39c04d7b4c95fa9826bda9c5bb00d1d031d4f0cd14", 0x99, 0x90}], 0x1010809, &(0x7f0000000100)=ANY=[]) 2021/11/11 12:43:27 result hanged=false: [100791ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6459 #0 [100800ms] -> syz_mount_image$ext4(0x20000300, 0x20000040, 0x40000, 0x2, 0x20000340, 0x1010809, 0x20000100) syz_mount_image: size=262144 segs=2 loop='/dev/loop0' dir='./file0' fs='ext2' flags=16844809 opts=',errors=continue' [ 3006.270638] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 3006.273102] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3006.275135] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3006.277012] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3006.282874] EXT4-fs error (device loop0): ext4_fill_super:4960: inode #2: comm syz-executor.0: casefold flag without casefold feature [ 3006.286113] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 3006.288871] EXT4-fs (loop0): mount failed syz_mount_image > mount error: 22 #0 [100846ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=72067 2021/11/11 12:43:27 result hanged=false: 2021/11/11 12:43:27 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x2, &(0x7f0000000340)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000200)="02000000030000000464a79749ad3f7818e021478f4689e4e539609e5637a9ab64012a85b92342f61b3e9c0246da01b87512f553f1c8fb68d129aa9f225d8562d9116581cd1d62aa346a140d512159f3c7f5cbbf642b3dd25f5b2e116ca10bddaf22249e02d75705388f76c9443e8864a3cbd3b248816983f752709d286fb5822153454c39c04d7b4c95fa9826bda9c5bb00d1d031d4f0cd14", 0x99, 0x90}], 0x1010809, &(0x7f0000000100)=ANY=[]) 12:43:27 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd8f4655fd8f4655f000000000000040002", 0x1d, 0x1500}], 0x0, &(0x7f0000000180)={[{@nobarrier}]}) [100952ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6461 #0 [100961ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [100961ms] <- open=0x3 errno=14 cover=6751 #0 [100962ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000200, 0x0, 0x20000180) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts='nobarrier,,errors=continue' [ 3006.435629] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue syz_mount_image > mount error: 20 #0 [100988ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=20 cover=96013 enabling collider #0 [100990ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [100990ms] <- open=0xffffffffffffffff errno=17 cover=1080 2021/11/11 12:43:27 result hanged=false: 2021/11/11 12:43:27 #0: triaging type=7 2021/11/11 12:43:28 triaging input for call #1 syz_mount_image$ext4 (new signal=4) 12:43:28 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd8f4655fd8f4655f000000000000040002", 0x1d, 0x1500}], 0x0, &(0x7f0000000180)={[{@nobarrier}]}) [101015ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6463 #0 [101024ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [101027ms] <- open=0x3 errno=14 cover=6750 #0 [101028ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000200, 0x0, 0x20000180) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts='nobarrier,,errors=continue' [ 3006.506165] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue syz_mount_image > mount error: 20 #0 [101057ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=20 cover=87059 2021/11/11 12:43:28 result hanged=false: 12:43:28 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd8f4655fd8f4655f000000000000040002", 0x1d, 0x1500}], 0x0, &(0x7f0000000180)={[{@nobarrier}]}) [101096ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6465 #0 [101105ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [101106ms] <- open=0x3 errno=14 cover=6714 #0 [101108ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000200, 0x0, 0x20000180) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts='nobarrier,,errors=continue' [ 3006.579907] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue syz_mount_image > mount error: 20 #0 [101137ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=20 cover=101554 2021/11/11 12:43:28 result hanged=false: 12:43:28 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd8f4655fd8f4655f000000000000040002", 0x1d, 0x1500}], 0x0, &(0x7f0000000180)={[{@nobarrier}]}) [101167ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6467 #0 [101176ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [101177ms] <- open=0x3 errno=14 cover=6670 #0 [101179ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000200, 0x0, 0x20000180) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts='nobarrier,,errors=continue' [ 3006.653402] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue syz_mount_image > mount error: 20 #0 [101205ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=20 cover=97018 2021/11/11 12:43:28 result hanged=false: 2021/11/11 12:43:28 added new input for call #1 syz_mount_image$ext4 to corpus: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd8f4655fd8f4655f000000000000040002", 0x1d, 0x1500}], 0x0, &(0x7f0000000180)={[{@nobarrier}]}) 12:43:28 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x9) [101309ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6469 #0 [101317ms] -> openat$procfs(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [101318ms] <- openat$procfs=0x3 errno=14 cover=2575 #0 [101319ms] -> creat(0x200002c0, 0x0) #0 [101320ms] <- creat=0x4 errno=14 cover=6754 #0 [101321ms] -> sendfile(0x4, 0x3, 0x0, 0x9) #0 [101323ms] <- sendfile=0x9 errno=14 cover=15176 enabling collider #0 [101323ms] -> openat$procfs(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [101324ms] <- openat$procfs=0x3 errno=14 cover=1508 #0 [101325ms] -> creat(0x200002c0, 0x0) #0 [101326ms] <- creat=0x4 errno=14 cover=7672 pthread_create failed (errno 11) 12:43:28 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x9) 2021/11/11 12:43:28 result hanged=false: 2021/11/11 12:43:28 #0: triaging type=7 2021/11/11 12:43:28 triaging input for call #2 sendfile (new signal=87) [101381ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6571 #0 [101391ms] -> openat$procfs(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [101392ms] <- openat$procfs=0x3 errno=14 cover=1532 #0 [101393ms] -> creat(0x200002c0, 0x0) #0 [101394ms] <- creat=0x4 errno=14 cover=6732 #0 [101395ms] -> sendfile(0x4, 0x3, 0x0, 0x9) #0 [101397ms] <- sendfile=0x9 errno=14 cover=7046 12:43:28 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x9) 2021/11/11 12:43:28 result hanged=false: [101417ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6573 #0 [101428ms] -> openat$procfs(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [101429ms] <- openat$procfs=0x3 errno=14 cover=1500 #0 [101431ms] -> creat(0x200002c0, 0x0) #0 [101432ms] <- creat=0x4 errno=14 cover=6769 #0 [101433ms] -> sendfile(0x4, 0x3, 0x0, 0x9) #0 [101434ms] <- sendfile=0x9 errno=14 cover=7028 12:43:28 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x9) 2021/11/11 12:43:28 result hanged=false: [101459ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6575 #0 [101468ms] -> openat$procfs(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [101468ms] <- openat$procfs=0x3 errno=14 cover=1524 #0 [101469ms] -> creat(0x200002c0, 0x0) #0 [101470ms] <- creat=0x4 errno=14 cover=6920 #0 [101472ms] -> sendfile(0x4, 0x3, 0x0, 0x9) #0 [101472ms] <- sendfile=0x9 errno=14 cover=6995 2021/11/11 12:43:28 result hanged=false: 2021/11/11 12:43:28 added new input for call #2 sendfile to corpus: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x9) 12:43:28 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x9) [101521ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6577 2021/11/11 12:43:28 #0: triaging type=7 2021/11/11 12:43:28 triaging input for call #1 creat (new signal=2) #0 [101530ms] -> openat$procfs(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [101530ms] <- openat$procfs=0x3 errno=14 cover=1499 #0 [101531ms] -> creat(0x200002c0, 0x0) #0 [101531ms] <- creat=0x4 errno=14 cover=6724 #0 [101532ms] -> sendfile(0x4, 0x3, 0x0, 0x9) #0 [101533ms] <- sendfile=0x9 errno=14 cover=7075 2021/11/11 12:43:28 result hanged=false: 12:43:28 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x9) [101556ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6579 #0 [101564ms] -> openat$procfs(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [101565ms] <- openat$procfs=0x3 errno=14 cover=1499 #0 [101565ms] -> creat(0x200002c0, 0x0) #0 [101566ms] <- creat=0x4 errno=14 cover=6794 #0 [101566ms] -> sendfile(0x4, 0x3, 0x0, 0x9) #0 [101567ms] <- sendfile=0x9 errno=14 cover=7057 12:43:28 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x9) 2021/11/11 12:43:28 result hanged=false: [101588ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6581 #0 [101597ms] -> openat$procfs(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [101598ms] <- openat$procfs=0x3 errno=14 cover=1601 #0 [101599ms] -> creat(0x200002c0, 0x0) #0 [101600ms] <- creat=0x4 errno=14 cover=6728 #0 [101601ms] -> sendfile(0x4, 0x3, 0x0, 0x9) #0 [101602ms] <- sendfile=0x9 errno=14 cover=7073 2021/11/11 12:43:28 result hanged=false: 2021/11/11 12:43:28 added new input for call #1 creat to corpus: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x9) 12:43:28 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x9) [101636ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6583 2021/11/11 12:43:28 #0: triaging type=7 2021/11/11 12:43:28 triaging input for call #0 openat$procfs (new signal=11) #0 [101646ms] -> openat$procfs(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [101646ms] <- openat$procfs=0x3 errno=14 cover=1523 #0 [101651ms] -> creat(0x200002c0, 0x0) #0 [101651ms] <- creat=0x4 errno=14 cover=6844 #0 [101652ms] -> sendfile(0x4, 0x3, 0x0, 0x9) #0 [101653ms] <- sendfile=0x9 errno=14 cover=7166 2021/11/11 12:43:28 result hanged=false: 12:43:28 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x9) [101676ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6585 #0 [101685ms] -> openat$procfs(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [101687ms] <- openat$procfs=0x3 errno=14 cover=1524 #0 [101688ms] -> creat(0x200002c0, 0x0) #0 [101689ms] <- creat=0x4 errno=14 cover=6740 #0 [101691ms] -> sendfile(0x4, 0x3, 0x0, 0x9) #0 [101691ms] <- sendfile=0x9 errno=14 cover=6967 2021/11/11 12:43:28 result hanged=false: 12:43:28 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x9) [101713ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6587 #0 [101722ms] -> openat$procfs(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [101722ms] <- openat$procfs=0x3 errno=14 cover=1456 #0 [101723ms] -> creat(0x200002c0, 0x0) #0 [101723ms] <- creat=0x4 errno=14 cover=6744 #0 [101724ms] -> sendfile(0x4, 0x3, 0x0, 0x9) #0 [101725ms] <- sendfile=0x9 errno=14 cover=6993 2021/11/11 12:43:28 result hanged=false: 2021/11/11 12:43:28 added new input for call #0 openat$procfs to corpus: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x9) 12:43:28 executing program 0: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) ftruncate(r1, 0x200000) dup2(r1, r0) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0x0) [101756ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6589 #0 [101765ms] -> memfd_create(0x20000340, 0x0) #0 [101765ms] <- memfd_create=0x3 errno=14 cover=1109 #0 [101766ms] -> memfd_create(0x20000340, 0x6) #0 [101766ms] <- memfd_create=0x4 errno=14 cover=1329 #0 [101767ms] -> ftruncate(0x4, 0x200000) #0 [101767ms] <- ftruncate=0x0 errno=14 cover=324 #0 [101767ms] -> dup2(0x4, 0x3) #0 [101767ms] <- dup2=0x3 errno=14 cover=693 #0 [101768ms] -> fcntl$addseals(0x3, 0x409, 0x7) #0 [101768ms] <- fcntl$addseals=0x0 errno=14 cover=964 #0 [101768ms] -> ftruncate(0x3, 0x0) #0 [101768ms] <- ftruncate=0xffffffffffffffff errno=1 cover=209 enabling collider #0 [101769ms] -> memfd_create(0x20000340, 0x0) #0 [101770ms] <- memfd_create=0x3 errno=14 cover=1097 #0 [101770ms] -> memfd_create(0x20000340, 0x6) #0 [101770ms] <- memfd_create=0x4 errno=14 cover=1314 pthread_create failed (errno 11) 2021/11/11 12:43:28 result hanged=false: 2021/11/11 12:43:28 #0: triaging type=7 2021/11/11 12:43:28 triaging input for call #5 ftruncate (new signal=2) 12:43:28 executing program 0: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) ftruncate(r1, 0x200000) dup2(r1, r0) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0x0) [101822ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6691 #0 [101831ms] -> memfd_create(0x20000340, 0x0) #0 [101831ms] <- memfd_create=0x3 errno=14 cover=1131 #0 [101833ms] -> memfd_create(0x20000340, 0x6) #0 [101833ms] <- memfd_create=0x4 errno=14 cover=1413 #0 [101834ms] -> ftruncate(0x4, 0x200000) #0 [101834ms] <- ftruncate=0x0 errno=14 cover=324 #0 [101837ms] -> dup2(0x4, 0x3) #0 [101837ms] <- dup2=0x3 errno=14 cover=707 #0 [101838ms] -> fcntl$addseals(0x3, 0x409, 0x7) #0 [101838ms] <- fcntl$addseals=0x0 errno=14 cover=84 #0 [101839ms] -> ftruncate(0x3, 0x0) #0 [101839ms] <- ftruncate=0xffffffffffffffff errno=1 cover=209 12:43:28 executing program 0: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) ftruncate(r1, 0x200000) dup2(r1, r0) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0x0) 2021/11/11 12:43:28 result hanged=false: [101860ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6693 #0 [101871ms] -> memfd_create(0x20000340, 0x0) #0 [101871ms] <- memfd_create=0x3 errno=14 cover=1159 #0 [101873ms] -> memfd_create(0x20000340, 0x6) #0 [101873ms] <- memfd_create=0x4 errno=14 cover=1293 #0 [101873ms] -> ftruncate(0x4, 0x200000) #0 [101873ms] <- ftruncate=0x0 errno=14 cover=324 #0 [101874ms] -> dup2(0x4, 0x3) #0 [101875ms] <- dup2=0x3 errno=14 cover=693 #0 [101875ms] -> fcntl$addseals(0x3, 0x409, 0x7) #0 [101875ms] <- fcntl$addseals=0x0 errno=14 cover=84 #0 [101875ms] -> ftruncate(0x3, 0x0) #0 [101876ms] <- ftruncate=0xffffffffffffffff errno=1 cover=209 12:43:28 executing program 0: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) ftruncate(r1, 0x200000) dup2(r1, r0) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0x0) 2021/11/11 12:43:28 result hanged=false: [101896ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6695 #0 [101907ms] -> memfd_create(0x20000340, 0x0) #0 [101911ms] <- memfd_create=0x3 errno=14 cover=1109 #0 [101912ms] -> memfd_create(0x20000340, 0x6) #0 [101913ms] <- memfd_create=0x4 errno=14 cover=1328 #0 [101913ms] -> ftruncate(0x4, 0x200000) #0 [101913ms] <- ftruncate=0x0 errno=14 cover=324 #0 [101914ms] -> dup2(0x4, 0x3) #0 [101914ms] <- dup2=0x3 errno=14 cover=693 #0 [101915ms] -> fcntl$addseals(0x3, 0x409, 0x7) #0 [101915ms] <- fcntl$addseals=0x0 errno=14 cover=84 #0 [101916ms] -> ftruncate(0x3, 0x0) #0 [101916ms] <- ftruncate=0xffffffffffffffff errno=1 cover=209 2021/11/11 12:43:28 result hanged=false: 2021/11/11 12:43:28 added new input for call #5 ftruncate to corpus: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) ftruncate(r1, 0x200000) dup2(r1, r0) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0x0) 12:43:28 executing program 0: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) ftruncate(r1, 0x200000) dup2(r1, r0) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0x0) 2021/11/11 12:43:28 #0: triaging type=7 2021/11/11 12:43:28 triaging input for call #4 fcntl$addseals (new signal=1) [101942ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6697 #0 [101953ms] -> memfd_create(0x20000340, 0x0) #0 [101955ms] <- memfd_create=0x3 errno=14 cover=1218 #0 [101959ms] -> memfd_create(0x20000340, 0x6) #0 [101960ms] <- memfd_create=0x4 errno=14 cover=1293 #0 [101964ms] -> ftruncate(0x4, 0x200000) #0 [101964ms] <- ftruncate=0x0 errno=14 cover=324 #0 [101964ms] -> dup2(0x4, 0x3) #0 [101964ms] <- dup2=0x3 errno=14 cover=693 #0 [101968ms] -> fcntl$addseals(0x3, 0x409, 0x7) #0 [101968ms] <- fcntl$addseals=0x0 errno=14 cover=84 #0 [101968ms] -> ftruncate(0x3, 0x0) #0 [101968ms] <- ftruncate=0xffffffffffffffff errno=1 cover=209 12:43:28 executing program 0: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) ftruncate(r1, 0x200000) dup2(r1, r0) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0x0) 2021/11/11 12:43:28 result hanged=false: [101988ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6699 #0 [101996ms] -> memfd_create(0x20000340, 0x0) #0 [101997ms] <- memfd_create=0x3 errno=14 cover=1131 #0 [101999ms] -> memfd_create(0x20000340, 0x6) #0 [101999ms] <- memfd_create=0x4 errno=14 cover=1332 #0 [102000ms] -> ftruncate(0x4, 0x200000) #0 [102000ms] <- ftruncate=0x0 errno=14 cover=324 #0 [102001ms] -> dup2(0x4, 0x3) #0 [102001ms] <- dup2=0x3 errno=14 cover=693 #0 [102002ms] -> fcntl$addseals(0x3, 0x409, 0x7) #0 [102002ms] <- fcntl$addseals=0x0 errno=14 cover=84 #0 [102003ms] -> ftruncate(0x3, 0x0) #0 [102003ms] <- ftruncate=0xffffffffffffffff errno=1 cover=209 2021/11/11 12:43:29 result hanged=false: 12:43:29 executing program 0: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) ftruncate(r1, 0x200000) dup2(r1, r0) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0x0) [102025ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6701 #0 [102036ms] -> memfd_create(0x20000340, 0x0) #0 [102036ms] <- memfd_create=0x3 errno=14 cover=1109 #0 [102037ms] -> memfd_create(0x20000340, 0x6) #0 [102037ms] <- memfd_create=0x4 errno=14 cover=1293 #0 [102038ms] -> ftruncate(0x4, 0x200000) #0 [102038ms] <- ftruncate=0x0 errno=14 cover=324 #0 [102038ms] -> dup2(0x4, 0x3) #0 [102038ms] <- dup2=0x3 errno=14 cover=693 #0 [102039ms] -> fcntl$addseals(0x3, 0x409, 0x7) #0 [102039ms] <- fcntl$addseals=0x0 errno=14 cover=84 #0 [102039ms] -> ftruncate(0x3, 0x0) #0 [102039ms] <- ftruncate=0xffffffffffffffff errno=1 cover=209 2021/11/11 12:43:29 result hanged=false: 2021/11/11 12:43:29 added new input for call #4 fcntl$addseals to corpus: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) ftruncate(r1, 0x200000) dup2(r1, r0) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0x0) 2021/11/11 12:43:29 #0: triaging type=7 2021/11/11 12:43:29 triaging input for call #2 ftruncate (new signal=2) 12:43:29 executing program 0: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) ftruncate(r1, 0x200000) dup2(r1, r0) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0x0) [102067ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6703 #0 [102076ms] -> memfd_create(0x20000340, 0x0) #0 [102076ms] <- memfd_create=0x3 errno=14 cover=1099 #0 [102077ms] -> memfd_create(0x20000340, 0x6) #0 [102077ms] <- memfd_create=0x4 errno=14 cover=1294 #0 [102078ms] -> ftruncate(0x4, 0x200000) #0 [102078ms] <- ftruncate=0x0 errno=14 cover=324 #0 [102078ms] -> dup2(0x4, 0x3) #0 [102078ms] <- dup2=0x3 errno=14 cover=693 #0 [102078ms] -> fcntl$addseals(0x3, 0x409, 0x7) #0 [102078ms] <- fcntl$addseals=0x0 errno=14 cover=84 #0 [102078ms] -> ftruncate(0x3, 0x0) #0 [102078ms] <- ftruncate=0xffffffffffffffff errno=1 cover=209 2021/11/11 12:43:29 result hanged=false: 12:43:29 executing program 0: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) ftruncate(r1, 0x200000) dup2(r1, r0) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0x0) [102102ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6705 #0 [102112ms] -> memfd_create(0x20000340, 0x0) #0 [102112ms] <- memfd_create=0x3 errno=14 cover=1098 #0 [102113ms] -> memfd_create(0x20000340, 0x6) #0 [102113ms] <- memfd_create=0x4 errno=14 cover=1304 #0 [102114ms] -> ftruncate(0x4, 0x200000) #0 [102115ms] <- ftruncate=0x0 errno=14 cover=324 #0 [102116ms] -> dup2(0x4, 0x3) #0 [102116ms] <- dup2=0x3 errno=14 cover=693 #0 [102117ms] -> fcntl$addseals(0x3, 0x409, 0x7) #0 [102117ms] <- fcntl$addseals=0x0 errno=14 cover=84 #0 [102119ms] -> ftruncate(0x3, 0x0) #0 [102119ms] <- ftruncate=0xffffffffffffffff errno=1 cover=209 12:43:29 executing program 0: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) ftruncate(r1, 0x200000) dup2(r1, r0) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0x0) 2021/11/11 12:43:29 result hanged=false: [102139ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6707 #0 [102149ms] -> memfd_create(0x20000340, 0x0) #0 [102149ms] <- memfd_create=0x3 errno=14 cover=1145 #0 [102150ms] -> memfd_create(0x20000340, 0x6) #0 [102150ms] <- memfd_create=0x4 errno=14 cover=1380 #0 [102154ms] -> ftruncate(0x4, 0x200000) #0 [102154ms] <- ftruncate=0x0 errno=14 cover=324 #0 [102154ms] -> dup2(0x4, 0x3) #0 [102155ms] <- dup2=0x3 errno=14 cover=693 #0 [102155ms] -> fcntl$addseals(0x3, 0x409, 0x7) #0 [102155ms] <- fcntl$addseals=0x0 errno=14 cover=84 #0 [102156ms] -> ftruncate(0x3, 0x0) #0 [102156ms] <- ftruncate=0xffffffffffffffff errno=1 cover=209 2021/11/11 12:43:29 result hanged=false: 2021/11/11 12:43:29 added new input for call #2 ftruncate to corpus: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) ftruncate(r1, 0x200000) dup2(r1, r0) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0x0) 12:43:29 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) [102185ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6709 2021/11/11 12:43:29 poll: candidates=8 inputs=0 signal=0 #0 [102200ms] -> openat$full(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [102200ms] <- openat$full=0x3 errno=14 cover=1063 #0 [102201ms] -> clock_gettime(0x0, 0x200000c0) #0 [102201ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [102201ms] -> syz_genetlink_get_family_id$nl80211(0x20000480, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [102202ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11974 #0 [102204ms] -> openat$zero(0xffffffffffffff9c, 0x20001600, 0x400000, 0x0) #0 [102204ms] <- openat$zero=0xffffffffffffffff errno=22 cover=48 #0 [102204ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) #0 [102205ms] <- syz_init_net_socket$bt_l2cap=0xffffffffffffffff errno=94 cover=5695 #0 [102206ms] -> syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [102206ms] <- syz_genetlink_get_family_id$tipc=0xffffffffffffffff errno=14 cover=2780 enabling collider #0 [102207ms] -> openat$full(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [102208ms] <- openat$full=0x3 errno=14 cover=1138 #0 [102208ms] -> clock_gettime(0x0, 0x200000c0) #0 [102208ms] <- clock_gettime=0x0 errno=14 cover=75 pthread_create failed (errno 11) 2021/11/11 12:43:29 result hanged=false: 2021/11/11 12:43:29 #0: triaging type=7 12:43:29 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 2021/11/11 12:43:29 triaging input for call #4 syz_init_net_socket$bt_l2cap (new signal=1) [102266ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6811 #0 [102276ms] -> openat$full(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [102278ms] <- openat$full=0x3 errno=14 cover=1075 #0 [102279ms] -> clock_gettime(0x0, 0x200000c0) #0 [102279ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [102279ms] -> syz_genetlink_get_family_id$nl80211(0x20000480, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [102280ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11872 #0 [102282ms] -> openat$zero(0xffffffffffffff9c, 0x20001600, 0x400000, 0x0) #0 [102284ms] <- openat$zero=0xffffffffffffffff errno=22 cover=48 #0 [102284ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) #0 [102284ms] <- syz_init_net_socket$bt_l2cap=0xffffffffffffffff errno=94 cover=5517 #0 [102285ms] -> syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [102285ms] <- syz_genetlink_get_family_id$tipc=0xffffffffffffffff errno=14 cover=2766 2021/11/11 12:43:29 result hanged=false: 12:43:29 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) [102306ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6813 #0 [102315ms] -> openat$full(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [102315ms] <- openat$full=0x3 errno=14 cover=1096 #0 [102316ms] -> clock_gettime(0x0, 0x200000c0) #0 [102316ms] <- clock_gettime=0x0 errno=14 cover=89 #0 [102316ms] -> syz_genetlink_get_family_id$nl80211(0x20000480, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [102317ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11809 #0 [102319ms] -> openat$zero(0xffffffffffffff9c, 0x20001600, 0x400000, 0x0) #0 [102319ms] <- openat$zero=0xffffffffffffffff errno=22 cover=48 #0 [102320ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) #0 [102321ms] <- syz_init_net_socket$bt_l2cap=0xffffffffffffffff errno=94 cover=5583 #0 [102323ms] -> syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [102323ms] <- syz_genetlink_get_family_id$tipc=0xffffffffffffffff errno=14 cover=2847 2021/11/11 12:43:29 result hanged=false: 12:43:29 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) [102345ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6815 #0 [102354ms] -> openat$full(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [102355ms] <- openat$full=0x3 errno=14 cover=1064 #0 [102356ms] -> clock_gettime(0x0, 0x200000c0) #0 [102356ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [102357ms] -> syz_genetlink_get_family_id$nl80211(0x20000480, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [102358ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11919 #0 [102359ms] -> openat$zero(0xffffffffffffff9c, 0x20001600, 0x400000, 0x0) #0 [102360ms] <- openat$zero=0xffffffffffffffff errno=22 cover=48 #0 [102361ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) #0 [102361ms] <- syz_init_net_socket$bt_l2cap=0xffffffffffffffff errno=94 cover=5557 #0 [102363ms] -> syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [102363ms] <- syz_genetlink_get_family_id$tipc=0xffffffffffffffff errno=14 cover=2826 2021/11/11 12:43:29 result hanged=false: 2021/11/11 12:43:29 added new input for call #4 syz_init_net_socket$bt_l2cap to corpus: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 12:43:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)=@updsa={0x104, 0x1a, 0x9, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@coaddr={0x14, 0xe, @in=@empty}]}, 0x104}}, 0x0) [102395ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6817 #0 [102404ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [102404ms] <- socket$nl_xfrm=0x3 errno=14 cover=1408 #0 [102406ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) #0 [102407ms] <- sendmsg$nl_xfrm=0x104 errno=14 cover=1891 enabling collider #0 [102407ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [102408ms] <- socket$nl_xfrm=0x3 errno=14 cover=1407 2021/11/11 12:43:29 result hanged=false: 2021/11/11 12:43:29 #0: triaging type=7 2021/11/11 12:43:29 triaging input for call #1 sendmsg$nl_xfrm (new signal=9) 12:43:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)=@updsa={0x104, 0x1a, 0x9, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@coaddr={0x14, 0xe, @in=@empty}]}, 0x104}}, 0x0) [102433ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6819 #0 [102443ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [102443ms] <- socket$nl_xfrm=0x3 errno=14 cover=1452 #0 [102446ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) #0 [102446ms] <- sendmsg$nl_xfrm=0x104 errno=14 cover=1907 12:43:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)=@updsa={0x104, 0x1a, 0x9, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@coaddr={0x14, 0xe, @in=@empty}]}, 0x104}}, 0x0) 2021/11/11 12:43:29 result hanged=false: [102465ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6821 #0 [102475ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [102476ms] <- socket$nl_xfrm=0x3 errno=14 cover=1486 #0 [102477ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) #0 [102477ms] <- sendmsg$nl_xfrm=0x104 errno=14 cover=1900 12:43:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)=@updsa={0x104, 0x1a, 0x9, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@coaddr={0x14, 0xe, @in=@empty}]}, 0x104}}, 0x0) 2021/11/11 12:43:29 result hanged=false: [102496ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6823 #0 [102505ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [102506ms] <- socket$nl_xfrm=0x3 errno=14 cover=1473 #0 [102507ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) #0 [102508ms] <- sendmsg$nl_xfrm=0x104 errno=14 cover=1949 2021/11/11 12:43:29 result hanged=false: 2021/11/11 12:43:29 added new input for call #1 sendmsg$nl_xfrm to corpus: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)=@updsa={0x104, 0x1a, 0x9, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@coaddr={0x14, 0xe, @in=@empty}]}, 0x104}}, 0x0) 12:43:29 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='id_legacy\x00', 0x0) [102536ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6825 #0 [102546ms] -> keyctl$set_reqkey_keyring(0xe, 0x0) #0 [102546ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=313 #0 [102546ms] -> keyctl$set_reqkey_keyring(0xe, 0x2) #0 [102546ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=1091 #0 [102547ms] -> request_key(0x20000000, 0x200003c0, 0x20000400, 0x0) #0 [102549ms] <- request_key=0xffffffffffffffff errno=2 cover=7158 enabling collider #0 [102549ms] -> keyctl$set_reqkey_keyring(0xe, 0x0) #0 [102549ms] <- keyctl$set_reqkey_keyring=0x2 errno=14 cover=283 #0 [102550ms] -> keyctl$set_reqkey_keyring(0xe, 0x2) #0 [102550ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=345 pthread_create failed (errno 11) 2021/11/11 12:43:29 result hanged=false: 2021/11/11 12:43:29 #0: triaging type=7 2021/11/11 12:43:29 triaging input for call #2 request_key (new signal=6) 12:43:29 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='id_legacy\x00', 0x0) [102603ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6927 #0 [102613ms] -> keyctl$set_reqkey_keyring(0xe, 0x0) #0 [102613ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=316 #0 [102614ms] -> keyctl$set_reqkey_keyring(0xe, 0x2) #0 [102614ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=731 #0 [102615ms] -> request_key(0x20000000, 0x200003c0, 0x20000400, 0x0) #0 [102617ms] <- request_key=0xffffffffffffffff errno=2 cover=6761 2021/11/11 12:43:29 result hanged=false: 12:43:29 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='id_legacy\x00', 0x0) [102637ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6929 #0 [102646ms] -> keyctl$set_reqkey_keyring(0xe, 0x0) #0 [102648ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=280 #0 [102649ms] -> keyctl$set_reqkey_keyring(0xe, 0x2) #0 [102649ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=803 #0 [102650ms] -> request_key(0x20000000, 0x200003c0, 0x20000400, 0x0) #0 [102652ms] <- request_key=0xffffffffffffffff errno=2 cover=7222 12:43:29 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='id_legacy\x00', 0x0) 2021/11/11 12:43:29 result hanged=false: [102676ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6931 #0 [102685ms] -> keyctl$set_reqkey_keyring(0xe, 0x0) #0 [102685ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=291 #0 [102686ms] -> keyctl$set_reqkey_keyring(0xe, 0x2) #0 [102686ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=816 #0 [102687ms] -> request_key(0x20000000, 0x200003c0, 0x20000400, 0x0) #0 [102691ms] <- request_key=0xffffffffffffffff errno=2 cover=6862 2021/11/11 12:43:29 result hanged=false: 2021/11/11 12:43:29 added new input for call #2 request_key to corpus: keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='id_legacy\x00', 0x0) 2021/11/11 12:43:29 #0: triaging type=7 2021/11/11 12:43:29 triaging input for call #1 keyctl$set_reqkey_keyring (new signal=7) 12:43:29 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='id_legacy\x00', 0x0) [102721ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6933 #0 [102730ms] -> keyctl$set_reqkey_keyring(0xe, 0x0) #0 [102730ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=291 #0 [102731ms] -> keyctl$set_reqkey_keyring(0xe, 0x2) #0 [102731ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=844 #0 [102732ms] -> request_key(0x20000000, 0x200003c0, 0x20000400, 0x0) #0 [102734ms] <- request_key=0xffffffffffffffff errno=2 cover=6348 2021/11/11 12:43:29 result hanged=false: 12:43:29 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='id_legacy\x00', 0x0) [102755ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6935 #0 [102764ms] -> keyctl$set_reqkey_keyring(0xe, 0x0) #0 [102764ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=324 #0 [102765ms] -> keyctl$set_reqkey_keyring(0xe, 0x2) #0 [102765ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=797 #0 [102766ms] -> request_key(0x20000000, 0x200003c0, 0x20000400, 0x0) #0 [102774ms] <- request_key=0xffffffffffffffff errno=2 cover=6415 12:43:29 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='id_legacy\x00', 0x0) 2021/11/11 12:43:29 result hanged=false: [102799ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6937 #0 [102807ms] -> keyctl$set_reqkey_keyring(0xe, 0x0) #0 [102807ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=280 #0 [102808ms] -> keyctl$set_reqkey_keyring(0xe, 0x2) #0 [102808ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=889 #0 [102808ms] -> request_key(0x20000000, 0x200003c0, 0x20000400, 0x0) #0 [102809ms] <- request_key=0xffffffffffffffff errno=2 cover=6784 2021/11/11 12:43:29 result hanged=false: 2021/11/11 12:43:29 added new input for call #1 keyctl$set_reqkey_keyring to corpus: keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='id_legacy\x00', 0x0) 12:43:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) [102833ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 6939 #0 [102843ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [102844ms] <- socket$inet6_udplite=0x3 errno=14 cover=1635 #0 [102844ms] -> setsockopt$inet6_udp_encap(0x3, 0x11, 0x64, 0x20000000, 0x4) #0 [102845ms] <- setsockopt$inet6_udp_encap=0x0 errno=14 cover=2350 #0 [102845ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [102846ms] <- close_range=0x0 errno=14 cover=4294 enabling collider #0 [102847ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [102848ms] <- socket$inet6_udplite=0x3 errno=14 cover=1808 #0 [102849ms] -> setsockopt$inet6_udp_encap(0x3, 0x11, 0x64, 0x20000000, 0x4) #0 [102850ms] <- setsockopt$inet6_udp_encap=0x0 errno=14 cover=1637 pthread_create failed (errno 11) 2021/11/11 12:43:29 result hanged=false: 2021/11/11 12:43:29 #0: triaging type=7 12:43:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2021/11/11 12:43:29 triaging input for call #2 close_range (new signal=10) [102906ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7041 #0 [102917ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [102918ms] <- socket$inet6_udplite=0x3 errno=14 cover=1646 #0 [102919ms] -> setsockopt$inet6_udp_encap(0x3, 0x11, 0x64, 0x20000000, 0x4) #0 [102919ms] <- setsockopt$inet6_udp_encap=0x0 errno=14 cover=1364 #0 [102921ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [102922ms] <- close_range=0x0 errno=14 cover=4798 12:43:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2021/11/11 12:43:29 result hanged=false: [102942ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7043 #0 [102953ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [102954ms] <- socket$inet6_udplite=0x3 errno=14 cover=1668 #0 [102955ms] -> setsockopt$inet6_udp_encap(0x3, 0x11, 0x64, 0x20000000, 0x4) #0 [102955ms] <- setsockopt$inet6_udp_encap=0x0 errno=14 cover=1381 #0 [102955ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [102957ms] <- close_range=0x0 errno=14 cover=4336 12:43:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2021/11/11 12:43:29 result hanged=false: [102977ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7045 #0 [102988ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [102992ms] <- socket$inet6_udplite=0x3 errno=14 cover=1681 #0 [102992ms] -> setsockopt$inet6_udp_encap(0x3, 0x11, 0x64, 0x20000000, 0x4) #0 [102993ms] <- setsockopt$inet6_udp_encap=0x0 errno=14 cover=1465 #0 [102993ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [102994ms] <- close_range=0x0 errno=14 cover=4277 2021/11/11 12:43:29 result hanged=false: 2021/11/11 12:43:29 added new input for call #2 close_range to corpus: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 12:43:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2021/11/11 12:43:30 #0: triaging type=7 2021/11/11 12:43:30 triaging input for call #1 setsockopt$inet6_udp_encap (new signal=6) [103018ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7047 #0 [103027ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [103027ms] <- socket$inet6_udplite=0x3 errno=14 cover=1624 #0 [103028ms] -> setsockopt$inet6_udp_encap(0x3, 0x11, 0x64, 0x20000000, 0x4) #0 [103029ms] <- setsockopt$inet6_udp_encap=0x0 errno=14 cover=1374 #0 [103029ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [103030ms] <- close_range=0x0 errno=14 cover=4299 12:43:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) [103049ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:30 result hanged=false: spawned worker pid 7049 #0 [103061ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [103062ms] <- socket$inet6_udplite=0x3 errno=14 cover=1679 #0 [103063ms] -> setsockopt$inet6_udp_encap(0x3, 0x11, 0x64, 0x20000000, 0x4) #0 [103064ms] <- setsockopt$inet6_udp_encap=0x0 errno=14 cover=1696 #0 [103065ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [103065ms] <- close_range=0x0 errno=14 cover=5118 2021/11/11 12:43:30 result hanged=false: 12:43:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) [103087ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7051 #0 [103097ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [103097ms] <- socket$inet6_udplite=0x3 errno=14 cover=1682 #0 [103098ms] -> setsockopt$inet6_udp_encap(0x3, 0x11, 0x64, 0x20000000, 0x4) #0 [103098ms] <- setsockopt$inet6_udp_encap=0x0 errno=14 cover=1358 #0 [103099ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [103101ms] <- close_range=0x0 errno=14 cover=4279 2021/11/11 12:43:30 poll: candidates=0 inputs=0 signal=0 2021/11/11 12:43:30 result hanged=false: 2021/11/11 12:43:30 added new input for call #1 setsockopt$inet6_udp_encap to corpus: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 12:43:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}}}}}, 0x0) syz_emit_ethernet(0x78, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [103130ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7053 #0 [103140ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [103141ms] <- perf_event_open=0x3 errno=14 cover=6951 #0 [103142ms] -> syz_emit_ethernet(0x2a, 0x20000000, 0x0) 01 80 c2 00 00 00 ff ff ff ff ff ff 08 00 45 00 00 1c 00 00 00 00 00 01 95 20 64 01 01 02 ac 14 14 aa 00 00 ff ff 00 00 00 00 #0 [103143ms] <- syz_emit_ethernet=0x2a errno=14 cover=14172 #0 [103144ms] -> syz_emit_ethernet(0x78, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [103145ms] <- syz_emit_ethernet=0xffffffffffffffff errno=14 cover=1035 #0 [103146ms] -> dup2(0xffffffffffffffff, 0xffffffffffffffff) #0 [103146ms] <- dup2=0xffffffffffffffff errno=9 cover=41 enabling collider #0 [103157ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [103158ms] <- perf_event_open=0x3 errno=14 cover=6504 #0 [103158ms] -> syz_emit_ethernet(0x2a, 0x20000000, 0x0) 01 80 c2 00 00 00 ff ff ff ff ff ff 08 00 45 00 00 1c 00 00 00 00 00 01 95 20 64 01 01 02 ac 14 14 aa 00 00 ff ff 00 00 00 00 #0 [103159ms] <- syz_emit_ethernet=0x2a errno=14 cover=13220 pthread_create failed (errno 11) 12:43:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}}}}}, 0x0) syz_emit_ethernet(0x78, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 2021/11/11 12:43:30 result hanged=false: 2021/11/11 12:43:30 #0: triaging type=7 2021/11/11 12:43:30 triaging input for call #3 dup2 (new signal=1) iptable filter/2: resetting iptable mangle/2: resetting [103224ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7155 #0 [103233ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [103237ms] <- perf_event_open=0x3 errno=14 cover=6446 #0 [103238ms] -> syz_emit_ethernet(0x2a, 0x20000000, 0x0) 01 80 c2 00 00 00 ff ff ff ff ff ff 08 00 45 00 00 1c 00 00 00 00 00 01 95 20 64 01 01 02 ac 14 14 aa 00 00 ff ff 00 00 00 00 #0 [103239ms] <- syz_emit_ethernet=0x2a errno=14 cover=13339 #0 [103240ms] -> syz_emit_ethernet(0x78, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [103241ms] <- syz_emit_ethernet=0xffffffffffffffff errno=14 cover=1090 #0 [103242ms] -> dup2(0xffffffffffffffff, 0xffffffffffffffff) #0 [103242ms] <- dup2=0xffffffffffffffff errno=9 cover=41 12:43:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}}}}}, 0x0) syz_emit_ethernet(0x78, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 2021/11/11 12:43:30 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [103283ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7157 #0 [103296ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [103298ms] <- perf_event_open=0x3 errno=14 cover=6773 #0 [103299ms] -> syz_emit_ethernet(0x2a, 0x20000000, 0x0) 01 80 c2 00 00 00 ff ff ff ff ff ff 08 00 45 00 00 1c 00 00 00 00 00 01 95 20 64 01 01 02 ac 14 14 aa 00 00 ff ff 00 00 00 00 #0 [103301ms] <- syz_emit_ethernet=0x2a errno=14 cover=23878 #0 [103304ms] -> syz_emit_ethernet(0x78, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [103304ms] <- syz_emit_ethernet=0xffffffffffffffff errno=14 cover=2108 #0 [103305ms] -> dup2(0xffffffffffffffff, 0xffffffffffffffff) #0 [103305ms] <- dup2=0xffffffffffffffff errno=9 cover=70 12:43:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}}}}}, 0x0) syz_emit_ethernet(0x78, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 2021/11/11 12:43:30 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [103346ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7159 #0 [103358ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [103359ms] <- perf_event_open=0x3 errno=14 cover=6797 #0 [103361ms] -> syz_emit_ethernet(0x2a, 0x20000000, 0x0) 01 80 c2 00 00 00 ff ff ff ff ff ff 08 00 45 00 00 1c 00 00 00 00 00 01 95 20 64 01 01 02 ac 14 14 aa 00 00 ff ff 00 00 00 00 #0 [103363ms] <- syz_emit_ethernet=0x2a errno=14 cover=24011 #0 [103366ms] -> syz_emit_ethernet(0x78, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [103366ms] <- syz_emit_ethernet=0xffffffffffffffff errno=14 cover=2108 #0 [103366ms] -> dup2(0xffffffffffffffff, 0xffffffffffffffff) #0 [103366ms] <- dup2=0xffffffffffffffff errno=9 cover=70 2021/11/11 12:43:30 result hanged=false: 2021/11/11 12:43:30 added new input for call #3 dup2 to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}}}}}, 0x0) syz_emit_ethernet(0x78, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 12:43:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}}}}}, 0x0) syz_emit_ethernet(0x78, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 2021/11/11 12:43:30 #0: triaging type=7 2021/11/11 12:43:30 triaging input for call #1 syz_emit_ethernet (new signal=8) iptable filter/2: resetting iptable mangle/2: resetting [103400ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7161 #0 [103409ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [103418ms] <- perf_event_open=0x3 errno=14 cover=11231 #0 [103421ms] -> syz_emit_ethernet(0x2a, 0x20000000, 0x0) 01 80 c2 00 00 00 ff ff ff ff ff ff 08 00 45 00 00 1c 00 00 00 00 00 01 95 20 64 01 01 02 ac 14 14 aa 00 00 ff ff 00 00 00 00 #0 [103422ms] <- syz_emit_ethernet=0x2a errno=14 cover=24979 #0 [103425ms] -> syz_emit_ethernet(0x78, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [103426ms] <- syz_emit_ethernet=0xffffffffffffffff errno=14 cover=2100 #0 [103427ms] -> dup2(0xffffffffffffffff, 0xffffffffffffffff) #0 [103427ms] <- dup2=0xffffffffffffffff errno=9 cover=70 12:43:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}}}}}, 0x0) syz_emit_ethernet(0x78, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 2021/11/11 12:43:30 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [103458ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7163 #0 [103468ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [103468ms] <- perf_event_open=0x3 errno=14 cover=6511 #0 [103470ms] -> syz_emit_ethernet(0x2a, 0x20000000, 0x0) 01 80 c2 00 00 00 ff ff ff ff ff ff 08 00 45 00 00 1c 00 00 00 00 00 01 95 20 64 01 01 02 ac 14 14 aa 00 00 ff ff 00 00 00 00 #0 [103471ms] <- syz_emit_ethernet=0x2a errno=14 cover=25008 #0 [103473ms] -> syz_emit_ethernet(0x78, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [103474ms] <- syz_emit_ethernet=0xffffffffffffffff errno=14 cover=2220 #0 [103475ms] -> dup2(0xffffffffffffffff, 0xffffffffffffffff) #0 [103475ms] <- dup2=0xffffffffffffffff errno=9 cover=70 2021/11/11 12:43:30 result hanged=false: 12:43:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}}}}}, 0x0) syz_emit_ethernet(0x78, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) iptable filter/2: resetting iptable mangle/2: resetting [103510ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7165 #0 [103520ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [103522ms] <- perf_event_open=0x3 errno=14 cover=6566 #0 [103525ms] -> syz_emit_ethernet(0x2a, 0x20000000, 0x0) 01 80 c2 00 00 00 ff ff ff ff ff ff 08 00 45 00 00 1c 00 00 00 00 00 01 95 20 64 01 01 02 ac 14 14 aa 00 00 ff ff 00 00 00 00 #0 [103530ms] <- syz_emit_ethernet=0x2a errno=14 cover=24418 #0 [103533ms] -> syz_emit_ethernet(0x78, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [103533ms] <- syz_emit_ethernet=0xffffffffffffffff errno=14 cover=2220 #0 [103534ms] -> dup2(0xffffffffffffffff, 0xffffffffffffffff) #0 [103535ms] <- dup2=0xffffffffffffffff errno=9 cover=70 2021/11/11 12:43:30 result hanged=false: 2021/11/11 12:43:30 added new input for call #1 syz_emit_ethernet to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}}}}}, 0x0) syz_emit_ethernet(0x78, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) iptable filter/2: resetting iptable mangle/2: resetting 12:43:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001b003107000000000000000001"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) [103585ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7167 #0 [103594ms] -> socket$netlink(0x10, 0x3, 0x10) #0 [103595ms] <- socket$netlink=0x3 errno=14 cover=1445 #0 [103595ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [103607ms] <- sendmsg$nl_generic=0x14 errno=14 cover=116395 #0 [103608ms] -> syz_genetlink_get_family_id$nl80211(0x200000c0, 0x3) syz_genetlink_get_family_id(nl80211, 3) netlink_send_ext: short netlink ack: 27 netlink: failed to get family id for nl80211: Invalid argument syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [103609ms] <- syz_genetlink_get_family_id$nl80211=0xffffffffffffffff errno=22 cover=10057 enabling collider #0 [103609ms] -> socket$netlink(0x10, 0x3, 0x10) #0 [103610ms] <- socket$netlink=0x3 errno=14 cover=1422 #0 [103610ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [103620ms] <- sendmsg$nl_generic=0x14 errno=14 cover=116432 pthread_create failed (errno 11) 2021/11/11 12:43:30 result hanged=false: 12:43:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001b003107000000000000000001"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 2021/11/11 12:43:30 #0: triaging type=7 2021/11/11 12:43:30 triaging input for call #2 syz_genetlink_get_family_id$nl80211 (new signal=2) [103674ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7269 #0 [103682ms] -> socket$netlink(0x10, 0x3, 0x10) #0 [103682ms] <- socket$netlink=0x3 errno=14 cover=1434 #0 [103683ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [103693ms] <- sendmsg$nl_generic=0x14 errno=14 cover=116439 #0 [103698ms] -> syz_genetlink_get_family_id$nl80211(0x200000c0, 0x3) syz_genetlink_get_family_id(nl80211, 3) netlink_send_ext: short netlink ack: 27 netlink: failed to get family id for nl80211: Invalid argument syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [103700ms] <- syz_genetlink_get_family_id$nl80211=0xffffffffffffffff errno=22 cover=10187 2021/11/11 12:43:30 result hanged=false: 12:43:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001b003107000000000000000001"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) [103721ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7271 #0 [103730ms] -> socket$netlink(0x10, 0x3, 0x10) #0 [103731ms] <- socket$netlink=0x3 errno=14 cover=1423 #0 [103732ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [103745ms] <- sendmsg$nl_generic=0x14 errno=14 cover=116425 #0 [103761ms] -> syz_genetlink_get_family_id$nl80211(0x200000c0, 0x3) syz_genetlink_get_family_id(nl80211, 3) netlink_send_ext: short netlink ack: 27 netlink: failed to get family id for nl80211: Invalid argument syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [103762ms] <- syz_genetlink_get_family_id$nl80211=0xffffffffffffffff errno=22 cover=10135 2021/11/11 12:43:30 result hanged=false: 12:43:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001b003107000000000000000001"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) [103785ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7273 #0 [103795ms] -> socket$netlink(0x10, 0x3, 0x10) #0 [103795ms] <- socket$netlink=0x3 errno=14 cover=1412 #0 [103796ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [103811ms] <- sendmsg$nl_generic=0x14 errno=14 cover=116402 #0 [103822ms] -> syz_genetlink_get_family_id$nl80211(0x200000c0, 0x3) syz_genetlink_get_family_id(nl80211, 3) netlink_send_ext: short netlink ack: 27 netlink: failed to get family id for nl80211: Invalid argument syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [103824ms] <- syz_genetlink_get_family_id$nl80211=0xffffffffffffffff errno=22 cover=10247 2021/11/11 12:43:30 result hanged=false: 2021/11/11 12:43:30 added new input for call #2 syz_genetlink_get_family_id$nl80211 to corpus: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001b003107000000000000000001"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 12:43:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001b003107000000000000000001"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) [103851ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7275 2021/11/11 12:43:30 #0: triaging type=7 2021/11/11 12:43:30 triaging input for call #1 sendmsg$nl_generic (new signal=5) #0 [103860ms] -> socket$netlink(0x10, 0x3, 0x10) #0 [103861ms] <- socket$netlink=0x3 errno=14 cover=1473 #0 [103864ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [103874ms] <- sendmsg$nl_generic=0x14 errno=14 cover=116444 #0 [103885ms] -> syz_genetlink_get_family_id$nl80211(0x200000c0, 0x3) syz_genetlink_get_family_id(nl80211, 3) netlink_send_ext: short netlink ack: 27 netlink: failed to get family id for nl80211: Invalid argument syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [103887ms] <- syz_genetlink_get_family_id$nl80211=0xffffffffffffffff errno=22 cover=10169 12:43:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001b003107000000000000000001"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 2021/11/11 12:43:30 result hanged=false: [103910ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7277 #0 [103918ms] -> socket$netlink(0x10, 0x3, 0x10) #0 [103918ms] <- socket$netlink=0x3 errno=14 cover=1412 #0 [103920ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [103930ms] <- sendmsg$nl_generic=0x14 errno=14 cover=116331 #0 [103934ms] -> syz_genetlink_get_family_id$nl80211(0x200000c0, 0x3) syz_genetlink_get_family_id(nl80211, 3) netlink_send_ext: short netlink ack: 27 netlink: failed to get family id for nl80211: Invalid argument syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [103934ms] <- syz_genetlink_get_family_id$nl80211=0xffffffffffffffff errno=22 cover=10086 12:43:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001b003107000000000000000001"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 2021/11/11 12:43:30 result hanged=false: [103955ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7279 #0 [103963ms] -> socket$netlink(0x10, 0x3, 0x10) #0 [103963ms] <- socket$netlink=0x3 errno=14 cover=1434 #0 [103964ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [103977ms] <- sendmsg$nl_generic=0x14 errno=14 cover=116452 #0 [103986ms] -> syz_genetlink_get_family_id$nl80211(0x200000c0, 0x3) syz_genetlink_get_family_id(nl80211, 3) netlink_send_ext: short netlink ack: 27 netlink: failed to get family id for nl80211: Invalid argument syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [103988ms] <- syz_genetlink_get_family_id$nl80211=0xffffffffffffffff errno=22 cover=10221 2021/11/11 12:43:30 result hanged=false: 2021/11/11 12:43:30 added new input for call #1 sendmsg$nl_generic to corpus: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001b003107000000000000000001"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 12:43:31 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x0) [104014ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7281 #0 [104023ms] -> syz_mount_image$ext4(0x0, 0x200001c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [104025ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12750 #0 [104025ms] -> mount(0x0, 0x20000100, 0x20000180, 0x0, 0x0) #0 [104026ms] <- mount=0x0 errno=14 cover=11296 #0 [104026ms] -> lsetxattr$security_selinux(0x200003c0, 0x20000400, 0x20000440, 0x22, 0x0) [ 3009.488871] audit: type=1400 audit(1636634611.014:2234): avc: denied { relabelto } for pid=162471 comm="syz-executor.0" name="ssh.service" dev="cgroup2" ino=942 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:v4l_device_t:s0 tclass=dir permissive=1 [ 3009.494343] audit: type=1400 audit(1636634611.015:2235): avc: denied { associate } for pid=162471 comm="syz-executor.0" name="ssh.service" dev="cgroup2" ino=942 scontext=system_u:object_r:v4l_device_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=filesystem permissive=1 #0 [104028ms] <- lsetxattr$security_selinux=0x0 errno=14 cover=28286 enabling collider #0 [104029ms] -> syz_mount_image$ext4(0x0, 0x200001c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [104029ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1351 #0 [104029ms] -> mount(0x0, 0x20000100, 0x20000180, 0x0, 0x0) #0 [104031ms] <- mount=0xffffffffffffffff errno=16 cover=20465 [ 3009.502735] audit: type=1400 audit(1636634611.015:2236): avc: denied { mounton } for pid=162471 comm="syz-executor.0" path="/syzkaller-testdir630237747/syzkaller.LmXxNJ/798/file0" dev="cgroup2" ino=942 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:v4l_device_t:s0 tclass=dir permissive=1 pthread_create failed (errno 11) umount(./798/file0) 12:43:31 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x0) 2021/11/11 12:43:31 result hanged=false: 2021/11/11 12:43:31 #0: triaging type=7 2021/11/11 12:43:31 triaging input for call #2 lsetxattr$security_selinux (new signal=21) [104099ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7383 #0 [104110ms] -> syz_mount_image$ext4(0x0, 0x200001c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [104112ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12749 #0 [104119ms] -> mount(0x0, 0x20000100, 0x20000180, 0x0, 0x0) #0 [104120ms] <- mount=0x0 errno=14 cover=3005 #0 [104121ms] -> lsetxattr$security_selinux(0x200003c0, 0x20000400, 0x20000440, 0x22, 0x0) [ 3009.583917] audit: type=1400 audit(1636634611.109:2237): avc: denied { relabelfrom } for pid=162573 comm="syz-executor.0" name="ssh.service" dev="cgroup2" ino=942 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:v4l_device_t:s0 tclass=dir permissive=1 #0 [104128ms] <- lsetxattr$security_selinux=0x0 errno=14 cover=6447 12:43:31 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x0) 2021/11/11 12:43:31 result hanged=false: umount(./799/file0) [104154ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7385 #0 [104162ms] -> syz_mount_image$ext4(0x0, 0x200001c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [104165ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12819 #0 [104167ms] -> mount(0x0, 0x20000100, 0x20000180, 0x0, 0x0) #0 [104169ms] <- mount=0x0 errno=14 cover=3040 #0 [104170ms] -> lsetxattr$security_selinux(0x200003c0, 0x20000400, 0x20000440, 0x22, 0x0) #0 [104171ms] <- lsetxattr$security_selinux=0x0 errno=14 cover=2562 12:43:31 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x0) 2021/11/11 12:43:31 result hanged=false: umount(./800/file0) [104194ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7387 #0 [104205ms] -> syz_mount_image$ext4(0x0, 0x200001c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [104206ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12828 #0 [104208ms] -> mount(0x0, 0x20000100, 0x20000180, 0x0, 0x0) #0 [104209ms] <- mount=0x0 errno=14 cover=2988 #0 [104210ms] -> lsetxattr$security_selinux(0x200003c0, 0x20000400, 0x20000440, 0x22, 0x0) #0 [104212ms] <- lsetxattr$security_selinux=0x0 errno=14 cover=2442 2021/11/11 12:43:31 result hanged=false: 2021/11/11 12:43:31 added new input for call #2 lsetxattr$security_selinux to corpus: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x0) umount(./801/file0) 12:43:31 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x0) [104245ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:31 #0: triaging type=7 2021/11/11 12:43:31 triaging input for call #1 mount (new signal=72) spawned worker pid 7389 #0 [104254ms] -> syz_mount_image$ext4(0x0, 0x200001c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [104256ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12755 #0 [104257ms] -> mount(0x0, 0x20000100, 0x20000180, 0x0, 0x0) #0 [104259ms] <- mount=0x0 errno=14 cover=3088 #0 [104259ms] -> lsetxattr$security_selinux(0x200003c0, 0x20000400, 0x20000440, 0x22, 0x0) #0 [104260ms] <- lsetxattr$security_selinux=0x0 errno=14 cover=2512 12:43:31 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x0) 2021/11/11 12:43:31 result hanged=false: umount(./802/file0) [104280ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7391 #0 [104289ms] -> syz_mount_image$ext4(0x0, 0x200001c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [104291ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12715 #0 [104293ms] -> mount(0x0, 0x20000100, 0x20000180, 0x0, 0x0) #0 [104294ms] <- mount=0x0 errno=14 cover=2990 #0 [104294ms] -> lsetxattr$security_selinux(0x200003c0, 0x20000400, 0x20000440, 0x22, 0x0) #0 [104296ms] <- lsetxattr$security_selinux=0x0 errno=14 cover=2500 12:43:31 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x0) 2021/11/11 12:43:31 result hanged=false: umount(./803/file0) [104322ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7393 #0 [104331ms] -> syz_mount_image$ext4(0x0, 0x200001c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [104333ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12894 #0 [104337ms] -> mount(0x0, 0x20000100, 0x20000180, 0x0, 0x0) #0 [104337ms] <- mount=0x0 errno=14 cover=2988 #0 [104339ms] -> lsetxattr$security_selinux(0x200003c0, 0x20000400, 0x20000440, 0x22, 0x0) #0 [104340ms] <- lsetxattr$security_selinux=0x0 errno=14 cover=2438 2021/11/11 12:43:31 result hanged=false: 2021/11/11 12:43:31 added new input for call #1 mount to corpus: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x0) umount(./804/file0) 12:43:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x14, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) [104381ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7395 #0 [104389ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [104389ms] <- socket$netlink=0x3 errno=14 cover=1432 #0 [104390ms] -> sendmsg$nl_generic(0x3, 0x20000100, 0x0) #0 [104390ms] <- sendmsg$nl_generic=0x14 errno=14 cover=1498 enabling collider #0 [104392ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [104392ms] <- socket$netlink=0x3 errno=14 cover=1452 12:43:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x14, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 2021/11/11 12:43:31 result hanged=false: 2021/11/11 12:43:31 #0: triaging type=7 2021/11/11 12:43:31 triaging input for call #1 sendmsg$nl_generic (new signal=5) [104415ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7397 #0 [104426ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [104428ms] <- socket$netlink=0x3 errno=14 cover=1421 #0 [104431ms] -> sendmsg$nl_generic(0x3, 0x20000100, 0x0) #0 [104432ms] <- sendmsg$nl_generic=0x14 errno=14 cover=1569 12:43:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x14, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 2021/11/11 12:43:31 result hanged=false: [104456ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7399 #0 [104465ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [104465ms] <- socket$netlink=0x3 errno=14 cover=1432 #0 [104466ms] -> sendmsg$nl_generic(0x3, 0x20000100, 0x0) #0 [104468ms] <- sendmsg$nl_generic=0x14 errno=14 cover=8745 12:43:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x14, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 2021/11/11 12:43:31 result hanged=false: [104494ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7401 #0 [104502ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [104502ms] <- socket$netlink=0x3 errno=14 cover=1476 #0 [104503ms] -> sendmsg$nl_generic(0x3, 0x20000100, 0x0) #0 [104503ms] <- sendmsg$nl_generic=0x14 errno=14 cover=1560 2021/11/11 12:43:31 result hanged=false: 2021/11/11 12:43:31 added new input for call #1 sendmsg$nl_generic to corpus: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x14, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 12:43:31 executing program 0: r0 = syz_io_uring_setup(0x2da5, &(0x7f0000000080)={0x0, 0x9a48}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x45}, 0x0) io_uring_enter(r0, 0x4d9e, 0x0, 0x0, 0x0, 0x0) [104539ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:31 poll: candidates=8 inputs=0 signal=0 spawned worker pid 7403 #0 [104549ms] -> syz_io_uring_setup(0x2da5, 0x20000080, 0x20ffb000, 0x200b0000, 0x20000140, 0x20000100) #0 [104552ms] <- syz_io_uring_setup=0x3 errno=14 cover=13231 #0 [104554ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [104554ms] <- socket$nl_netfilter=0x4 errno=14 cover=1400 #0 [104555ms] -> syz_io_uring_submit(0x20ffb000, 0x200b0000, 0x200004c0, 0x0) #0 [104555ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [104556ms] -> io_uring_enter(0x3, 0x4d9e, 0x0, 0x0, 0x0, 0x0) #0 [104557ms] <- io_uring_enter=0x1 errno=14 cover=412 enabling collider #0 [104558ms] -> syz_io_uring_setup(0x2da5, 0x20000080, 0x20ffb000, 0x200b0000, 0x20000140, 0x20000100) #0 [104560ms] <- syz_io_uring_setup=0x3 errno=14 cover=16510 #0 [104560ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [104560ms] <- socket$nl_netfilter=0x4 errno=14 cover=1443 pthread_create failed (errno 11) 12:43:31 executing program 0: r0 = syz_io_uring_setup(0x2da5, &(0x7f0000000080)={0x0, 0x9a48}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x45}, 0x0) io_uring_enter(r0, 0x4d9e, 0x0, 0x0, 0x0, 0x0) [104612ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7505 #0 [104621ms] -> syz_io_uring_setup(0x2da5, 0x20000080, 0x20ffb000, 0x200b0000, 0x20000140, 0x20000100) 2021/11/11 12:43:31 result hanged=false: 2021/11/11 12:43:31 #0: triaging type=7 2021/11/11 12:43:31 triaging input for call #3 io_uring_enter (new signal=20) #0 [104625ms] <- syz_io_uring_setup=0x3 errno=14 cover=13336 #0 [104627ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [104627ms] <- socket$nl_netfilter=0x4 errno=14 cover=1466 #0 [104627ms] -> syz_io_uring_submit(0x20ffb000, 0x200b0000, 0x200004c0, 0x0) #0 [104628ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [104628ms] -> io_uring_enter(0x3, 0x4d9e, 0x0, 0x0, 0x0, 0x0) #0 [104629ms] <- io_uring_enter=0x1 errno=14 cover=426 12:43:31 executing program 0: r0 = syz_io_uring_setup(0x2da5, &(0x7f0000000080)={0x0, 0x9a48}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x45}, 0x0) io_uring_enter(r0, 0x4d9e, 0x0, 0x0, 0x0, 0x0) 2021/11/11 12:43:31 result hanged=false: [104651ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7507 #0 [104662ms] -> syz_io_uring_setup(0x2da5, 0x20000080, 0x20ffb000, 0x200b0000, 0x20000140, 0x20000100) #0 [104667ms] <- syz_io_uring_setup=0x3 errno=14 cover=12975 #0 [104669ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [104669ms] <- socket$nl_netfilter=0x4 errno=14 cover=1467 #0 [104670ms] -> syz_io_uring_submit(0x20ffb000, 0x200b0000, 0x200004c0, 0x0) #0 [104670ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [104670ms] -> io_uring_enter(0x3, 0x4d9e, 0x0, 0x0, 0x0, 0x0) #0 [104670ms] <- io_uring_enter=0x1 errno=14 cover=423 12:43:31 executing program 0: r0 = syz_io_uring_setup(0x2da5, &(0x7f0000000080)={0x0, 0x9a48}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x45}, 0x0) io_uring_enter(r0, 0x4d9e, 0x0, 0x0, 0x0, 0x0) 2021/11/11 12:43:31 result hanged=false: [104692ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7509 #0 [104703ms] -> syz_io_uring_setup(0x2da5, 0x20000080, 0x20ffb000, 0x200b0000, 0x20000140, 0x20000100) #0 [104707ms] <- syz_io_uring_setup=0x3 errno=14 cover=13014 #0 [104709ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [104709ms] <- socket$nl_netfilter=0x4 errno=14 cover=1433 #0 [104710ms] -> syz_io_uring_submit(0x20ffb000, 0x200b0000, 0x200004c0, 0x0) #0 [104710ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [104710ms] -> io_uring_enter(0x3, 0x4d9e, 0x0, 0x0, 0x0, 0x0) #0 [104710ms] <- io_uring_enter=0x1 errno=14 cover=423 2021/11/11 12:43:31 result hanged=false: 2021/11/11 12:43:31 added new input for call #3 io_uring_enter to corpus: r0 = syz_io_uring_setup(0x2da5, &(0x7f0000000080)={0x0, 0x9a48}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x45}, 0x0) io_uring_enter(r0, 0x4d9e, 0x0, 0x0, 0x0, 0x0) 12:43:31 executing program 0: r0 = syz_io_uring_setup(0x2da5, &(0x7f0000000080)={0x0, 0x9a48}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x45}, 0x0) io_uring_enter(r0, 0x4d9e, 0x0, 0x0, 0x0, 0x0) 2021/11/11 12:43:31 #0: triaging type=7 2021/11/11 12:43:31 triaging input for call #1 socket$nl_netfilter (new signal=2) [104732ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7511 #0 [104740ms] -> syz_io_uring_setup(0x2da5, 0x20000080, 0x20ffb000, 0x200b0000, 0x20000140, 0x20000100) #0 [104743ms] <- syz_io_uring_setup=0x3 errno=14 cover=13410 #0 [104744ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [104746ms] <- socket$nl_netfilter=0x4 errno=14 cover=1397 #0 [104746ms] -> syz_io_uring_submit(0x20ffb000, 0x200b0000, 0x200004c0, 0x0) #0 [104746ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [104747ms] -> io_uring_enter(0x3, 0x4d9e, 0x0, 0x0, 0x0, 0x0) #0 [104747ms] <- io_uring_enter=0x1 errno=14 cover=412 12:43:31 executing program 0: r0 = syz_io_uring_setup(0x2da5, &(0x7f0000000080)={0x0, 0x9a48}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x45}, 0x0) io_uring_enter(r0, 0x4d9e, 0x0, 0x0, 0x0, 0x0) 2021/11/11 12:43:31 result hanged=false: [104768ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7513 #0 [104779ms] -> syz_io_uring_setup(0x2da5, 0x20000080, 0x20ffb000, 0x200b0000, 0x20000140, 0x20000100) #0 [104793ms] <- syz_io_uring_setup=0x3 errno=14 cover=13316 #0 [104795ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [104795ms] <- socket$nl_netfilter=0x4 errno=14 cover=1441 #0 [104797ms] -> syz_io_uring_submit(0x20ffb000, 0x200b0000, 0x200004c0, 0x0) #0 [104797ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [104797ms] -> io_uring_enter(0x3, 0x4d9e, 0x0, 0x0, 0x0, 0x0) #0 [104797ms] <- io_uring_enter=0x1 errno=14 cover=423 12:43:31 executing program 0: r0 = syz_io_uring_setup(0x2da5, &(0x7f0000000080)={0x0, 0x9a48}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x45}, 0x0) io_uring_enter(r0, 0x4d9e, 0x0, 0x0, 0x0, 0x0) 2021/11/11 12:43:31 result hanged=false: [104818ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7515 #0 [104831ms] -> syz_io_uring_setup(0x2da5, 0x20000080, 0x20ffb000, 0x200b0000, 0x20000140, 0x20000100) #0 [104839ms] <- syz_io_uring_setup=0x3 errno=14 cover=13067 #0 [104840ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [104841ms] <- socket$nl_netfilter=0x4 errno=14 cover=1531 #0 [104842ms] -> syz_io_uring_submit(0x20ffb000, 0x200b0000, 0x200004c0, 0x0) #0 [104842ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [104842ms] -> io_uring_enter(0x3, 0x4d9e, 0x0, 0x0, 0x0, 0x0) #0 [104842ms] <- io_uring_enter=0x1 errno=14 cover=423 2021/11/11 12:43:31 result hanged=false: 2021/11/11 12:43:31 added new input for call #1 socket$nl_netfilter to corpus: r0 = syz_io_uring_setup(0x2da5, &(0x7f0000000080)={0x0, 0x9a48}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x45}, 0x0) io_uring_enter(r0, 0x4d9e, 0x0, 0x0, 0x0, 0x0) 12:43:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000001300)=0x7, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0xfffd, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) r2 = socket$packet(0x11, 0x3, 0x300) fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x5}, {0x17, 0xffff6d40}]}, 0x18, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r3, &(0x7f0000000180)="a7", 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, r6}) dup(0xffffffffffffffff) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$inet6(r4, &(0x7f00000006c0)={0x0, 0x61, &(0x7f0000000540)=[{&(0x7f0000000280)="71c2daa4f10656284f53c2db32f77598fafa27b49b3fc98d0ebf0a175187607dd204cadfbbb647bef5d67bee50c75b8edfa33464a75c2f947066954a7fb1f2f373f75ae997bd6460c7694818c5f3c2cbfb1bb6bcf42306027d4dc351d368", 0x66}], 0x1}, 0x10044008) [104866ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7517 #0 [104878ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [104878ms] <- socket$inet6_tcp=0x3 errno=14 cover=1746 #0 [104879ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x12, 0x20001300, 0x4) #0 [104879ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=141 #0 [104880ms] -> bind$inet6(0xffffffffffffffff, 0x200000c0, 0x1c) #0 [104880ms] <- bind$inet6=0xffffffffffffffff errno=9 cover=48 #0 [104880ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [104880ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1698 #0 [104881ms] -> setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x20000080, 0x10) #0 [104881ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=9 cover=50 #0 [104881ms] -> setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x20000200, 0x10) #0 [104881ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=9 cover=50 #0 [104882ms] -> ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x20000040) #0 [104882ms] <- ioctl$BTRFS_IOC_LOGICAL_INO=0xffffffffffffffff errno=9 cover=45 #0 [104882ms] -> socket$packet(0x11, 0x3, 0x300) #0 [104883ms] <- socket$packet=0x5 errno=14 cover=1831 #0 [104883ms] -> fsetxattr$security_capability(0x5, 0x200001c0, 0x20000100, 0x18, 0x1) #0 [104883ms] <- fsetxattr$security_capability=0xffffffffffffffff errno=95 cover=2988 #0 [104884ms] -> ioctl$sock_SIOCGIFINDEX(0x4, 0x8914, 0x20000140) #0 [104886ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=17292 #0 [104886ms] -> creat(0x20000080, 0x0) #0 [104887ms] <- creat=0x6 errno=14 cover=6769 #0 [104889ms] -> pwrite64(0x6, 0x20000180, 0x1, 0x0) #0 [104889ms] <- pwrite64=0x1 errno=14 cover=2864 #0 [104891ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [104891ms] <- socket$inet6_udplite=0x7 errno=14 cover=1626 #0 [104892ms] -> dup(0x7) #0 [104892ms] <- dup=0x8 errno=14 cover=86 #0 [104893ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [104894ms] <- socket$inet6_icmp_raw=0x9 errno=14 cover=1687 #0 [104895ms] -> ioctl$sock_SIOCGIFINDEX(0x9, 0x8933, 0x20000140) #0 [104895ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [104896ms] -> ioctl$sock_inet6_SIOCDIFADDR(0x7, 0x8916, 0x20000240) #0 [104897ms] <- ioctl$sock_inet6_SIOCDIFADDR=0x0 errno=14 cover=4309 #0 [104898ms] -> dup(0xffffffffffffffff) #0 [104900ms] <- dup=0xffffffffffffffff errno=9 cover=41 #0 [104900ms] -> setsockopt$packet_add_memb(0x6, 0x107, 0x1, 0x20000080, 0x10) #0 [104901ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=88 cover=62 #0 [104901ms] -> sendmsg$inet6(0x7, 0x200006c0, 0x10044008) #0 [104901ms] <- sendmsg$inet6=0xffffffffffffffff errno=89 cover=298 enabling collider #0 [104906ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [104906ms] <- socket$inet6_tcp=0x3 errno=14 cover=1875 #0 [104907ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x12, 0x20001300, 0x4) #0 [104907ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=141 pthread_create failed (errno 11) 2021/11/11 12:43:31 result hanged=false: 2021/11/11 12:43:31 #0: triaging type=7 2021/11/11 12:43:31 triaging input for call #16 ioctl$sock_inet6_SIOCDIFADDR (new signal=5) 12:43:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000001300)=0x7, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0xfffd, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) r2 = socket$packet(0x11, 0x3, 0x300) fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x5}, {0x17, 0xffff6d40}]}, 0x18, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r3, &(0x7f0000000180)="a7", 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, r6}) dup(0xffffffffffffffff) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$inet6(r4, &(0x7f00000006c0)={0x0, 0x61, &(0x7f0000000540)=[{&(0x7f0000000280)="71c2daa4f10656284f53c2db32f77598fafa27b49b3fc98d0ebf0a175187607dd204cadfbbb647bef5d67bee50c75b8edfa33464a75c2f947066954a7fb1f2f373f75ae997bd6460c7694818c5f3c2cbfb1bb6bcf42306027d4dc351d368", 0x66}], 0x1}, 0x10044008) [104963ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7619 #0 [104971ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [104974ms] <- socket$inet6_tcp=0x3 errno=14 cover=1713 #0 [104975ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x12, 0x20001300, 0x4) #0 [104975ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=141 #0 [104976ms] -> bind$inet6(0xffffffffffffffff, 0x200000c0, 0x1c) #0 [104976ms] <- bind$inet6=0xffffffffffffffff errno=9 cover=48 #0 [104976ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [104976ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1698 #0 [104977ms] -> setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x20000080, 0x10) #0 [104977ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=9 cover=50 #0 [104977ms] -> setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x20000200, 0x10) #0 [104977ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=9 cover=50 #0 [104977ms] -> ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x20000040) #0 [104977ms] <- ioctl$BTRFS_IOC_LOGICAL_INO=0xffffffffffffffff errno=9 cover=45 #0 [104978ms] -> socket$packet(0x11, 0x3, 0x300) #0 [104978ms] <- socket$packet=0x5 errno=14 cover=1781 #0 [104978ms] -> fsetxattr$security_capability(0x5, 0x200001c0, 0x20000100, 0x18, 0x1) #0 [104979ms] <- fsetxattr$security_capability=0xffffffffffffffff errno=95 cover=725 #0 [104979ms] -> ioctl$sock_SIOCGIFINDEX(0x4, 0x8914, 0x20000140) #0 [104979ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=255 #0 [104979ms] -> creat(0x20000080, 0x0) #0 [104980ms] <- creat=0x6 errno=14 cover=6716 #0 [104981ms] -> pwrite64(0x6, 0x20000180, 0x1, 0x0) #0 [104981ms] <- pwrite64=0x1 errno=14 cover=2891 #0 [104982ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [104983ms] <- socket$inet6_udplite=0x7 errno=14 cover=1645 #0 [104984ms] -> dup(0x7) #0 [104984ms] <- dup=0x8 errno=14 cover=86 #0 [104984ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [104984ms] <- socket$inet6_icmp_raw=0x9 errno=14 cover=1720 #0 [104985ms] -> ioctl$sock_SIOCGIFINDEX(0x9, 0x8933, 0x20000140) #0 [104985ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [104986ms] -> ioctl$sock_inet6_SIOCDIFADDR(0x7, 0x8916, 0x20000240) #0 [104986ms] <- ioctl$sock_inet6_SIOCDIFADDR=0xffffffffffffffff errno=17 cover=1355 #0 [104986ms] -> dup(0xffffffffffffffff) #0 [104987ms] <- dup=0xffffffffffffffff errno=9 cover=41 #0 [104987ms] -> setsockopt$packet_add_memb(0x6, 0x107, 0x1, 0x20000080, 0x10) #0 [104987ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=88 cover=62 #0 [104987ms] -> sendmsg$inet6(0x7, 0x200006c0, 0x10044008) #0 [104987ms] <- sendmsg$inet6=0xffffffffffffffff errno=89 cover=298 2021/11/11 12:43:31 result hanged=false: 12:43:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000001300)=0x7, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0xfffd, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) r2 = socket$packet(0x11, 0x3, 0x300) fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x5}, {0x17, 0xffff6d40}]}, 0x18, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r3, &(0x7f0000000180)="a7", 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, r6}) dup(0xffffffffffffffff) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$inet6(r4, &(0x7f00000006c0)={0x0, 0x61, &(0x7f0000000540)=[{&(0x7f0000000280)="71c2daa4f10656284f53c2db32f77598fafa27b49b3fc98d0ebf0a175187607dd204cadfbbb647bef5d67bee50c75b8edfa33464a75c2f947066954a7fb1f2f373f75ae997bd6460c7694818c5f3c2cbfb1bb6bcf42306027d4dc351d368", 0x66}], 0x1}, 0x10044008) [105011ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7621 #0 [105021ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [105021ms] <- socket$inet6_tcp=0x3 errno=14 cover=1735 #0 [105027ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x12, 0x20001300, 0x4) #0 [105027ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=141 #0 [105027ms] -> bind$inet6(0xffffffffffffffff, 0x200000c0, 0x1c) #0 [105027ms] <- bind$inet6=0xffffffffffffffff errno=9 cover=48 #0 [105028ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [105029ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1796 #0 [105031ms] -> setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x20000080, 0x10) #0 [105031ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=9 cover=50 #0 [105032ms] -> setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x20000200, 0x10) #0 [105032ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=9 cover=50 #0 [105034ms] -> ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x20000040) #0 [105034ms] <- ioctl$BTRFS_IOC_LOGICAL_INO=0xffffffffffffffff errno=9 cover=45 #0 [105035ms] -> socket$packet(0x11, 0x3, 0x300) #0 [105036ms] <- socket$packet=0x5 errno=14 cover=1836 #0 [105036ms] -> fsetxattr$security_capability(0x5, 0x200001c0, 0x20000100, 0x18, 0x1) #0 [105036ms] <- fsetxattr$security_capability=0xffffffffffffffff errno=95 cover=736 #0 [105037ms] -> ioctl$sock_SIOCGIFINDEX(0x4, 0x8914, 0x20000140) #0 [105037ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=255 #0 [105038ms] -> creat(0x20000080, 0x0) #0 [105039ms] <- creat=0x6 errno=14 cover=6954 #0 [105040ms] -> pwrite64(0x6, 0x20000180, 0x1, 0x0) #0 [105040ms] <- pwrite64=0x1 errno=14 cover=2888 #0 [105041ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [105041ms] <- socket$inet6_udplite=0x7 errno=14 cover=1681 #0 [105042ms] -> dup(0x7) #0 [105042ms] <- dup=0x8 errno=14 cover=86 #0 [105043ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [105043ms] <- socket$inet6_icmp_raw=0x9 errno=14 cover=1731 #0 [105044ms] -> ioctl$sock_SIOCGIFINDEX(0x9, 0x8933, 0x20000140) #0 [105044ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [105044ms] -> ioctl$sock_inet6_SIOCDIFADDR(0x7, 0x8916, 0x20000240) #0 [105044ms] <- ioctl$sock_inet6_SIOCDIFADDR=0xffffffffffffffff errno=17 cover=1336 #0 [105045ms] -> dup(0xffffffffffffffff) #0 [105045ms] <- dup=0xffffffffffffffff errno=9 cover=41 #0 [105045ms] -> setsockopt$packet_add_memb(0x6, 0x107, 0x1, 0x20000080, 0x10) #0 [105045ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=88 cover=62 #0 [105046ms] -> sendmsg$inet6(0x7, 0x200006c0, 0x10044008) #0 [105046ms] <- sendmsg$inet6=0xffffffffffffffff errno=89 cover=298 12:43:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000001300)=0x7, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0xfffd, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) r2 = socket$packet(0x11, 0x3, 0x300) fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x5}, {0x17, 0xffff6d40}]}, 0x18, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r3, &(0x7f0000000180)="a7", 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, r6}) dup(0xffffffffffffffff) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$inet6(r4, &(0x7f00000006c0)={0x0, 0x61, &(0x7f0000000540)=[{&(0x7f0000000280)="71c2daa4f10656284f53c2db32f77598fafa27b49b3fc98d0ebf0a175187607dd204cadfbbb647bef5d67bee50c75b8edfa33464a75c2f947066954a7fb1f2f373f75ae997bd6460c7694818c5f3c2cbfb1bb6bcf42306027d4dc351d368", 0x66}], 0x1}, 0x10044008) 2021/11/11 12:43:32 result hanged=false: [105071ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7623 #0 [105079ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [105079ms] <- socket$inet6_tcp=0x3 errno=14 cover=1746 #0 [105080ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x12, 0x20001300, 0x4) #0 [105080ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=141 #0 [105080ms] -> bind$inet6(0xffffffffffffffff, 0x200000c0, 0x1c) #0 [105080ms] <- bind$inet6=0xffffffffffffffff errno=9 cover=48 #0 [105082ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [105082ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1687 #0 [105083ms] -> setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x20000080, 0x10) #0 [105083ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=9 cover=50 #0 [105083ms] -> setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x20000200, 0x10) #0 [105083ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=9 cover=50 #0 [105083ms] -> ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x20000040) #0 [105083ms] <- ioctl$BTRFS_IOC_LOGICAL_INO=0xffffffffffffffff errno=9 cover=45 #0 [105084ms] -> socket$packet(0x11, 0x3, 0x300) #0 [105084ms] <- socket$packet=0x5 errno=14 cover=1727 #0 [105085ms] -> fsetxattr$security_capability(0x5, 0x200001c0, 0x20000100, 0x18, 0x1) #0 [105085ms] <- fsetxattr$security_capability=0xffffffffffffffff errno=95 cover=736 #0 [105086ms] -> ioctl$sock_SIOCGIFINDEX(0x4, 0x8914, 0x20000140) #0 [105086ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=255 #0 [105086ms] -> creat(0x20000080, 0x0) #0 [105087ms] <- creat=0x6 errno=14 cover=6812 #0 [105090ms] -> pwrite64(0x6, 0x20000180, 0x1, 0x0) #0 [105090ms] <- pwrite64=0x1 errno=14 cover=2962 #0 [105097ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [105098ms] <- socket$inet6_udplite=0x7 errno=14 cover=1706 #0 [105099ms] -> dup(0x7) #0 [105099ms] <- dup=0x8 errno=14 cover=86 #0 [105099ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [105100ms] <- socket$inet6_icmp_raw=0x9 errno=14 cover=1676 #0 [105100ms] -> ioctl$sock_SIOCGIFINDEX(0x9, 0x8933, 0x20000140) #0 [105100ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [105100ms] -> ioctl$sock_inet6_SIOCDIFADDR(0x7, 0x8916, 0x20000240) #0 [105101ms] <- ioctl$sock_inet6_SIOCDIFADDR=0xffffffffffffffff errno=17 cover=1358 #0 [105101ms] -> dup(0xffffffffffffffff) #0 [105101ms] <- dup=0xffffffffffffffff errno=9 cover=41 #0 [105101ms] -> setsockopt$packet_add_memb(0x6, 0x107, 0x1, 0x20000080, 0x10) #0 [105102ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=88 cover=62 #0 [105102ms] -> sendmsg$inet6(0x7, 0x200006c0, 0x10044008) #0 [105102ms] <- sendmsg$inet6=0xffffffffffffffff errno=89 cover=298 12:43:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000001300)=0x7, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0xfffd, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) r2 = socket$packet(0x11, 0x3, 0x300) fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x5}, {0x17, 0xffff6d40}]}, 0x18, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r3, &(0x7f0000000180)="a7", 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, r6}) dup(0xffffffffffffffff) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$inet6(r4, &(0x7f00000006c0)={0x0, 0x61, &(0x7f0000000540)=[{&(0x7f0000000280)="71c2daa4f10656284f53c2db32f77598fafa27b49b3fc98d0ebf0a175187607dd204cadfbbb647bef5d67bee50c75b8edfa33464a75c2f947066954a7fb1f2f373f75ae997bd6460c7694818c5f3c2cbfb1bb6bcf42306027d4dc351d368", 0x66}], 0x1}, 0x10044008) 2021/11/11 12:43:32 result hanged=false: 2021/11/11 12:43:32 #0: triaging type=7 2021/11/11 12:43:32 triaging input for call #8 fsetxattr$security_capability (new signal=19) [105125ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7625 #0 [105135ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [105135ms] <- socket$inet6_tcp=0x3 errno=14 cover=1757 #0 [105138ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x12, 0x20001300, 0x4) #0 [105138ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=141 #0 [105138ms] -> bind$inet6(0xffffffffffffffff, 0x200000c0, 0x1c) #0 [105138ms] <- bind$inet6=0xffffffffffffffff errno=9 cover=48 #0 [105138ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [105138ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1763 #0 [105139ms] -> setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x20000080, 0x10) #0 [105139ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=9 cover=50 #0 [105139ms] -> setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x20000200, 0x10) #0 [105139ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=9 cover=50 #0 [105140ms] -> ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x20000040) #0 [105141ms] <- ioctl$BTRFS_IOC_LOGICAL_INO=0xffffffffffffffff errno=9 cover=45 #0 [105141ms] -> socket$packet(0x11, 0x3, 0x300) #0 [105141ms] <- socket$packet=0x5 errno=14 cover=1886 #0 [105141ms] -> fsetxattr$security_capability(0x5, 0x200001c0, 0x20000100, 0x18, 0x1) #0 [105141ms] <- fsetxattr$security_capability=0xffffffffffffffff errno=95 cover=725 #0 [105142ms] -> ioctl$sock_SIOCGIFINDEX(0x4, 0x8914, 0x20000140) #0 [105142ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=255 #0 [105143ms] -> creat(0x20000080, 0x0) #0 [105143ms] <- creat=0x6 errno=14 cover=6880 #0 [105144ms] -> pwrite64(0x6, 0x20000180, 0x1, 0x0) #0 [105145ms] <- pwrite64=0x1 errno=14 cover=2931 #0 [105146ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [105146ms] <- socket$inet6_udplite=0x7 errno=14 cover=1688 #0 [105153ms] -> dup(0x7) #0 [105153ms] <- dup=0x8 errno=14 cover=86 #0 [105157ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [105157ms] <- socket$inet6_icmp_raw=0x9 errno=14 cover=1665 #0 [105158ms] -> ioctl$sock_SIOCGIFINDEX(0x9, 0x8933, 0x20000140) #0 [105158ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [105158ms] -> ioctl$sock_inet6_SIOCDIFADDR(0x7, 0x8916, 0x20000240) #0 [105158ms] <- ioctl$sock_inet6_SIOCDIFADDR=0xffffffffffffffff errno=17 cover=1336 #0 [105159ms] -> dup(0xffffffffffffffff) #0 [105159ms] <- dup=0xffffffffffffffff errno=9 cover=41 #0 [105161ms] -> setsockopt$packet_add_memb(0x6, 0x107, 0x1, 0x20000080, 0x10) #0 [105161ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=88 cover=62 #0 [105162ms] -> sendmsg$inet6(0x7, 0x200006c0, 0x10044008) #0 [105162ms] <- sendmsg$inet6=0xffffffffffffffff errno=89 cover=298 12:43:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000001300)=0x7, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0xfffd, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) r2 = socket$packet(0x11, 0x3, 0x300) fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x5}, {0x17, 0xffff6d40}]}, 0x18, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r3, &(0x7f0000000180)="a7", 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, r6}) dup(0xffffffffffffffff) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$inet6(r4, &(0x7f00000006c0)={0x0, 0x61, &(0x7f0000000540)=[{&(0x7f0000000280)="71c2daa4f10656284f53c2db32f77598fafa27b49b3fc98d0ebf0a175187607dd204cadfbbb647bef5d67bee50c75b8edfa33464a75c2f947066954a7fb1f2f373f75ae997bd6460c7694818c5f3c2cbfb1bb6bcf42306027d4dc351d368", 0x66}], 0x1}, 0x10044008) 2021/11/11 12:43:32 result hanged=false: [105190ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7627 #0 [105201ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [105202ms] <- socket$inet6_tcp=0x3 errno=14 cover=1724 #0 [105203ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x12, 0x20001300, 0x4) #0 [105204ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=141 #0 [105204ms] -> bind$inet6(0xffffffffffffffff, 0x200000c0, 0x1c) #0 [105204ms] <- bind$inet6=0xffffffffffffffff errno=9 cover=48 #0 [105204ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [105204ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1726 #0 [105205ms] -> setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x20000080, 0x10) #0 [105205ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=9 cover=50 #0 [105205ms] -> setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x20000200, 0x10) #0 [105205ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=9 cover=50 #0 [105205ms] -> ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x20000040) #0 [105205ms] <- ioctl$BTRFS_IOC_LOGICAL_INO=0xffffffffffffffff errno=9 cover=45 #0 [105205ms] -> socket$packet(0x11, 0x3, 0x300) #0 [105206ms] <- socket$packet=0x5 errno=14 cover=1781 #0 [105207ms] -> fsetxattr$security_capability(0x5, 0x200001c0, 0x20000100, 0x18, 0x1) #0 [105207ms] <- fsetxattr$security_capability=0xffffffffffffffff errno=95 cover=725 #0 [105207ms] -> ioctl$sock_SIOCGIFINDEX(0x4, 0x8914, 0x20000140) #0 [105207ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=255 #0 [105207ms] -> creat(0x20000080, 0x0) #0 [105208ms] <- creat=0x6 errno=14 cover=6710 #0 [105209ms] -> pwrite64(0x6, 0x20000180, 0x1, 0x0) #0 [105210ms] <- pwrite64=0x1 errno=14 cover=2908 #0 [105211ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [105211ms] <- socket$inet6_udplite=0x7 errno=14 cover=1801 #0 [105213ms] -> dup(0x7) #0 [105213ms] <- dup=0x8 errno=14 cover=86 #0 [105213ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [105214ms] <- socket$inet6_icmp_raw=0x9 errno=14 cover=1676 #0 [105214ms] -> ioctl$sock_SIOCGIFINDEX(0x9, 0x8933, 0x20000140) #0 [105214ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [105214ms] -> ioctl$sock_inet6_SIOCDIFADDR(0x7, 0x8916, 0x20000240) #0 [105215ms] <- ioctl$sock_inet6_SIOCDIFADDR=0xffffffffffffffff errno=17 cover=1336 #0 [105216ms] -> dup(0xffffffffffffffff) #0 [105216ms] <- dup=0xffffffffffffffff errno=9 cover=41 #0 [105216ms] -> setsockopt$packet_add_memb(0x6, 0x107, 0x1, 0x20000080, 0x10) #0 [105216ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=88 cover=62 #0 [105216ms] -> sendmsg$inet6(0x7, 0x200006c0, 0x10044008) #0 [105216ms] <- sendmsg$inet6=0xffffffffffffffff errno=89 cover=298 12:43:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000001300)=0x7, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0xfffd, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) r2 = socket$packet(0x11, 0x3, 0x300) fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x5}, {0x17, 0xffff6d40}]}, 0x18, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r3, &(0x7f0000000180)="a7", 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, r6}) dup(0xffffffffffffffff) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$inet6(r4, &(0x7f00000006c0)={0x0, 0x61, &(0x7f0000000540)=[{&(0x7f0000000280)="71c2daa4f10656284f53c2db32f77598fafa27b49b3fc98d0ebf0a175187607dd204cadfbbb647bef5d67bee50c75b8edfa33464a75c2f947066954a7fb1f2f373f75ae997bd6460c7694818c5f3c2cbfb1bb6bcf42306027d4dc351d368", 0x66}], 0x1}, 0x10044008) 2021/11/11 12:43:32 result hanged=false: [105249ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7629 #0 [105258ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [105258ms] <- socket$inet6_tcp=0x3 errno=14 cover=1735 #0 [105262ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x12, 0x20001300, 0x4) #0 [105262ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=141 #0 [105262ms] -> bind$inet6(0xffffffffffffffff, 0x200000c0, 0x1c) #0 [105262ms] <- bind$inet6=0xffffffffffffffff errno=9 cover=48 #0 [105264ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [105264ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1777 #0 [105265ms] -> setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x20000080, 0x10) #0 [105265ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=9 cover=50 #0 [105267ms] -> setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x20000200, 0x10) #0 [105267ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=9 cover=50 #0 [105268ms] -> ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x20000040) #0 [105269ms] <- ioctl$BTRFS_IOC_LOGICAL_INO=0xffffffffffffffff errno=9 cover=45 #0 [105270ms] -> socket$packet(0x11, 0x3, 0x300) #0 [105270ms] <- socket$packet=0x5 errno=14 cover=1850 #0 [105271ms] -> fsetxattr$security_capability(0x5, 0x200001c0, 0x20000100, 0x18, 0x1) #0 [105271ms] <- fsetxattr$security_capability=0xffffffffffffffff errno=95 cover=736 #0 [105272ms] -> ioctl$sock_SIOCGIFINDEX(0x4, 0x8914, 0x20000140) #0 [105272ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=255 #0 [105272ms] -> creat(0x20000080, 0x0) #0 [105273ms] <- creat=0x6 errno=14 cover=6862 #0 [105274ms] -> pwrite64(0x6, 0x20000180, 0x1, 0x0) #0 [105274ms] <- pwrite64=0x1 errno=14 cover=2880 #0 [105275ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [105275ms] <- socket$inet6_udplite=0x7 errno=14 cover=1754 #0 [105277ms] -> dup(0x7) #0 [105277ms] <- dup=0x8 errno=14 cover=86 #0 [105277ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [105278ms] <- socket$inet6_icmp_raw=0x9 errno=14 cover=1719 #0 [105278ms] -> ioctl$sock_SIOCGIFINDEX(0x9, 0x8933, 0x20000140) #0 [105278ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [105278ms] -> ioctl$sock_inet6_SIOCDIFADDR(0x7, 0x8916, 0x20000240) #0 [105279ms] <- ioctl$sock_inet6_SIOCDIFADDR=0xffffffffffffffff errno=17 cover=1369 #0 [105279ms] -> dup(0xffffffffffffffff) #0 [105279ms] <- dup=0xffffffffffffffff errno=9 cover=41 #0 [105279ms] -> setsockopt$packet_add_memb(0x6, 0x107, 0x1, 0x20000080, 0x10) #0 [105280ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=88 cover=62 #0 [105280ms] -> sendmsg$inet6(0x7, 0x200006c0, 0x10044008) #0 [105280ms] <- sendmsg$inet6=0xffffffffffffffff errno=89 cover=298 2021/11/11 12:43:32 result hanged=false: 2021/11/11 12:43:32 added new input for call #8 fsetxattr$security_capability to corpus: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000001300)=0x7, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0xfffd, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) r2 = socket$packet(0x11, 0x3, 0x300) fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x5}, {0x17, 0xffff6d40}]}, 0x18, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r3, &(0x7f0000000180)="a7", 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, r6}) dup(0xffffffffffffffff) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$inet6(r4, &(0x7f00000006c0)={0x0, 0x61, &(0x7f0000000540)=[{&(0x7f0000000280)="71c2daa4f10656284f53c2db32f77598fafa27b49b3fc98d0ebf0a175187607dd204cadfbbb647bef5d67bee50c75b8edfa33464a75c2f947066954a7fb1f2f373f75ae997bd6460c7694818c5f3c2cbfb1bb6bcf42306027d4dc351d368", 0x66}], 0x1}, 0x10044008) 12:43:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000001300)=0x7, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0xfffd, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) r2 = socket$packet(0x11, 0x3, 0x300) fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x5}, {0x17, 0xffff6d40}]}, 0x18, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r3, &(0x7f0000000180)="a7", 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, r6}) dup(0xffffffffffffffff) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$inet6(r4, &(0x7f00000006c0)={0x0, 0x61, &(0x7f0000000540)=[{&(0x7f0000000280)="71c2daa4f10656284f53c2db32f77598fafa27b49b3fc98d0ebf0a175187607dd204cadfbbb647bef5d67bee50c75b8edfa33464a75c2f947066954a7fb1f2f373f75ae997bd6460c7694818c5f3c2cbfb1bb6bcf42306027d4dc351d368", 0x66}], 0x1}, 0x10044008) [105312ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7631 2021/11/11 12:43:32 #0: triaging type=7 2021/11/11 12:43:32 triaging input for call #1 setsockopt$inet6_tcp_int (new signal=3) #0 [105320ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [105320ms] <- socket$inet6_tcp=0x3 errno=14 cover=1724 #0 [105321ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x12, 0x20001300, 0x4) #0 [105321ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=141 #0 [105322ms] -> bind$inet6(0xffffffffffffffff, 0x200000c0, 0x1c) #0 [105322ms] <- bind$inet6=0xffffffffffffffff errno=9 cover=48 #0 [105322ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [105322ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1901 #0 [105322ms] -> setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x20000080, 0x10) #0 [105322ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=9 cover=50 #0 [105323ms] -> setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x20000200, 0x10) #0 [105323ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=9 cover=50 #0 [105323ms] -> ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x20000040) #0 [105323ms] <- ioctl$BTRFS_IOC_LOGICAL_INO=0xffffffffffffffff errno=9 cover=45 #0 [105323ms] -> socket$packet(0x11, 0x3, 0x300) #0 [105324ms] <- socket$packet=0x5 errno=14 cover=1788 #0 [105324ms] -> fsetxattr$security_capability(0x5, 0x200001c0, 0x20000100, 0x18, 0x1) #0 [105324ms] <- fsetxattr$security_capability=0xffffffffffffffff errno=95 cover=725 #0 [105325ms] -> ioctl$sock_SIOCGIFINDEX(0x4, 0x8914, 0x20000140) #0 [105325ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=255 #0 [105325ms] -> creat(0x20000080, 0x0) #0 [105326ms] <- creat=0x6 errno=14 cover=6716 #0 [105327ms] -> pwrite64(0x6, 0x20000180, 0x1, 0x0) #0 [105327ms] <- pwrite64=0x1 errno=14 cover=2908 #0 [105328ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [105329ms] <- socket$inet6_udplite=0x7 errno=14 cover=1612 #0 [105329ms] -> dup(0x7) #0 [105329ms] <- dup=0x8 errno=14 cover=86 #0 [105329ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [105330ms] <- socket$inet6_icmp_raw=0x9 errno=14 cover=1687 #0 [105330ms] -> ioctl$sock_SIOCGIFINDEX(0x9, 0x8933, 0x20000140) #0 [105330ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [105331ms] -> ioctl$sock_inet6_SIOCDIFADDR(0x7, 0x8916, 0x20000240) #0 [105331ms] <- ioctl$sock_inet6_SIOCDIFADDR=0xffffffffffffffff errno=17 cover=1350 #0 [105332ms] -> dup(0xffffffffffffffff) #0 [105332ms] <- dup=0xffffffffffffffff errno=9 cover=41 #0 [105332ms] -> setsockopt$packet_add_memb(0x6, 0x107, 0x1, 0x20000080, 0x10) #0 [105332ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=88 cover=62 #0 [105332ms] -> sendmsg$inet6(0x7, 0x200006c0, 0x10044008) #0 [105332ms] <- sendmsg$inet6=0xffffffffffffffff errno=89 cover=298 12:43:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000001300)=0x7, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0xfffd, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) r2 = socket$packet(0x11, 0x3, 0x300) fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x5}, {0x17, 0xffff6d40}]}, 0x18, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r3, &(0x7f0000000180)="a7", 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, r6}) dup(0xffffffffffffffff) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$inet6(r4, &(0x7f00000006c0)={0x0, 0x61, &(0x7f0000000540)=[{&(0x7f0000000280)="71c2daa4f10656284f53c2db32f77598fafa27b49b3fc98d0ebf0a175187607dd204cadfbbb647bef5d67bee50c75b8edfa33464a75c2f947066954a7fb1f2f373f75ae997bd6460c7694818c5f3c2cbfb1bb6bcf42306027d4dc351d368", 0x66}], 0x1}, 0x10044008) 2021/11/11 12:43:32 result hanged=false: [105364ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7633 #0 [105374ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [105374ms] <- socket$inet6_tcp=0x3 errno=14 cover=1757 #0 [105375ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x12, 0x20001300, 0x4) #0 [105375ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=141 #0 [105375ms] -> bind$inet6(0xffffffffffffffff, 0x200000c0, 0x1c) #0 [105376ms] <- bind$inet6=0xffffffffffffffff errno=9 cover=48 #0 [105376ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [105376ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1777 #0 [105377ms] -> setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x20000080, 0x10) #0 [105377ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=9 cover=50 #0 [105377ms] -> setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x20000200, 0x10) #0 [105377ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=9 cover=50 #0 [105381ms] -> ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x20000040) #0 [105381ms] <- ioctl$BTRFS_IOC_LOGICAL_INO=0xffffffffffffffff errno=9 cover=45 #0 [105381ms] -> socket$packet(0x11, 0x3, 0x300) #0 [105381ms] <- socket$packet=0x5 errno=14 cover=1847 #0 [105382ms] -> fsetxattr$security_capability(0x5, 0x200001c0, 0x20000100, 0x18, 0x1) #0 [105382ms] <- fsetxattr$security_capability=0xffffffffffffffff errno=95 cover=736 #0 [105383ms] -> ioctl$sock_SIOCGIFINDEX(0x4, 0x8914, 0x20000140) #0 [105383ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=255 #0 [105383ms] -> creat(0x20000080, 0x0) #0 [105384ms] <- creat=0x6 errno=14 cover=6855 #0 [105385ms] -> pwrite64(0x6, 0x20000180, 0x1, 0x0) #0 [105385ms] <- pwrite64=0x1 errno=14 cover=2964 #0 [105391ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [105391ms] <- socket$inet6_udplite=0x7 errno=14 cover=1670 #0 [105392ms] -> dup(0x7) #0 [105392ms] <- dup=0x8 errno=14 cover=86 #0 [105396ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [105396ms] <- socket$inet6_icmp_raw=0x9 errno=14 cover=1709 #0 [105397ms] -> ioctl$sock_SIOCGIFINDEX(0x9, 0x8933, 0x20000140) #0 [105397ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [105397ms] -> ioctl$sock_inet6_SIOCDIFADDR(0x7, 0x8916, 0x20000240) #0 [105397ms] <- ioctl$sock_inet6_SIOCDIFADDR=0xffffffffffffffff errno=17 cover=1358 #0 [105398ms] -> dup(0xffffffffffffffff) #0 [105398ms] <- dup=0xffffffffffffffff errno=9 cover=41 #0 [105399ms] -> setsockopt$packet_add_memb(0x6, 0x107, 0x1, 0x20000080, 0x10) #0 [105399ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=88 cover=62 #0 [105399ms] -> sendmsg$inet6(0x7, 0x200006c0, 0x10044008) #0 [105399ms] <- sendmsg$inet6=0xffffffffffffffff errno=89 cover=298 12:43:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000001300)=0x7, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0xfffd, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) r2 = socket$packet(0x11, 0x3, 0x300) fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x5}, {0x17, 0xffff6d40}]}, 0x18, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r3, &(0x7f0000000180)="a7", 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, r6}) dup(0xffffffffffffffff) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$inet6(r4, &(0x7f00000006c0)={0x0, 0x61, &(0x7f0000000540)=[{&(0x7f0000000280)="71c2daa4f10656284f53c2db32f77598fafa27b49b3fc98d0ebf0a175187607dd204cadfbbb647bef5d67bee50c75b8edfa33464a75c2f947066954a7fb1f2f373f75ae997bd6460c7694818c5f3c2cbfb1bb6bcf42306027d4dc351d368", 0x66}], 0x1}, 0x10044008) 2021/11/11 12:43:32 result hanged=false: [105425ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7635 #0 [105433ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [105435ms] <- socket$inet6_tcp=0x3 errno=14 cover=1746 #0 [105436ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x12, 0x20001300, 0x4) #0 [105436ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=141 #0 [105437ms] -> bind$inet6(0xffffffffffffffff, 0x200000c0, 0x1c) #0 [105437ms] <- bind$inet6=0xffffffffffffffff errno=9 cover=48 #0 [105437ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [105437ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1898 #0 [105438ms] -> setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x20000080, 0x10) #0 [105438ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=9 cover=50 #0 [105438ms] -> setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x20000200, 0x10) #0 [105438ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=9 cover=50 #0 [105438ms] -> ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x20000040) #0 [105438ms] <- ioctl$BTRFS_IOC_LOGICAL_INO=0xffffffffffffffff errno=9 cover=45 #0 [105439ms] -> socket$packet(0x11, 0x3, 0x300) #0 [105439ms] <- socket$packet=0x5 errno=14 cover=1727 #0 [105440ms] -> fsetxattr$security_capability(0x5, 0x200001c0, 0x20000100, 0x18, 0x1) #0 [105442ms] <- fsetxattr$security_capability=0xffffffffffffffff errno=95 cover=725 #0 [105442ms] -> ioctl$sock_SIOCGIFINDEX(0x4, 0x8914, 0x20000140) #0 [105443ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=255 #0 [105443ms] -> creat(0x20000080, 0x0) #0 [105443ms] <- creat=0x6 errno=14 cover=6709 #0 [105444ms] -> pwrite64(0x6, 0x20000180, 0x1, 0x0) #0 [105445ms] <- pwrite64=0x1 errno=14 cover=2872 #0 [105446ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [105446ms] <- socket$inet6_udplite=0x7 errno=14 cover=1626 #0 [105446ms] -> dup(0x7) #0 [105446ms] <- dup=0x8 errno=14 cover=86 #0 [105447ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [105447ms] <- socket$inet6_icmp_raw=0x9 errno=14 cover=1726 #0 [105447ms] -> ioctl$sock_SIOCGIFINDEX(0x9, 0x8933, 0x20000140) #0 [105447ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [105448ms] -> ioctl$sock_inet6_SIOCDIFADDR(0x7, 0x8916, 0x20000240) #0 [105448ms] <- ioctl$sock_inet6_SIOCDIFADDR=0xffffffffffffffff errno=17 cover=1336 #0 [105448ms] -> dup(0xffffffffffffffff) #0 [105448ms] <- dup=0xffffffffffffffff errno=9 cover=41 #0 [105448ms] -> setsockopt$packet_add_memb(0x6, 0x107, 0x1, 0x20000080, 0x10) #0 [105449ms] <- setsockopt$packet_add_memb=0xffffffffffffffff errno=88 cover=62 #0 [105449ms] -> sendmsg$inet6(0x7, 0x200006c0, 0x10044008) #0 [105449ms] <- sendmsg$inet6=0xffffffffffffffff errno=89 cover=298 2021/11/11 12:43:32 result hanged=false: 2021/11/11 12:43:32 added new input for call #1 setsockopt$inet6_tcp_int to corpus: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000001300)=0x7, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0xfffd, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) r2 = socket$packet(0x11, 0x3, 0x300) fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x5}, {0x17, 0xffff6d40}]}, 0x18, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r3, &(0x7f0000000180)="a7", 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, r6}) dup(0xffffffffffffffff) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$inet6(r4, &(0x7f00000006c0)={0x0, 0x61, &(0x7f0000000540)=[{&(0x7f0000000280)="71c2daa4f10656284f53c2db32f77598fafa27b49b3fc98d0ebf0a175187607dd204cadfbbb647bef5d67bee50c75b8edfa33464a75c2f947066954a7fb1f2f373f75ae997bd6460c7694818c5f3c2cbfb1bb6bcf42306027d4dc351d368", 0x66}], 0x1}, 0x10044008) 12:43:32 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002c80)="982d94", 0x3}], 0x1}, 0x0) [105478ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7637 #0 [105486ms] -> syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) #0 [105488ms] <- syz_init_net_socket$802154_raw=0x4 errno=14 cover=6359 [ 3010.953483] ieee802154 phy0 wpan0: encryption failed: -22 #0 [105492ms] -> sendmsg(0x4, 0x20003040, 0x0) #0 [105495ms] <- sendmsg=0x3 errno=14 cover=2791 enabling collider #0 [105498ms] -> syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) #0 [105500ms] <- syz_init_net_socket$802154_raw=0x4 errno=14 cover=5575 2021/11/11 12:43:32 result hanged=false: 2021/11/11 12:43:32 #0: triaging type=7 2021/11/11 12:43:32 triaging input for call #1 sendmsg (new signal=2) 12:43:32 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002c80)="982d94", 0x3}], 0x1}, 0x0) [105524ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7639 #0 [105533ms] -> syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) #0 [105534ms] <- syz_init_net_socket$802154_raw=0x4 errno=14 cover=6273 #0 [105537ms] -> sendmsg(0x4, 0x20003040, 0x0) [ 3010.998214] ieee802154 phy0 wpan0: encryption failed: -22 #0 [105539ms] <- sendmsg=0x3 errno=14 cover=2761 2021/11/11 12:43:32 result hanged=false: 12:43:32 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002c80)="982d94", 0x3}], 0x1}, 0x0) [105567ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7641 #0 [105576ms] -> syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) #0 [105577ms] <- syz_init_net_socket$802154_raw=0x4 errno=14 cover=6340 [ 3011.040501] ieee802154 phy0 wpan0: encryption failed: -22 #0 [105579ms] -> sendmsg(0x4, 0x20003040, 0x0) #0 [105581ms] <- sendmsg=0x3 errno=14 cover=2766 12:43:32 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002c80)="982d94", 0x3}], 0x1}, 0x0) 2021/11/11 12:43:32 result hanged=false: [105600ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7643 #0 [105609ms] -> syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) #0 [105610ms] <- syz_init_net_socket$802154_raw=0x4 errno=14 cover=6320 [ 3011.073936] ieee802154 phy0 wpan0: encryption failed: -22 #0 [105612ms] -> sendmsg(0x4, 0x20003040, 0x0) #0 [105615ms] <- sendmsg=0x3 errno=14 cover=2784 2021/11/11 12:43:32 result hanged=false: 2021/11/11 12:43:32 added new input for call #1 sendmsg to corpus: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002c80)="982d94", 0x3}], 0x1}, 0x0) 12:43:32 executing program 0: syz_open_dev$mouse(&(0x7f00000017c0), 0x0, 0x40) [105639ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7645 #0 [105652ms] -> syz_open_dev$mouse(0x200017c0, 0x0, 0x40) #0 [105652ms] <- syz_open_dev$mouse=0x3 errno=14 cover=1322 enabling collider #0 [105653ms] -> syz_open_dev$mouse(0x200017c0, 0x0, 0x40) #0 [105653ms] <- syz_open_dev$mouse=0x3 errno=14 cover=1375 12:43:32 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 2021/11/11 12:43:32 result hanged=false: [105676ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7647 #0 [105686ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [105686ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1668 #0 [105687ms] -> bind$inet6(0x3, 0x20000040, 0x1c) #0 [105687ms] <- bind$inet6=0x0 errno=14 cover=235 enabling collider #0 [105689ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [105689ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1686 #0 [105690ms] -> bind$inet6(0x3, 0x20000040, 0x1c) #0 [105690ms] <- bind$inet6=0xffffffffffffffff errno=9 cover=49 12:43:32 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 2021/11/11 12:43:32 result hanged=false: 2021/11/11 12:43:32 #0: triaging type=7 2021/11/11 12:43:32 triaging input for call #1 bind$inet6 (new signal=2) [105710ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7649 #0 [105720ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [105721ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1679 #0 [105722ms] -> bind$inet6(0x3, 0x20000040, 0x1c) #0 [105722ms] <- bind$inet6=0x0 errno=14 cover=235 12:43:32 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 2021/11/11 12:43:32 result hanged=false: [105746ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7651 #0 [105755ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [105756ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1712 #0 [105758ms] -> bind$inet6(0x3, 0x20000040, 0x1c) #0 [105758ms] <- bind$inet6=0x0 errno=14 cover=235 12:43:32 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 2021/11/11 12:43:32 result hanged=false: [105777ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7653 #0 [105785ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [105785ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1709 #0 [105786ms] -> bind$inet6(0x3, 0x20000040, 0x1c) #0 [105786ms] <- bind$inet6=0x0 errno=14 cover=235 2021/11/11 12:43:32 result hanged=false: 2021/11/11 12:43:32 added new input for call #1 bind$inet6 to corpus: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 12:43:32 executing program 0: r0 = socket$inet(0x2, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)="b683ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x10) [105802ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7655 #0 [105810ms] -> socket$inet(0x2, 0x3, 0xff) #0 [105811ms] <- socket$inet=0x3 errno=14 cover=1699 #0 [105811ms] -> sendmsg$inet(0x3, 0x20000240, 0x10) #0 [105811ms] <- sendmsg$inet=0x14 errno=14 cover=501 enabling collider #0 [105812ms] -> socket$inet(0x2, 0x3, 0xff) #0 [105812ms] <- socket$inet=0x3 errno=14 cover=1687 12:43:32 executing program 0: r0 = socket$inet(0x2, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)="b683ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x10) 2021/11/11 12:43:32 result hanged=false: 2021/11/11 12:43:32 #0: triaging type=7 2021/11/11 12:43:32 triaging input for call #1 sendmsg$inet (new signal=9) [105827ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7657 #0 [105836ms] -> socket$inet(0x2, 0x3, 0xff) #0 [105836ms] <- socket$inet=0x3 errno=14 cover=1732 #0 [105837ms] -> sendmsg$inet(0x3, 0x20000240, 0x10) #0 [105837ms] <- sendmsg$inet=0x14 errno=14 cover=501 12:43:32 executing program 0: r0 = socket$inet(0x2, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)="b683ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x10) 2021/11/11 12:43:32 result hanged=false: [105853ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7659 #0 [105862ms] -> socket$inet(0x2, 0x3, 0xff) #0 [105863ms] <- socket$inet=0x3 errno=14 cover=1732 #0 [105863ms] -> sendmsg$inet(0x3, 0x20000240, 0x10) #0 [105863ms] <- sendmsg$inet=0x14 errno=14 cover=512 12:43:32 executing program 0: r0 = socket$inet(0x2, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)="b683ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x10) 2021/11/11 12:43:32 result hanged=false: [105878ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7661 #0 [105886ms] -> socket$inet(0x2, 0x3, 0xff) #0 [105886ms] <- socket$inet=0x3 errno=14 cover=1691 #0 [105886ms] -> sendmsg$inet(0x3, 0x20000240, 0x10) #0 [105886ms] <- sendmsg$inet=0x14 errno=14 cover=501 2021/11/11 12:43:32 result hanged=false: 2021/11/11 12:43:32 added new input for call #1 sendmsg$inet to corpus: r0 = socket$inet(0x2, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)="b683ae40f3fdac402b01fa055e4299bd37dddcc8", 0x14}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x10) 12:43:32 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) [105902ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7663 #0 [105910ms] -> openat$rfkill(0xffffffffffffff9c, 0x200018c0, 0x0, 0x0) #0 [105911ms] <- openat$rfkill=0x3 errno=14 cover=2220 enabling collider #0 [105911ms] -> openat$rfkill(0xffffffffffffff9c, 0x200018c0, 0x0, 0x0) #0 [105911ms] <- openat$rfkill=0x3 errno=14 cover=2208 12:43:32 executing program 0: rt_tgsigqueueinfo(0x0, 0x0, 0x17, &(0x7f0000000440)={0x0, 0x0, 0x101}) 2021/11/11 12:43:32 result hanged=false: [105927ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7665 #0 [105934ms] -> rt_tgsigqueueinfo(0x0, 0x0, 0x17, 0x20000440) #0 [105934ms] <- rt_tgsigqueueinfo=0xffffffffffffffff errno=22 cover=238 enabling collider #0 [105934ms] -> rt_tgsigqueueinfo(0x0, 0x0, 0x17, 0x20000440) #0 [105934ms] <- rt_tgsigqueueinfo=0xffffffffffffffff errno=22 cover=238 12:43:32 executing program 0: rt_tgsigqueueinfo(0x0, 0x0, 0x17, &(0x7f0000000440)={0x0, 0x0, 0x101}) 2021/11/11 12:43:32 result hanged=false: 2021/11/11 12:43:32 #0: triaging type=7 2021/11/11 12:43:32 triaging input for call #0 rt_tgsigqueueinfo (new signal=7) [105949ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7667 #0 [105957ms] -> rt_tgsigqueueinfo(0x0, 0x0, 0x17, 0x20000440) #0 [105957ms] <- rt_tgsigqueueinfo=0xffffffffffffffff errno=22 cover=238 2021/11/11 12:43:32 result hanged=false: 12:43:32 executing program 0: rt_tgsigqueueinfo(0x0, 0x0, 0x17, &(0x7f0000000440)={0x0, 0x0, 0x101}) [105973ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7669 #0 [105980ms] -> rt_tgsigqueueinfo(0x0, 0x0, 0x17, 0x20000440) #0 [105980ms] <- rt_tgsigqueueinfo=0xffffffffffffffff errno=22 cover=238 12:43:32 executing program 0: rt_tgsigqueueinfo(0x0, 0x0, 0x17, &(0x7f0000000440)={0x0, 0x0, 0x101}) 2021/11/11 12:43:32 result hanged=false: [105996ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7671 #0 [106003ms] -> rt_tgsigqueueinfo(0x0, 0x0, 0x17, 0x20000440) #0 [106003ms] <- rt_tgsigqueueinfo=0xffffffffffffffff errno=22 cover=238 2021/11/11 12:43:33 result hanged=false: 2021/11/11 12:43:33 added new input for call #0 rt_tgsigqueueinfo to corpus: rt_tgsigqueueinfo(0x0, 0x0, 0x17, &(0x7f0000000440)={0x0, 0x0, 0x101}) 12:43:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)="01010101", 0x4) read(r0, &(0x7f00000000c0)=""/4, 0x4) close(r0) [106018ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:33 poll: candidates=8 inputs=0 signal=0 spawned worker pid 7673 #0 [106025ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x42, 0x1ff) #0 [106025ms] <- openat=0x3 errno=14 cover=6697 #0 [106025ms] -> write(0x3, 0x20000080, 0x4) #0 [106026ms] <- write=0x4 errno=14 cover=2268 #0 [106026ms] -> read(0x3, 0x200000c0, 0x4) #0 [106026ms] <- read=0x0 errno=14 cover=906 #0 [106026ms] -> close(0x3) #0 [106026ms] <- close=0x0 errno=14 cover=313 enabling collider #0 [106026ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x42, 0x1ff) #0 [106026ms] <- openat=0x3 errno=14 cover=1056 #0 [106027ms] -> write(0x3, 0x20000080, 0x4) #0 [106027ms] <- write=0x4 errno=14 cover=1405 pthread_create failed (errno 11) 12:43:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)="01010101", 0x4) read(r0, &(0x7f00000000c0)=""/4, 0x4) close(r0) 2021/11/11 12:43:33 result hanged=false: 2021/11/11 12:43:33 #0: triaging type=7 2021/11/11 12:43:33 triaging input for call #3 close (new signal=1) [106069ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7775 #0 [106075ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x42, 0x1ff) #0 [106076ms] <- openat=0x3 errno=14 cover=6684 #0 [106076ms] -> write(0x3, 0x20000080, 0x4) #0 [106077ms] <- write=0x4 errno=14 cover=2868 #0 [106078ms] -> read(0x3, 0x200000c0, 0x4) #0 [106078ms] <- read=0x0 errno=14 cover=922 #0 [106078ms] -> close(0x3) #0 [106078ms] <- close=0x0 errno=14 cover=313 12:43:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)="01010101", 0x4) read(r0, &(0x7f00000000c0)=""/4, 0x4) close(r0) 2021/11/11 12:43:33 result hanged=false: [106092ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7777 #0 [106100ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x42, 0x1ff) #0 [106100ms] <- openat=0x3 errno=14 cover=6720 #0 [106101ms] -> write(0x3, 0x20000080, 0x4) #0 [106101ms] <- write=0x4 errno=14 cover=2922 #0 [106101ms] -> read(0x3, 0x200000c0, 0x4) #0 [106101ms] <- read=0x0 errno=14 cover=911 #0 [106101ms] -> close(0x3) #0 [106101ms] <- close=0x0 errno=14 cover=313 12:43:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)="01010101", 0x4) read(r0, &(0x7f00000000c0)=""/4, 0x4) close(r0) 2021/11/11 12:43:33 result hanged=false: [106117ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7779 #0 [106123ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x42, 0x1ff) #0 [106123ms] <- openat=0x3 errno=14 cover=6710 #0 [106124ms] -> write(0x3, 0x20000080, 0x4) #0 [106124ms] <- write=0x4 errno=14 cover=2879 #0 [106125ms] -> read(0x3, 0x200000c0, 0x4) #0 [106125ms] <- read=0x0 errno=14 cover=906 #0 [106125ms] -> close(0x3) #0 [106125ms] <- close=0x0 errno=14 cover=313 2021/11/11 12:43:33 result hanged=false: 2021/11/11 12:43:33 added new input for call #3 close to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)="01010101", 0x4) read(r0, &(0x7f00000000c0)=""/4, 0x4) close(r0) 2021/11/11 12:43:33 #0: triaging type=7 12:43:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)="01010101", 0x4) read(r0, &(0x7f00000000c0)=""/4, 0x4) close(r0) 2021/11/11 12:43:33 triaging input for call #1 write (new signal=2) [106140ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7781 #0 [106146ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x42, 0x1ff) #0 [106146ms] <- openat=0x3 errno=14 cover=6693 #0 [106147ms] -> write(0x3, 0x20000080, 0x4) #0 [106147ms] <- write=0x4 errno=14 cover=2283 #0 [106147ms] -> read(0x3, 0x200000c0, 0x4) #0 [106147ms] <- read=0x0 errno=14 cover=911 #0 [106148ms] -> close(0x3) #0 [106148ms] <- close=0x0 errno=14 cover=313 12:43:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)="01010101", 0x4) read(r0, &(0x7f00000000c0)=""/4, 0x4) close(r0) 2021/11/11 12:43:33 result hanged=false: [106161ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7783 #0 [106170ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x42, 0x1ff) #0 [106171ms] <- openat=0x3 errno=14 cover=6720 #0 [106173ms] -> write(0x3, 0x20000080, 0x4) #0 [106174ms] <- write=0x4 errno=14 cover=2887 #0 [106174ms] -> read(0x3, 0x200000c0, 0x4) #0 [106174ms] <- read=0x0 errno=14 cover=922 #0 [106174ms] -> close(0x3) #0 [106174ms] <- close=0x0 errno=14 cover=313 12:43:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)="01010101", 0x4) read(r0, &(0x7f00000000c0)=""/4, 0x4) close(r0) 2021/11/11 12:43:33 result hanged=false: [106191ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7785 #0 [106202ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x42, 0x1ff) #0 [106204ms] <- openat=0x3 errno=14 cover=6707 #0 [106210ms] -> write(0x3, 0x20000080, 0x4) #0 [106211ms] <- write=0x4 errno=14 cover=2964 #0 [106212ms] -> read(0x3, 0x200000c0, 0x4) #0 [106213ms] <- read=0x0 errno=14 cover=920 #0 [106215ms] -> close(0x3) #0 [106215ms] <- close=0x0 errno=14 cover=313 2021/11/11 12:43:33 result hanged=false: 2021/11/11 12:43:33 added new input for call #1 write to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)="01010101", 0x4) read(r0, &(0x7f00000000c0)=""/4, 0x4) close(r0) 12:43:33 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) [106242ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7787 #0 [106248ms] -> shmget$private(0x0, 0x4000, 0x0, 0x20ffc000) #0 [106248ms] <- shmget$private=0x0 errno=14 cover=1181 #0 [106249ms] -> shmat(0x0, 0x20ffa000, 0x4000) #0 [106249ms] <- shmat=0x20ffa000 errno=14 cover=2038 #0 [106249ms] -> msync(0x20ffd000, 0x2000, 0x6) #0 [106249ms] <- msync=0x0 errno=14 cover=140 enabling collider #0 [106249ms] -> shmget$private(0x0, 0x4000, 0x0, 0x20ffc000) #0 [106249ms] <- shmget$private=0x1 errno=14 cover=1140 #0 [106250ms] -> shmat(0x1, 0x20ffa000, 0x4000) #0 [106250ms] <- shmat=0x20ffa000 errno=14 cover=1788 pthread_create failed (errno 11) 12:43:33 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) 2021/11/11 12:43:33 result hanged=false: 2021/11/11 12:43:33 #0: triaging type=7 2021/11/11 12:43:33 triaging input for call #2 msync (new signal=32) [106309ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7889 #0 [106318ms] -> shmget$private(0x0, 0x4000, 0x0, 0x20ffc000) #0 [106318ms] <- shmget$private=0x2 errno=14 cover=1090 #0 [106320ms] -> shmat(0x2, 0x20ffa000, 0x4000) #0 [106320ms] <- shmat=0x20ffa000 errno=14 cover=1951 #0 [106324ms] -> msync(0x20ffd000, 0x2000, 0x6) #0 [106324ms] <- msync=0x0 errno=14 cover=140 2021/11/11 12:43:33 result hanged=false: 12:43:33 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) [106346ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7891 #0 [106355ms] -> shmget$private(0x0, 0x4000, 0x0, 0x20ffc000) #0 [106356ms] <- shmget$private=0x3 errno=14 cover=1144 #0 [106357ms] -> shmat(0x3, 0x20ffa000, 0x4000) #0 [106358ms] <- shmat=0x20ffa000 errno=14 cover=2283 #0 [106358ms] -> msync(0x20ffd000, 0x2000, 0x6) #0 [106358ms] <- msync=0x0 errno=14 cover=140 12:43:33 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) 2021/11/11 12:43:33 result hanged=false: [106380ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7893 #0 [106390ms] -> shmget$private(0x0, 0x4000, 0x0, 0x20ffc000) #0 [106391ms] <- shmget$private=0x4 errno=14 cover=1166 #0 [106392ms] -> shmat(0x4, 0x20ffa000, 0x4000) #0 [106392ms] <- shmat=0x20ffa000 errno=14 cover=2154 #0 [106393ms] -> msync(0x20ffd000, 0x2000, 0x6) #0 [106393ms] <- msync=0x0 errno=14 cover=140 2021/11/11 12:43:33 result hanged=false: 2021/11/11 12:43:33 added new input for call #2 msync to corpus: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) 12:43:33 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) 2021/11/11 12:43:33 #0: triaging type=7 2021/11/11 12:43:33 triaging input for call #1 shmat (new signal=2) [106416ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7895 #0 [106426ms] -> shmget$private(0x0, 0x4000, 0x0, 0x20ffc000) #0 [106426ms] <- shmget$private=0x5 errno=14 cover=1112 #0 [106427ms] -> shmat(0x5, 0x20ffa000, 0x4000) #0 [106427ms] <- shmat=0x20ffa000 errno=14 cover=2086 #0 [106428ms] -> msync(0x20ffd000, 0x2000, 0x6) #0 [106428ms] <- msync=0x0 errno=14 cover=140 2021/11/11 12:43:33 result hanged=false: 12:43:33 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) [106449ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7897 #0 [106458ms] -> shmget$private(0x0, 0x4000, 0x0, 0x20ffc000) #0 [106459ms] <- shmget$private=0x6 errno=14 cover=1090 #0 [106460ms] -> shmat(0x6, 0x20ffa000, 0x4000) #0 [106460ms] <- shmat=0x20ffa000 errno=14 cover=1759 #0 [106460ms] -> msync(0x20ffd000, 0x2000, 0x6) #0 [106461ms] <- msync=0x0 errno=14 cover=140 12:43:33 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) 2021/11/11 12:43:33 result hanged=false: [106481ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7899 #0 [106490ms] -> shmget$private(0x0, 0x4000, 0x0, 0x20ffc000) #0 [106490ms] <- shmget$private=0x7 errno=14 cover=1136 #0 [106492ms] -> shmat(0x7, 0x20ffa000, 0x4000) #0 [106493ms] <- shmat=0x20ffa000 errno=14 cover=7052 #0 [106494ms] -> msync(0x20ffd000, 0x2000, 0x6) #0 [106494ms] <- msync=0x0 errno=14 cover=140 2021/11/11 12:43:33 result hanged=false: 2021/11/11 12:43:33 added new input for call #1 shmat to corpus: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) 12:43:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$setownex(r0, 0xf, &(0x7f0000001400)={0x3}) [106526ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7901 #0 [106534ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [106535ms] <- socket$inet6_udplite=0x3 errno=14 cover=1660 #0 [106536ms] -> fcntl$setownex(0x3, 0xf, 0x20001400) #0 [106536ms] <- fcntl$setownex=0xffffffffffffffff errno=22 cover=84 enabling collider #0 [106537ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [106538ms] <- socket$inet6_udplite=0x3 errno=14 cover=1698 12:43:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$setownex(r0, 0xf, &(0x7f0000001400)={0x3}) 2021/11/11 12:43:33 result hanged=false: 2021/11/11 12:43:33 #0: triaging type=7 2021/11/11 12:43:33 triaging input for call #1 fcntl$setownex (new signal=1) [106557ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7903 #0 [106567ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [106567ms] <- socket$inet6_udplite=0x3 errno=14 cover=1646 #0 [106568ms] -> fcntl$setownex(0x3, 0xf, 0x20001400) #0 [106568ms] <- fcntl$setownex=0xffffffffffffffff errno=22 cover=84 12:43:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$setownex(r0, 0xf, &(0x7f0000001400)={0x3}) 2021/11/11 12:43:33 result hanged=false: [106586ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7905 #0 [106595ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [106596ms] <- socket$inet6_udplite=0x3 errno=14 cover=1649 #0 [106596ms] -> fcntl$setownex(0x3, 0xf, 0x20001400) #0 [106596ms] <- fcntl$setownex=0xffffffffffffffff errno=22 cover=84 12:43:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$setownex(r0, 0xf, &(0x7f0000001400)={0x3}) 2021/11/11 12:43:33 result hanged=false: [106615ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7907 #0 [106625ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [106625ms] <- socket$inet6_udplite=0x3 errno=14 cover=1627 #0 [106626ms] -> fcntl$setownex(0x3, 0xf, 0x20001400) #0 [106626ms] <- fcntl$setownex=0xffffffffffffffff errno=22 cover=84 2021/11/11 12:43:33 result hanged=false: 2021/11/11 12:43:33 added new input for call #1 fcntl$setownex to corpus: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$setownex(r0, 0xf, &(0x7f0000001400)={0x3}) 2021/11/11 12:43:33 #0: triaging type=7 12:43:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$setownex(r0, 0xf, &(0x7f0000001400)={0x3}) 2021/11/11 12:43:33 triaging input for call #0 socket$inet6_udplite (new signal=2) [106646ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7909 #0 [106658ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [106658ms] <- socket$inet6_udplite=0x3 errno=14 cover=1652 #0 [106659ms] -> fcntl$setownex(0x3, 0xf, 0x20001400) #0 [106659ms] <- fcntl$setownex=0xffffffffffffffff errno=22 cover=84 2021/11/11 12:43:33 result hanged=false: 12:43:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$setownex(r0, 0xf, &(0x7f0000001400)={0x3}) [106683ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7911 #0 [106694ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [106694ms] <- socket$inet6_udplite=0x3 errno=14 cover=1693 #0 [106697ms] -> fcntl$setownex(0x3, 0xf, 0x20001400) #0 [106697ms] <- fcntl$setownex=0xffffffffffffffff errno=22 cover=84 2021/11/11 12:43:33 result hanged=false: 12:43:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$setownex(r0, 0xf, &(0x7f0000001400)={0x3}) [106719ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7913 #0 [106727ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [106728ms] <- socket$inet6_udplite=0x3 errno=14 cover=1660 #0 [106730ms] -> fcntl$setownex(0x3, 0xf, 0x20001400) #0 [106730ms] <- fcntl$setownex=0xffffffffffffffff errno=22 cover=84 2021/11/11 12:43:33 result hanged=false: 2021/11/11 12:43:33 added new input for call #0 socket$inet6_udplite to corpus: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$setownex(r0, 0xf, &(0x7f0000001400)={0x3}) 12:43:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x5385, 0x7ffffffff000) [106764ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7915 #0 [106773ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [106773ms] <- syz_open_dev$sg=0x3 errno=14 cover=1367 #0 [106774ms] -> ioctl$BLKTRACETEARDOWN(0x3, 0x5385, 0x7ffffffff000) #0 [106774ms] <- ioctl$BLKTRACETEARDOWN=0xffffffffffffffff errno=14 cover=129 enabling collider #0 [106774ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [106775ms] <- syz_open_dev$sg=0x3 errno=14 cover=1367 #0 [106775ms] -> ioctl$BLKTRACETEARDOWN(0x3, 0x5385, 0x7ffffffff000) #0 [106775ms] <- ioctl$BLKTRACETEARDOWN=0xffffffffffffffff errno=9 cover=46 12:43:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x5385, 0x7ffffffff000) [106794ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:33 result hanged=false: 2021/11/11 12:43:33 #0: triaging type=7 2021/11/11 12:43:33 triaging input for call #1 ioctl$BLKTRACETEARDOWN (new signal=16) spawned worker pid 7917 #0 [106805ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [106807ms] <- syz_open_dev$sg=0x3 errno=14 cover=1358 #0 [106810ms] -> ioctl$BLKTRACETEARDOWN(0x3, 0x5385, 0x7ffffffff000) #0 [106810ms] <- ioctl$BLKTRACETEARDOWN=0xffffffffffffffff errno=14 cover=129 2021/11/11 12:43:33 result hanged=false: 12:43:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x5385, 0x7ffffffff000) [106833ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7919 #0 [106842ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [106843ms] <- syz_open_dev$sg=0x3 errno=14 cover=1413 #0 [106844ms] -> ioctl$BLKTRACETEARDOWN(0x3, 0x5385, 0x7ffffffff000) #0 [106844ms] <- ioctl$BLKTRACETEARDOWN=0xffffffffffffffff errno=14 cover=129 12:43:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x5385, 0x7ffffffff000) 2021/11/11 12:43:33 result hanged=false: [106867ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7921 #0 [106879ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [106881ms] <- syz_open_dev$sg=0x3 errno=14 cover=1368 #0 [106882ms] -> ioctl$BLKTRACETEARDOWN(0x3, 0x5385, 0x7ffffffff000) #0 [106882ms] <- ioctl$BLKTRACETEARDOWN=0xffffffffffffffff errno=14 cover=129 2021/11/11 12:43:33 result hanged=false: 2021/11/11 12:43:33 added new input for call #1 ioctl$BLKTRACETEARDOWN to corpus: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x5385, 0x7ffffffff000) 12:43:33 executing program 0: syz_io_uring_setup(0x6474, &(0x7f00000006c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000740), &(0x7f0000000780)) [106904ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7923 #0 [106913ms] -> syz_io_uring_setup(0x6474, 0x200006c0, 0x20ffd000, 0x20ffd000, 0x20000740, 0x20000780) #0 [106919ms] <- syz_io_uring_setup=0x3 errno=14 cover=21493 enabling collider #0 [106921ms] -> syz_io_uring_setup(0x6474, 0x200006c0, 0x20ffd000, 0x20ffd000, 0x20000740, 0x20000780) #0 [106928ms] <- syz_io_uring_setup=0x3 errno=14 cover=28351 12:43:33 executing program 0: unshare(0x28020600) r0 = socket$unix(0x1, 0x2, 0x0) signalfd(r0, &(0x7f0000000040), 0x8) 2021/11/11 12:43:33 result hanged=false: [106954ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7925 #0 [106965ms] -> unshare(0x28020600) #0 [106977ms] <- unshare=0x0 errno=14 cover=27842 #0 [106980ms] -> socket$unix(0x1, 0x2, 0x0) #0 [106980ms] <- socket$unix=0x3 errno=14 cover=1482 #0 [106980ms] -> signalfd(0x3, 0x20000040, 0x8) #0 [106981ms] <- signalfd=0xffffffffffffffff errno=22 cover=78 enabling collider #0 [106982ms] -> unshare(0x28020600) #0 [106987ms] <- unshare=0xffffffffffffffff errno=22 cover=31230 #0 [106988ms] -> socket$unix(0x1, 0x2, 0x0) #0 [106989ms] <- socket$unix=0x4 errno=14 cover=1521 pthread_create failed (errno 11) 12:43:34 executing program 0: unshare(0x28020600) r0 = socket$unix(0x1, 0x2, 0x0) signalfd(r0, &(0x7f0000000040), 0x8) 2021/11/11 12:43:34 result hanged=false: 2021/11/11 12:43:34 #0: triaging type=7 2021/11/11 12:43:34 triaging input for call #2 signalfd (new signal=1) [107047ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8027 #0 [107056ms] -> unshare(0x28020600) #0 [107062ms] <- unshare=0x0 errno=14 cover=27889 #0 [107064ms] -> socket$unix(0x1, 0x2, 0x0) #0 [107064ms] <- socket$unix=0x3 errno=14 cover=1428 #0 [107065ms] -> signalfd(0x3, 0x20000040, 0x8) #0 [107065ms] <- signalfd=0xffffffffffffffff errno=22 cover=64 12:43:34 executing program 0: unshare(0x28020600) r0 = socket$unix(0x1, 0x2, 0x0) signalfd(r0, &(0x7f0000000040), 0x8) 2021/11/11 12:43:34 result hanged=false: [107089ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8029 #0 [107098ms] -> unshare(0x28020600) #0 [107105ms] <- unshare=0x0 errno=14 cover=27770 #0 [107108ms] -> socket$unix(0x1, 0x2, 0x0) #0 [107108ms] <- socket$unix=0x3 errno=14 cover=1504 #0 [107109ms] -> signalfd(0x3, 0x20000040, 0x8) #0 [107109ms] <- signalfd=0xffffffffffffffff errno=22 cover=64 12:43:34 executing program 0: unshare(0x28020600) r0 = socket$unix(0x1, 0x2, 0x0) signalfd(r0, &(0x7f0000000040), 0x8) 2021/11/11 12:43:34 result hanged=false: [107130ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8031 #0 [107141ms] -> unshare(0x28020600) #0 [107145ms] <- unshare=0x0 errno=14 cover=27639 #0 [107147ms] -> socket$unix(0x1, 0x2, 0x0) #0 [107148ms] <- socket$unix=0x3 errno=14 cover=1462 #0 [107148ms] -> signalfd(0x3, 0x20000040, 0x8) #0 [107148ms] <- signalfd=0xffffffffffffffff errno=22 cover=64 2021/11/11 12:43:34 result hanged=false: 2021/11/11 12:43:34 added new input for call #2 signalfd to corpus: unshare(0x28020600) r0 = socket$unix(0x1, 0x2, 0x0) signalfd(r0, &(0x7f0000000040), 0x8) 2021/11/11 12:43:34 #0: triaging type=7 12:43:34 executing program 0: unshare(0x28020600) r0 = socket$unix(0x1, 0x2, 0x0) signalfd(r0, &(0x7f0000000040), 0x8) 2021/11/11 12:43:34 triaging input for call #0 unshare (new signal=1) [107167ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8033 #0 [107178ms] -> unshare(0x28020600) #0 [107185ms] <- unshare=0x0 errno=14 cover=27772 #0 [107188ms] -> socket$unix(0x1, 0x2, 0x0) #0 [107188ms] <- socket$unix=0x3 errno=14 cover=1500 #0 [107189ms] -> signalfd(0x3, 0x20000040, 0x8) #0 [107189ms] <- signalfd=0xffffffffffffffff errno=22 cover=64 12:43:34 executing program 0: unshare(0x28020600) r0 = socket$unix(0x1, 0x2, 0x0) signalfd(r0, &(0x7f0000000040), 0x8) 2021/11/11 12:43:34 result hanged=false: [107212ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8035 #0 [107221ms] -> unshare(0x28020600) #0 [107225ms] <- unshare=0x0 errno=14 cover=27994 #0 [107228ms] -> socket$unix(0x1, 0x2, 0x0) #0 [107228ms] <- socket$unix=0x3 errno=14 cover=1464 #0 [107228ms] -> signalfd(0x3, 0x20000040, 0x8) #0 [107228ms] <- signalfd=0xffffffffffffffff errno=22 cover=64 12:43:34 executing program 0: unshare(0x28020600) r0 = socket$unix(0x1, 0x2, 0x0) signalfd(r0, &(0x7f0000000040), 0x8) 2021/11/11 12:43:34 result hanged=false: [107250ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8037 #0 [107261ms] -> unshare(0x28020600) #0 [107266ms] <- unshare=0x0 errno=14 cover=28025 #0 [107270ms] -> socket$unix(0x1, 0x2, 0x0) #0 [107272ms] <- socket$unix=0x3 errno=14 cover=1442 #0 [107273ms] -> signalfd(0x3, 0x20000040, 0x8) #0 [107273ms] <- signalfd=0xffffffffffffffff errno=22 cover=64 2021/11/11 12:43:34 result hanged=false: 2021/11/11 12:43:34 added new input for call #0 unshare to corpus: unshare(0x28020600) r0 = socket$unix(0x1, 0x2, 0x0) signalfd(r0, &(0x7f0000000040), 0x8) 12:43:34 executing program 0: r0 = io_uring_setup(0x4f6f, &(0x7f0000000bc0)={0x0, 0xc4b0}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) [107306ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8039 #0 [107316ms] -> io_uring_setup(0x4f6f, 0x20000bc0) #0 [107318ms] <- io_uring_setup=0x3 errno=14 cover=5845 #0 [107321ms] -> io_uring_register$IORING_REGISTER_FILES_UPDATE(0x3, 0x6, 0x0, 0x0) #0 [107321ms] <- io_uring_register$IORING_REGISTER_FILES_UPDATE=0xffffffffffffffff errno=6 cover=68 enabling collider #0 [107323ms] -> io_uring_setup(0x4f6f, 0x20000bc0) #0 [107325ms] <- io_uring_setup=0x3 errno=14 cover=4983 12:43:34 executing program 0: r0 = io_uring_setup(0x4f6f, &(0x7f0000000bc0)={0x0, 0xc4b0}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 2021/11/11 12:43:34 result hanged=false: 2021/11/11 12:43:34 #0: triaging type=7 2021/11/11 12:43:34 triaging input for call #1 io_uring_register$IORING_REGISTER_FILES_UPDATE (new signal=2) [107344ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8041 #0 [107355ms] -> io_uring_setup(0x4f6f, 0x20000bc0) #0 [107358ms] <- io_uring_setup=0x3 errno=14 cover=5813 #0 [107359ms] -> io_uring_register$IORING_REGISTER_FILES_UPDATE(0x3, 0x6, 0x0, 0x0) #0 [107359ms] <- io_uring_register$IORING_REGISTER_FILES_UPDATE=0xffffffffffffffff errno=6 cover=68 12:43:34 executing program 0: r0 = io_uring_setup(0x4f6f, &(0x7f0000000bc0)={0x0, 0xc4b0}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 2021/11/11 12:43:34 result hanged=false: [107382ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8043 #0 [107393ms] -> io_uring_setup(0x4f6f, 0x20000bc0) #0 [107397ms] <- io_uring_setup=0x3 errno=14 cover=5882 #0 [107398ms] -> io_uring_register$IORING_REGISTER_FILES_UPDATE(0x3, 0x6, 0x0, 0x0) #0 [107399ms] <- io_uring_register$IORING_REGISTER_FILES_UPDATE=0xffffffffffffffff errno=6 cover=68 12:43:34 executing program 0: r0 = io_uring_setup(0x4f6f, &(0x7f0000000bc0)={0x0, 0xc4b0}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) [107419ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:34 result hanged=false: spawned worker pid 8045 #0 [107430ms] -> io_uring_setup(0x4f6f, 0x20000bc0) #0 [107435ms] <- io_uring_setup=0x3 errno=14 cover=5853 #0 [107436ms] -> io_uring_register$IORING_REGISTER_FILES_UPDATE(0x3, 0x6, 0x0, 0x0) #0 [107436ms] <- io_uring_register$IORING_REGISTER_FILES_UPDATE=0xffffffffffffffff errno=6 cover=68 2021/11/11 12:43:34 result hanged=false: 2021/11/11 12:43:34 added new input for call #1 io_uring_register$IORING_REGISTER_FILES_UPDATE to corpus: r0 = io_uring_setup(0x4f6f, &(0x7f0000000bc0)={0x0, 0xc4b0}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 12:43:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={0x0}}, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003fc0), 0xffffffffffffffff) [107464ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8047 #0 [107474ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [107474ms] <- socket$nl_generic=0x3 errno=14 cover=1423 #0 [107476ms] -> sendmsg$NL80211_CMD_DISCONNECT(0x3, 0x20002080, 0x0) #0 [107476ms] <- sendmsg$NL80211_CMD_DISCONNECT=0x0 errno=14 cover=973 #0 [107477ms] -> socketpair(0x0, 0x0, 0x0, 0x0) #0 [107477ms] <- socketpair=0xffffffffffffffff errno=14 cover=298 #0 [107478ms] -> syz_genetlink_get_family_id$nl80211(0x20003fc0, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [107479ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11942 enabling collider #0 [107479ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [107480ms] <- socket$nl_generic=0x3 errno=14 cover=1444 #0 [107480ms] -> sendmsg$NL80211_CMD_DISCONNECT(0x3, 0x20002080, 0x0) #0 [107480ms] <- sendmsg$NL80211_CMD_DISCONNECT=0x0 errno=14 cover=992 pthread_create failed (errno 11) 2021/11/11 12:43:34 result hanged=false: 12:43:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, r1, 0x301, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 2021/11/11 12:43:34 poll: candidates=8 inputs=0 signal=0 [107536ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8149 #0 [107545ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [107545ms] <- socket$nl_generic=0x3 errno=14 cover=1434 #0 [107546ms] -> syz_genetlink_get_family_id$nl80211(0x20001540, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [107549ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11927 #0 [107554ms] -> sendmsg$NL80211_CMD_GET_SCAN(0x3, 0x20001600, 0x0) #0 [107554ms] <- sendmsg$NL80211_CMD_GET_SCAN=0x14 errno=14 cover=1821 enabling collider #0 [107555ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [107556ms] <- socket$nl_generic=0x3 errno=14 cover=1542 #0 [107557ms] -> syz_genetlink_get_family_id$nl80211(0x20001540, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [107557ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11434 pthread_create failed (errno 11) 2021/11/11 12:43:34 result hanged=false: 12:43:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, r1, 0x301, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 2021/11/11 12:43:34 #0: triaging type=7 2021/11/11 12:43:34 triaging input for call #2 sendmsg$NL80211_CMD_GET_SCAN (new signal=5) [107613ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8251 #0 [107622ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [107623ms] <- socket$nl_generic=0x3 errno=14 cover=6595 #0 [107624ms] -> syz_genetlink_get_family_id$nl80211(0x20001540, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [107625ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11905 #0 [107626ms] -> sendmsg$NL80211_CMD_GET_SCAN(0x3, 0x20001600, 0x0) #0 [107626ms] <- sendmsg$NL80211_CMD_GET_SCAN=0x14 errno=14 cover=1817 12:43:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, r1, 0x301, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 2021/11/11 12:43:34 result hanged=false: [107648ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8253 #0 [107659ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [107662ms] <- socket$nl_generic=0x3 errno=14 cover=1423 #0 [107662ms] -> syz_genetlink_get_family_id$nl80211(0x20001540, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [107663ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11947 #0 [107665ms] -> sendmsg$NL80211_CMD_GET_SCAN(0x3, 0x20001600, 0x0) #0 [107666ms] <- sendmsg$NL80211_CMD_GET_SCAN=0x14 errno=14 cover=1833 12:43:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, r1, 0x301, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 2021/11/11 12:43:34 result hanged=false: [107686ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8255 #0 [107697ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [107697ms] <- socket$nl_generic=0x3 errno=14 cover=1445 #0 [107698ms] -> syz_genetlink_get_family_id$nl80211(0x20001540, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [107701ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12029 #0 [107706ms] -> sendmsg$NL80211_CMD_GET_SCAN(0x3, 0x20001600, 0x0) #0 [107706ms] <- sendmsg$NL80211_CMD_GET_SCAN=0x14 errno=14 cover=1825 2021/11/11 12:43:34 result hanged=false: 2021/11/11 12:43:34 added new input for call #2 sendmsg$NL80211_CMD_GET_SCAN to corpus: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, r1, 0x301, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 12:43:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0xf}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '+\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x38}}, 0x0) [107730ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8257 #0 [107739ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [107741ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6401 #0 [107742ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x20000080, 0x4) syz_genetlink_get_family_id(NLBL_MGMT, 4) #0 [107742ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0x14 errno=14 cover=4578 #0 [107743ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [107743ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5434 #0 [107744ms] -> sendmsg$NLBL_MGMT_C_ADD(0x5, 0x20000000, 0x0) #0 [107745ms] <- sendmsg$NLBL_MGMT_C_ADD=0x38 errno=14 cover=1810 enabling collider #0 [107745ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [107746ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5429 #0 [107747ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x20000080, 0x4) syz_genetlink_get_family_id(NLBL_MGMT, 4) #0 [107747ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0x14 errno=14 cover=4014 pthread_create failed (errno 11) 2021/11/11 12:43:34 result hanged=false: 2021/11/11 12:43:34 #0: triaging type=7 2021/11/11 12:43:34 triaging input for call #3 sendmsg$NLBL_MGMT_C_ADD (new signal=2) 12:43:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0xf}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '+\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x38}}, 0x0) [107811ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8359 #0 [107820ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [107822ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6279 #0 [107825ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x20000080, 0x4) syz_genetlink_get_family_id(NLBL_MGMT, 4) #0 [107825ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0x14 errno=14 cover=4525 #0 [107826ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [107827ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5438 #0 [107828ms] -> sendmsg$NLBL_MGMT_C_ADD(0x5, 0x20000000, 0x0) #0 [107829ms] <- sendmsg$NLBL_MGMT_C_ADD=0x38 errno=14 cover=1806 2021/11/11 12:43:34 result hanged=false: 12:43:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0xf}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '+\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x38}}, 0x0) [107852ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8361 #0 [107860ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [107863ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6303 #0 [107864ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x20000080, 0x4) syz_genetlink_get_family_id(NLBL_MGMT, 4) #0 [107865ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0x14 errno=14 cover=4589 #0 [107866ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [107867ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5434 #0 [107867ms] -> sendmsg$NLBL_MGMT_C_ADD(0x5, 0x20000000, 0x0) #0 [107868ms] <- sendmsg$NLBL_MGMT_C_ADD=0x38 errno=14 cover=1787 2021/11/11 12:43:34 result hanged=false: 12:43:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0xf}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '+\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x38}}, 0x0) [107890ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8363 #0 [107900ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [107901ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6326 #0 [107907ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x20000080, 0x4) syz_genetlink_get_family_id(NLBL_MGMT, 4) #0 [107908ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0x14 errno=14 cover=4570 #0 [107909ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [107913ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=11150 #0 [107915ms] -> sendmsg$NLBL_MGMT_C_ADD(0x5, 0x20000000, 0x0) #0 [107916ms] <- sendmsg$NLBL_MGMT_C_ADD=0x38 errno=14 cover=1779 2021/11/11 12:43:34 result hanged=false: 2021/11/11 12:43:34 added new input for call #3 sendmsg$NLBL_MGMT_C_ADD to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0xf}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '+\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x38}}, 0x0) 2021/11/11 12:43:34 #0: triaging type=7 12:43:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0xf}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '+\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x38}}, 0x0) 2021/11/11 12:43:34 triaging input for call #0 syz_init_net_socket$nl_generic (new signal=2) [107940ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8365 #0 [107948ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [107950ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6278 #0 [107951ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x20000080, 0x4) syz_genetlink_get_family_id(NLBL_MGMT, 4) #0 [107953ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0x14 errno=14 cover=4652 #0 [107954ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [107955ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5491 #0 [107956ms] -> sendmsg$NLBL_MGMT_C_ADD(0x5, 0x20000000, 0x0) #0 [107957ms] <- sendmsg$NLBL_MGMT_C_ADD=0x38 errno=14 cover=1794 2021/11/11 12:43:34 result hanged=false: 12:43:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0xf}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '+\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x38}}, 0x0) [107978ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8367 #0 [107988ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [107988ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6353 #0 [107990ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x20000080, 0x4) syz_genetlink_get_family_id(NLBL_MGMT, 4) #0 [107990ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0x14 errno=14 cover=4510 #0 [107991ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [107991ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5488 #0 [107992ms] -> sendmsg$NLBL_MGMT_C_ADD(0x5, 0x20000000, 0x0) #0 [107992ms] <- sendmsg$NLBL_MGMT_C_ADD=0x38 errno=14 cover=1809 2021/11/11 12:43:34 result hanged=false: 12:43:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0xf}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '+\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x38}}, 0x0) [108016ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8369 #0 [108025ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [108029ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=9909 #0 [108032ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x20000080, 0x4) syz_genetlink_get_family_id(NLBL_MGMT, 4) #0 [108033ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0x14 errno=14 cover=4546 #0 [108034ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [108035ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5481 #0 [108037ms] -> sendmsg$NLBL_MGMT_C_ADD(0x5, 0x20000000, 0x0) #0 [108037ms] <- sendmsg$NLBL_MGMT_C_ADD=0x38 errno=14 cover=1778 2021/11/11 12:43:35 result hanged=false: 2021/11/11 12:43:35 added new input for call #0 syz_init_net_socket$nl_generic to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0xf}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '+\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x38}}, 0x0) 12:43:35 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) kexec_load(0x0, 0x0, 0x0, 0x0) [108076ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8371 #0 [108085ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000080) #0 [108117ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=207093 #0 [108120ms] -> kexec_load(0x0, 0x0, 0x0, 0x0) #0 [108120ms] <- kexec_load=0x0 errno=14 cover=155 enabling collider #0 [108120ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000080) #0 [108121ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=2662 12:43:35 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) kexec_load(0x0, 0x0, 0x0, 0x0) [108140ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:35 result hanged=false: 2021/11/11 12:43:35 #0: triaging type=7 2021/11/11 12:43:35 triaging input for call #1 kexec_load (new signal=3) spawned worker pid 8373 #0 [108151ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000080) #0 [108152ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=7138 #0 [108154ms] -> kexec_load(0x0, 0x0, 0x0, 0x0) #0 [108154ms] <- kexec_load=0x0 errno=14 cover=155 12:43:35 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) kexec_load(0x0, 0x0, 0x0, 0x0) 2021/11/11 12:43:35 result hanged=false: [108176ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8375 #0 [108187ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000080) #0 [108188ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=3031 #0 [108189ms] -> kexec_load(0x0, 0x0, 0x0, 0x0) #0 [108189ms] <- kexec_load=0x0 errno=14 cover=155 12:43:35 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) kexec_load(0x0, 0x0, 0x0, 0x0) 2021/11/11 12:43:35 result hanged=false: [108212ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8377 #0 [108220ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000080) #0 [108222ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=3036 #0 [108223ms] -> kexec_load(0x0, 0x0, 0x0, 0x0) #0 [108223ms] <- kexec_load=0x0 errno=14 cover=155 2021/11/11 12:43:35 result hanged=false: 2021/11/11 12:43:35 added new input for call #1 kexec_load to corpus: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) kexec_load(0x0, 0x0, 0x0, 0x0) 12:43:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f0000000180)='./file0/../file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) creat(&(0x7f0000000040)='./file0\x00', 0x0) [108246ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8379 #0 [108256ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [108258ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12848 #0 [108259ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000280) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='tmpfs' flags=0 opts='' #0 [108264ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=21253 #0 [108264ms] -> chdir(0x20000180) #0 [108264ms] <- chdir=0x0 errno=14 cover=962 #0 [108264ms] -> creat(0x20000040, 0x0) #0 [108265ms] <- creat=0x4 errno=14 cover=2697 #0 [108266ms] -> fallocate(0x4, 0x0, 0x0, 0x8000) #0 [108267ms] <- fallocate=0x0 errno=14 cover=2891 #0 [108267ms] -> creat(0x20000040, 0x0) #0 [108268ms] <- creat=0x5 errno=14 cover=4794 enabling collider #0 [108268ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [108269ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1381 #0 [108269ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000280) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='tmpfs' flags=0 opts='' syz_mount_image > mount error: 20 #0 [108270ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=20 cover=1728 pthread_create failed (errno 11) 2021/11/11 12:43:35 result hanged=false: 12:43:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f0000000180)='./file0/../file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) creat(&(0x7f0000000040)='./file0\x00', 0x0) 2021/11/11 12:43:35 #0: triaging type=7 2021/11/11 12:43:35 triaging input for call #5 creat (new signal=8) umount(./897/file0) [108329ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8481 #0 [108340ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [108341ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12706 #0 [108346ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000280) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='tmpfs' flags=0 opts='' #0 [108350ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=15067 #0 [108355ms] -> chdir(0x20000180) #0 [108355ms] <- chdir=0x0 errno=14 cover=972 #0 [108356ms] -> creat(0x20000040, 0x0) #0 [108357ms] <- creat=0x4 errno=14 cover=2731 #0 [108358ms] -> fallocate(0x4, 0x0, 0x0, 0x8000) #0 [108359ms] <- fallocate=0x0 errno=14 cover=2892 #0 [108361ms] -> creat(0x20000040, 0x0) #0 [108361ms] <- creat=0x5 errno=14 cover=4800 12:43:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f0000000180)='./file0/../file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) creat(&(0x7f0000000040)='./file0\x00', 0x0) 2021/11/11 12:43:35 result hanged=false: umount(./898/file0) [108387ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8483 #0 [108395ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [108398ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=18256 #0 [108400ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000280) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='tmpfs' flags=0 opts='' #0 [108402ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=14943 #0 [108404ms] -> chdir(0x20000180) #0 [108404ms] <- chdir=0x0 errno=14 cover=961 #0 [108404ms] -> creat(0x20000040, 0x0) #0 [108404ms] <- creat=0x4 errno=14 cover=2637 #0 [108404ms] -> fallocate(0x4, 0x0, 0x0, 0x8000) #0 [108405ms] <- fallocate=0x0 errno=14 cover=3513 #0 [108405ms] -> creat(0x20000040, 0x0) #0 [108405ms] <- creat=0x5 errno=14 cover=4362 2021/11/11 12:43:35 result hanged=false: 12:43:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f0000000180)='./file0/../file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) creat(&(0x7f0000000040)='./file0\x00', 0x0) umount(./899/file0) [108433ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8485 #0 [108444ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [108446ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12785 #0 [108448ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000280) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='tmpfs' flags=0 opts='' #0 [108453ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=15156 #0 [108455ms] -> chdir(0x20000180) #0 [108455ms] <- chdir=0x0 errno=14 cover=975 #0 [108456ms] -> creat(0x20000040, 0x0) #0 [108456ms] <- creat=0x4 errno=14 cover=2665 #0 [108458ms] -> fallocate(0x4, 0x0, 0x0, 0x8000) #0 [108458ms] <- fallocate=0x0 errno=14 cover=3552 #0 [108459ms] -> creat(0x20000040, 0x0) #0 [108459ms] <- creat=0x5 errno=14 cover=4539 2021/11/11 12:43:35 result hanged=false: 2021/11/11 12:43:35 added new input for call #5 creat to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f0000000180)='./file0/../file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) creat(&(0x7f0000000040)='./file0\x00', 0x0) umount(./900/file0) 12:43:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f0000000180)='./file0/../file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) creat(&(0x7f0000000040)='./file0\x00', 0x0) [108484ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:35 #0: triaging type=7 2021/11/11 12:43:35 triaging input for call #4 fallocate (new signal=18) spawned worker pid 8487 #0 [108493ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [108494ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12663 #0 [108495ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000280) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='tmpfs' flags=0 opts='' #0 [108498ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=15160 #0 [108499ms] -> chdir(0x20000180) #0 [108499ms] <- chdir=0x0 errno=14 cover=962 #0 [108500ms] -> creat(0x20000040, 0x0) #0 [108500ms] <- creat=0x4 errno=14 cover=2633 #0 [108500ms] -> fallocate(0x4, 0x0, 0x0, 0x8000) #0 [108501ms] <- fallocate=0x0 errno=14 cover=3535 #0 [108501ms] -> creat(0x20000040, 0x0) #0 [108501ms] <- creat=0x5 errno=14 cover=4385 12:43:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f0000000180)='./file0/../file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) creat(&(0x7f0000000040)='./file0\x00', 0x0) umount(./901/file0) 2021/11/11 12:43:35 result hanged=false: [108528ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8489 #0 [108540ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [108542ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12765 #0 [108545ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000280) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='tmpfs' flags=0 opts='' #0 [108548ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=15015 #0 [108550ms] -> chdir(0x20000180) #0 [108550ms] <- chdir=0x0 errno=14 cover=960 #0 [108550ms] -> creat(0x20000040, 0x0) #0 [108552ms] <- creat=0x4 errno=14 cover=2787 #0 [108552ms] -> fallocate(0x4, 0x0, 0x0, 0x8000) #0 [108553ms] <- fallocate=0x0 errno=14 cover=3503 #0 [108553ms] -> creat(0x20000040, 0x0) #0 [108554ms] <- creat=0x5 errno=14 cover=4384 12:43:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f0000000180)='./file0/../file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) creat(&(0x7f0000000040)='./file0\x00', 0x0) 2021/11/11 12:43:35 result hanged=false: umount(./902/file0) [108576ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8491 #0 [108588ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [108589ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12810 #0 [108591ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000280) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='tmpfs' flags=0 opts='' #0 [108595ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=15178 #0 [108597ms] -> chdir(0x20000180) #0 [108597ms] <- chdir=0x0 errno=14 cover=973 #0 [108597ms] -> creat(0x20000040, 0x0) #0 [108597ms] <- creat=0x4 errno=14 cover=2610 #0 [108599ms] -> fallocate(0x4, 0x0, 0x0, 0x8000) #0 [108599ms] <- fallocate=0x0 errno=14 cover=3474 #0 [108599ms] -> creat(0x20000040, 0x0) #0 [108600ms] <- creat=0x5 errno=14 cover=4431 umount(./903/file0) 2021/11/11 12:43:35 result hanged=false: 2021/11/11 12:43:35 added new input for call #4 fallocate to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f0000000180)='./file0/../file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) creat(&(0x7f0000000040)='./file0\x00', 0x0) 2021/11/11 12:43:35 #0: triaging type=7 2021/11/11 12:43:35 triaging input for call #3 creat (new signal=4) 12:43:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f0000000180)='./file0/../file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) creat(&(0x7f0000000040)='./file0\x00', 0x0) [108627ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8493 #0 [108638ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [108639ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12851 #0 [108645ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000280) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='tmpfs' flags=0 opts='' #0 [108649ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=15048 #0 [108651ms] -> chdir(0x20000180) #0 [108651ms] <- chdir=0x0 errno=14 cover=972 #0 [108655ms] -> creat(0x20000040, 0x0) #0 [108656ms] <- creat=0x4 errno=14 cover=2752 #0 [108657ms] -> fallocate(0x4, 0x0, 0x0, 0x8000) #0 [108661ms] <- fallocate=0x0 errno=14 cover=3536 #0 [108662ms] -> creat(0x20000040, 0x0) #0 [108662ms] <- creat=0x5 errno=14 cover=4231 umount(./904/file0) 12:43:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f0000000180)='./file0/../file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) creat(&(0x7f0000000040)='./file0\x00', 0x0) 2021/11/11 12:43:35 result hanged=false: [108689ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8495 #0 [108699ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [108700ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12826 #0 [108703ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000280) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='tmpfs' flags=0 opts='' #0 [108707ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=15125 #0 [108710ms] -> chdir(0x20000180) #0 [108710ms] <- chdir=0x0 errno=14 cover=962 #0 [108711ms] -> creat(0x20000040, 0x0) #0 [108711ms] <- creat=0x4 errno=14 cover=2588 #0 [108712ms] -> fallocate(0x4, 0x0, 0x0, 0x8000) #0 [108713ms] <- fallocate=0x0 errno=14 cover=3568 #0 [108713ms] -> creat(0x20000040, 0x0) #0 [108714ms] <- creat=0x5 errno=14 cover=4231 2021/11/11 12:43:35 result hanged=false: 12:43:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f0000000180)='./file0/../file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) creat(&(0x7f0000000040)='./file0\x00', 0x0) umount(./905/file0) [108737ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8497 #0 [108748ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [108749ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12801 #0 [108751ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000280) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='tmpfs' flags=0 opts='' #0 [108754ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=15095 #0 [108757ms] -> chdir(0x20000180) #0 [108757ms] <- chdir=0x0 errno=14 cover=961 #0 [108759ms] -> creat(0x20000040, 0x0) #0 [108759ms] <- creat=0x4 errno=14 cover=2643 #0 [108760ms] -> fallocate(0x4, 0x0, 0x0, 0x8000) #0 [108760ms] <- fallocate=0x0 errno=14 cover=3496 #0 [108761ms] -> creat(0x20000040, 0x0) #0 [108761ms] <- creat=0x5 errno=14 cover=4262 2021/11/11 12:43:35 result hanged=false: 2021/11/11 12:43:35 added new input for call #3 creat to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f0000000180)='./file0/../file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) creat(&(0x7f0000000040)='./file0\x00', 0x0) umount(./906/file0) 12:43:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f0000000180)='./file0/../file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) creat(&(0x7f0000000040)='./file0\x00', 0x0) [108793ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8499 2021/11/11 12:43:35 #0: triaging type=7 2021/11/11 12:43:35 triaging input for call #0 syz_mount_image$ext4 (new signal=2) #0 [108802ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [108804ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12862 #0 [108806ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000280) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='tmpfs' flags=0 opts='' #0 [108809ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=15158 #0 [108811ms] -> chdir(0x20000180) #0 [108811ms] <- chdir=0x0 errno=14 cover=972 #0 [108812ms] -> creat(0x20000040, 0x0) #0 [108812ms] <- creat=0x4 errno=14 cover=2654 #0 [108813ms] -> fallocate(0x4, 0x0, 0x0, 0x8000) #0 [108813ms] <- fallocate=0x0 errno=14 cover=2838 #0 [108814ms] -> creat(0x20000040, 0x0) #0 [108814ms] <- creat=0x5 errno=14 cover=4656 umount(./907/file0) 12:43:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f0000000180)='./file0/../file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) creat(&(0x7f0000000040)='./file0\x00', 0x0) 2021/11/11 12:43:35 result hanged=false: [108843ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8501 #0 [108851ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [108855ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12677 #0 [108861ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000280) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='tmpfs' flags=0 opts='' #0 [108870ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=15017 #0 [108872ms] -> chdir(0x20000180) #0 [108872ms] <- chdir=0x0 errno=14 cover=971 #0 [108873ms] -> creat(0x20000040, 0x0) #0 [108874ms] <- creat=0x4 errno=14 cover=2731 #0 [108876ms] -> fallocate(0x4, 0x0, 0x0, 0x8000) #0 [108876ms] <- fallocate=0x0 errno=14 cover=3546 #0 [108877ms] -> creat(0x20000040, 0x0) #0 [108877ms] <- creat=0x5 errno=14 cover=4468 2021/11/11 12:43:35 result hanged=false: 12:43:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f0000000180)='./file0/../file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) creat(&(0x7f0000000040)='./file0\x00', 0x0) umount(./908/file0) [108904ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8503 #0 [108915ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [108917ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12855 #0 [108919ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000280) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='tmpfs' flags=0 opts='' #0 [108924ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=15191 #0 [108926ms] -> chdir(0x20000180) #0 [108926ms] <- chdir=0x0 errno=14 cover=1027 #0 [108926ms] -> creat(0x20000040, 0x0) #0 [108927ms] <- creat=0x4 errno=14 cover=2685 #0 [108927ms] -> fallocate(0x4, 0x0, 0x0, 0x8000) #0 [108928ms] <- fallocate=0x0 errno=14 cover=3474 #0 [108929ms] -> creat(0x20000040, 0x0) #0 [108929ms] <- creat=0x5 errno=14 cover=4394 2021/11/11 12:43:35 result hanged=false: 2021/11/11 12:43:35 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f0000000180)='./file0/../file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) creat(&(0x7f0000000040)='./file0\x00', 0x0) umount(./909/file0) 12:43:35 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x200000, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000bc0)='\x00', &(0x7f0000000c00)="be", 0x1) [108980ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8505 #0 [108989ms] -> openat$vcsu(0xffffffffffffff9c, 0x20000a40, 0x200000, 0x0) #0 [108989ms] <- openat$vcsu=0x3 errno=14 cover=878 #0 [108992ms] -> fsconfig$FSCONFIG_SET_BINARY(0x3, 0x2, 0x20000bc0, 0x20000c00, 0x1) #0 [108992ms] <- fsconfig$FSCONFIG_SET_BINARY=0xffffffffffffffff errno=9 cover=53 enabling collider #0 [108993ms] -> openat$vcsu(0xffffffffffffff9c, 0x20000a40, 0x200000, 0x0) #0 [108993ms] <- openat$vcsu=0x3 errno=14 cover=931 12:43:36 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x200000, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000bc0)='\x00', &(0x7f0000000c00)="be", 0x1) 2021/11/11 12:43:36 result hanged=false: 2021/11/11 12:43:36 #0: triaging type=7 2021/11/11 12:43:36 triaging input for call #1 fsconfig$FSCONFIG_SET_BINARY (new signal=2) [109021ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8507 #0 [109032ms] -> openat$vcsu(0xffffffffffffff9c, 0x20000a40, 0x200000, 0x0) #0 [109032ms] <- openat$vcsu=0x3 errno=14 cover=877 #0 [109033ms] -> fsconfig$FSCONFIG_SET_BINARY(0x3, 0x2, 0x20000bc0, 0x20000c00, 0x1) #0 [109033ms] <- fsconfig$FSCONFIG_SET_BINARY=0xffffffffffffffff errno=9 cover=53 12:43:36 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x200000, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000bc0)='\x00', &(0x7f0000000c00)="be", 0x1) 2021/11/11 12:43:36 result hanged=false: [109052ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8509 #0 [109061ms] -> openat$vcsu(0xffffffffffffff9c, 0x20000a40, 0x200000, 0x0) #0 [109061ms] <- openat$vcsu=0x3 errno=14 cover=939 #0 [109062ms] -> fsconfig$FSCONFIG_SET_BINARY(0x3, 0x2, 0x20000bc0, 0x20000c00, 0x1) #0 [109062ms] <- fsconfig$FSCONFIG_SET_BINARY=0xffffffffffffffff errno=9 cover=53 12:43:36 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x200000, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000bc0)='\x00', &(0x7f0000000c00)="be", 0x1) 2021/11/11 12:43:36 result hanged=false: [109082ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8511 #0 [109092ms] -> openat$vcsu(0xffffffffffffff9c, 0x20000a40, 0x200000, 0x0) #0 [109092ms] <- openat$vcsu=0x3 errno=14 cover=911 #0 [109094ms] -> fsconfig$FSCONFIG_SET_BINARY(0x3, 0x2, 0x20000bc0, 0x20000c00, 0x1) #0 [109094ms] <- fsconfig$FSCONFIG_SET_BINARY=0xffffffffffffffff errno=9 cover=53 2021/11/11 12:43:36 result hanged=false: 2021/11/11 12:43:36 added new input for call #1 fsconfig$FSCONFIG_SET_BINARY to corpus: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x200000, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000bc0)='\x00', &(0x7f0000000c00)="be", 0x1) 12:43:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xa78) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x14, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}, {@nodevmap}, {@access_any}, {@cache_loose}], [{@subj_role={'subj_role', 0x3d, '&\xf8%^'}}, {@obj_type={'obj_type', 0x3d, '$'}}, {@uid_lt}, {@seclabel}, {@seclabel}]}}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [109116ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8513 #0 [109125ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [109128ms] <- openat=0x3 errno=14 cover=6724 #0 [109129ms] -> write$binfmt_elf64(0x3, 0x0, 0xa78) #0 [109129ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=1242 #0 [109130ms] -> close(0xffffffffffffffff) #0 [109130ms] <- close=0xffffffffffffffff errno=9 cover=41 #0 [109131ms] -> clone3(0x200008c0, 0x58) #0 [109132ms] <- clone3=0xffffffffffffffff errno=11 cover=4559 #0 [109132ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [109133ms] <- socket$nl_audit=0x4 errno=14 cover=1419 #0 [109133ms] -> setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0x4, 0x10e, 0x2, 0x20000140, 0x4) #0 [109134ms] <- setsockopt$netlink_NETLINK_DROP_MEMBERSHIP=0x0 errno=14 cover=229 #0 [109134ms] -> mount$9p_fd(0x0, 0x20000040, 0x20000080, 0x0, 0x20000240) [ 3014.596893] selinux_netlink_send: 370 callbacks suppressed [ 3014.596921] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65380 sclass=netlink_audit_socket pid=83992 comm=kworker/0:2 #0 [109141ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=6825 #0 [109141ms] -> execveat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0, 0x0) #0 [109142ms] <- execveat=0xffffffffffffffff errno=26 cover=6143 enabling collider #0 [109143ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [109143ms] <- openat=0x3 errno=14 cover=1055 #0 [109144ms] -> write$binfmt_elf64(0x3, 0x0, 0xa78) #0 [109144ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=1111 pthread_create failed (errno 11) 12:43:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xa78) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x14, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}, {@nodevmap}, {@access_any}, {@cache_loose}], [{@subj_role={'subj_role', 0x3d, '&\xf8%^'}}, {@obj_type={'obj_type', 0x3d, '$'}}, {@uid_lt}, {@seclabel}, {@seclabel}]}}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 2021/11/11 12:43:36 result hanged=false: 2021/11/11 12:43:36 #0: triaging type=7 2021/11/11 12:43:36 triaging input for call #7 execveat (new signal=4) [109195ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8616 #0 [109204ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [109207ms] <- openat=0x3 errno=14 cover=6684 #0 [109209ms] -> write$binfmt_elf64(0x3, 0x0, 0xa78) #0 [109209ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=1261 #0 [109210ms] -> close(0xffffffffffffffff) #0 [109210ms] <- close=0xffffffffffffffff errno=9 cover=41 #0 [109210ms] -> clone3(0x200008c0, 0x58) #0 [109212ms] <- clone3=0xffffffffffffffff errno=11 cover=4487 [ 3014.677095] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65380 sclass=netlink_audit_socket pid=83992 comm=kworker/0:2 #0 [109214ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [109214ms] <- socket$nl_audit=0x4 errno=14 cover=1539 #0 [109215ms] -> setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0x4, 0x10e, 0x2, 0x20000140, 0x4) #0 [109215ms] <- setsockopt$netlink_NETLINK_DROP_MEMBERSHIP=0x0 errno=14 cover=243 #0 [109215ms] -> mount$9p_fd(0x0, 0x20000040, 0x20000080, 0x0, 0x20000240) #0 [109219ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=6744 #0 [109220ms] -> execveat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0, 0x0) #0 [109222ms] <- execveat=0xffffffffffffffff errno=26 cover=6497 12:43:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xa78) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x14, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}, {@nodevmap}, {@access_any}, {@cache_loose}], [{@subj_role={'subj_role', 0x3d, '&\xf8%^'}}, {@obj_type={'obj_type', 0x3d, '$'}}, {@uid_lt}, {@seclabel}, {@seclabel}]}}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 2021/11/11 12:43:36 result hanged=false: [109243ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8619 #0 [109252ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [109254ms] <- openat=0x3 errno=14 cover=6898 #0 [109257ms] -> write$binfmt_elf64(0x3, 0x0, 0xa78) #0 [109257ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=1253 #0 [109258ms] -> close(0xffffffffffffffff) #0 [109258ms] <- close=0xffffffffffffffff errno=9 cover=41 #0 [109259ms] -> clone3(0x200008c0, 0x58) #0 [109260ms] <- clone3=0xffffffffffffffff errno=11 cover=4539 #0 [109263ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [109263ms] <- socket$nl_audit=0x4 errno=14 cover=1528 #0 [109264ms] -> setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0x4, 0x10e, 0x2, 0x20000140, 0x4) #0 [109265ms] <- setsockopt$netlink_NETLINK_DROP_MEMBERSHIP=0x0 errno=14 cover=229 #0 [109266ms] -> mount$9p_fd(0x0, 0x20000040, 0x20000080, 0x0, 0x20000240) [ 3014.729293] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65380 sclass=netlink_audit_socket pid=83992 comm=kworker/0:2 #0 [109271ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=6739 #0 [109273ms] -> execveat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0, 0x0) #0 [109274ms] <- execveat=0xffffffffffffffff errno=26 cover=6273 12:43:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xa78) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x14, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}, {@nodevmap}, {@access_any}, {@cache_loose}], [{@subj_role={'subj_role', 0x3d, '&\xf8%^'}}, {@obj_type={'obj_type', 0x3d, '$'}}, {@uid_lt}, {@seclabel}, {@seclabel}]}}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 2021/11/11 12:43:36 result hanged=false: [109294ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8622 #0 [109304ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [109305ms] <- openat=0x3 errno=14 cover=6682 #0 [109307ms] -> write$binfmt_elf64(0x3, 0x0, 0xa78) #0 [109307ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=1247 #0 [109308ms] -> close(0xffffffffffffffff) #0 [109308ms] <- close=0xffffffffffffffff errno=9 cover=41 #0 [109308ms] -> clone3(0x200008c0, 0x58) #0 [109309ms] <- clone3=0xffffffffffffffff errno=11 cover=4547 #0 [109310ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [109311ms] <- socket$nl_audit=0x4 errno=14 cover=1408 #0 [109312ms] -> setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0x4, 0x10e, 0x2, 0x20000140, 0x4) #0 [109312ms] <- setsockopt$netlink_NETLINK_DROP_MEMBERSHIP=0x0 errno=14 cover=229 #0 [109312ms] -> mount$9p_fd(0x0, 0x20000040, 0x20000080, 0x0, 0x20000240) [ 3014.774808] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65380 sclass=netlink_audit_socket pid=83992 comm=kworker/0:2 #0 [109316ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=6737 #0 [109317ms] -> execveat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0, 0x0) #0 [109319ms] <- execveat=0xffffffffffffffff errno=26 cover=6504 2021/11/11 12:43:36 result hanged=false: 2021/11/11 12:43:36 added new input for call #7 execveat to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xa78) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x14, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}, {@nodevmap}, {@access_any}, {@cache_loose}], [{@subj_role={'subj_role', 0x3d, '&\xf8%^'}}, {@obj_type={'obj_type', 0x3d, '$'}}, {@uid_lt}, {@seclabel}, {@seclabel}]}}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 2021/11/11 12:43:36 #0: triaging type=7 12:43:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xa78) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x14, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}, {@nodevmap}, {@access_any}, {@cache_loose}], [{@subj_role={'subj_role', 0x3d, '&\xf8%^'}}, {@obj_type={'obj_type', 0x3d, '$'}}, {@uid_lt}, {@seclabel}, {@seclabel}]}}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 2021/11/11 12:43:36 triaging input for call #6 mount$9p_fd (new signal=17) [109357ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8625 #0 [109365ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [109366ms] <- openat=0x3 errno=14 cover=6708 #0 [109367ms] -> write$binfmt_elf64(0x3, 0x0, 0xa78) #0 [109367ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=1247 #0 [109367ms] -> close(0xffffffffffffffff) #0 [109367ms] <- close=0xffffffffffffffff errno=9 cover=41 #0 [109367ms] -> clone3(0x200008c0, 0x58) #0 [109368ms] <- clone3=0xffffffffffffffff errno=11 cover=4461 #0 [109368ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [109368ms] <- socket$nl_audit=0x4 errno=14 cover=1408 #0 [109369ms] -> setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0x4, 0x10e, 0x2, 0x20000140, 0x4) #0 [109369ms] <- setsockopt$netlink_NETLINK_DROP_MEMBERSHIP=0x0 errno=14 cover=229 #0 [109369ms] -> mount$9p_fd(0x0, 0x20000040, 0x20000080, 0x0, 0x20000240) [ 3014.830946] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65380 sclass=netlink_audit_socket pid=154934 comm=kworker/1:0 #0 [109372ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=6757 #0 [109374ms] -> execveat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0, 0x0) #0 [109376ms] <- execveat=0xffffffffffffffff errno=26 cover=6251 2021/11/11 12:43:36 result hanged=false: 12:43:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xa78) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x14, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}, {@nodevmap}, {@access_any}, {@cache_loose}], [{@subj_role={'subj_role', 0x3d, '&\xf8%^'}}, {@obj_type={'obj_type', 0x3d, '$'}}, {@uid_lt}, {@seclabel}, {@seclabel}]}}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [109399ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8628 #0 [109406ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [109409ms] <- openat=0x3 errno=14 cover=6903 #0 [109413ms] -> write$binfmt_elf64(0x3, 0x0, 0xa78) #0 [109413ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=1247 #0 [109413ms] -> close(0xffffffffffffffff) #0 [109413ms] <- close=0xffffffffffffffff errno=9 cover=41 #0 [109413ms] -> clone3(0x200008c0, 0x58) #0 [109414ms] <- clone3=0xffffffffffffffff errno=11 cover=4503 #0 [109414ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [109415ms] <- socket$nl_audit=0x4 errno=14 cover=1397 #0 [109415ms] -> setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0x4, 0x10e, 0x2, 0x20000140, 0x4) #0 [109415ms] <- setsockopt$netlink_NETLINK_DROP_MEMBERSHIP=0x0 errno=14 cover=229 #0 [109415ms] -> mount$9p_fd(0x0, 0x20000040, 0x20000080, 0x0, 0x20000240) [ 3014.876963] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65380 sclass=netlink_audit_socket pid=154934 comm=kworker/1:0 #0 [109418ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=6721 #0 [109421ms] -> execveat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0, 0x0) #0 [109422ms] <- execveat=0xffffffffffffffff errno=26 cover=6351 12:43:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xa78) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x14, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}, {@nodevmap}, {@access_any}, {@cache_loose}], [{@subj_role={'subj_role', 0x3d, '&\xf8%^'}}, {@obj_type={'obj_type', 0x3d, '$'}}, {@uid_lt}, {@seclabel}, {@seclabel}]}}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 2021/11/11 12:43:36 result hanged=false: [109447ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8631 #0 [109459ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [109460ms] <- openat=0x3 errno=14 cover=6722 #0 [109462ms] -> write$binfmt_elf64(0x3, 0x0, 0xa78) #0 [109462ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=1247 #0 [109462ms] -> close(0xffffffffffffffff) #0 [109462ms] <- close=0xffffffffffffffff errno=9 cover=41 #0 [109462ms] -> clone3(0x200008c0, 0x58) #0 [109464ms] <- clone3=0xffffffffffffffff errno=11 cover=4652 #0 [109464ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [109465ms] <- socket$nl_audit=0x4 errno=14 cover=1397 #0 [109465ms] -> setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0x4, 0x10e, 0x2, 0x20000140, 0x4) #0 [109466ms] <- setsockopt$netlink_NETLINK_DROP_MEMBERSHIP=0x0 errno=14 cover=229 #0 [109466ms] -> mount$9p_fd(0x0, 0x20000040, 0x20000080, 0x0, 0x20000240) [ 3014.928702] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65380 sclass=netlink_audit_socket pid=83992 comm=kworker/0:2 #0 [109470ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=6735 #0 [109471ms] -> execveat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0, 0x0) #0 [109472ms] <- execveat=0xffffffffffffffff errno=26 cover=6456 2021/11/11 12:43:36 result hanged=false: 2021/11/11 12:43:36 added new input for call #6 mount$9p_fd to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xa78) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x14, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}, {@nodevmap}, {@access_any}, {@cache_loose}], [{@subj_role={'subj_role', 0x3d, '&\xf8%^'}}, {@obj_type={'obj_type', 0x3d, '$'}}, {@uid_lt}, {@seclabel}, {@seclabel}]}}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 12:43:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xa78) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x14, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}, {@nodevmap}, {@access_any}, {@cache_loose}], [{@subj_role={'subj_role', 0x3d, '&\xf8%^'}}, {@obj_type={'obj_type', 0x3d, '$'}}, {@uid_lt}, {@seclabel}, {@seclabel}]}}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [109506ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:36 #0: triaging type=7 2021/11/11 12:43:36 triaging input for call #5 setsockopt$netlink_NETLINK_DROP_MEMBERSHIP (new signal=12) spawned worker pid 8634 #0 [109516ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [109517ms] <- openat=0x3 errno=14 cover=6733 #0 [109518ms] -> write$binfmt_elf64(0x3, 0x0, 0xa78) #0 [109518ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=1247 #0 [109519ms] -> close(0xffffffffffffffff) #0 [109519ms] <- close=0xffffffffffffffff errno=9 cover=41 #0 [109519ms] -> clone3(0x200008c0, 0x58) #0 [109520ms] <- clone3=0xffffffffffffffff errno=11 cover=4594 #0 [109521ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [109521ms] <- socket$nl_audit=0x4 errno=14 cover=1408 #0 [109522ms] -> setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0x4, 0x10e, 0x2, 0x20000140, 0x4) #0 [109522ms] <- setsockopt$netlink_NETLINK_DROP_MEMBERSHIP=0x0 errno=14 cover=229 #0 [109522ms] -> mount$9p_fd(0x0, 0x20000040, 0x20000080, 0x0, 0x20000240) [ 3014.985399] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65380 sclass=netlink_audit_socket pid=83992 comm=kworker/0:2 #0 [109527ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=6813 #0 [109528ms] -> execveat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0, 0x0) #0 [109530ms] <- execveat=0xffffffffffffffff errno=26 cover=6464 12:43:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xa78) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x14, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}, {@nodevmap}, {@access_any}, {@cache_loose}], [{@subj_role={'subj_role', 0x3d, '&\xf8%^'}}, {@obj_type={'obj_type', 0x3d, '$'}}, {@uid_lt}, {@seclabel}, {@seclabel}]}}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 2021/11/11 12:43:36 result hanged=false: [109552ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8637 #0 [109562ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [109563ms] <- openat=0x3 errno=14 cover=6748 #0 [109564ms] -> write$binfmt_elf64(0x3, 0x0, 0xa78) #0 [109565ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=1258 #0 [109565ms] -> close(0xffffffffffffffff) #0 [109565ms] <- close=0xffffffffffffffff errno=9 cover=41 #0 [109565ms] -> clone3(0x200008c0, 0x58) #0 [109566ms] <- clone3=0xffffffffffffffff errno=11 cover=4528 #0 [109567ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [109567ms] <- socket$nl_audit=0x4 errno=14 cover=1397 #0 [109568ms] -> setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0x4, 0x10e, 0x2, 0x20000140, 0x4) #0 [109568ms] <- setsockopt$netlink_NETLINK_DROP_MEMBERSHIP=0x0 errno=14 cover=229 #0 [109569ms] -> mount$9p_fd(0x0, 0x20000040, 0x20000080, 0x0, 0x20000240) [ 3015.031938] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65380 sclass=netlink_audit_socket pid=83992 comm=kworker/0:2 #0 [109573ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=6729 #0 [109575ms] -> execveat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0, 0x0) #0 [109575ms] <- execveat=0xffffffffffffffff errno=26 cover=6451 2021/11/11 12:43:36 result hanged=false: 12:43:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xa78) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x14, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}, {@nodevmap}, {@access_any}, {@cache_loose}], [{@subj_role={'subj_role', 0x3d, '&\xf8%^'}}, {@obj_type={'obj_type', 0x3d, '$'}}, {@uid_lt}, {@seclabel}, {@seclabel}]}}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [109596ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8640 #0 [109606ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [109607ms] <- openat=0x3 errno=14 cover=6704 #0 [109609ms] -> write$binfmt_elf64(0x3, 0x0, 0xa78) #0 [109609ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=1247 #0 [109611ms] -> close(0xffffffffffffffff) #0 [109611ms] <- close=0xffffffffffffffff errno=9 cover=41 #0 [109611ms] -> clone3(0x200008c0, 0x58) #0 [109612ms] <- clone3=0xffffffffffffffff errno=11 cover=4620 #0 [109613ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [109614ms] <- socket$nl_audit=0x4 errno=14 cover=1483 #0 [109614ms] -> setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0x4, 0x10e, 0x2, 0x20000140, 0x4) #0 [109615ms] <- setsockopt$netlink_NETLINK_DROP_MEMBERSHIP=0x0 errno=14 cover=229 #0 [109615ms] -> mount$9p_fd(0x0, 0x20000040, 0x20000080, 0x0, 0x20000240) [ 3015.077727] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65380 sclass=netlink_audit_socket pid=83992 comm=kworker/0:2 #0 [109620ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=6759 #0 [109621ms] -> execveat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0, 0x0) #0 [109621ms] <- execveat=0xffffffffffffffff errno=26 cover=6385 2021/11/11 12:43:36 result hanged=false: 2021/11/11 12:43:36 added new input for call #5 setsockopt$netlink_NETLINK_DROP_MEMBERSHIP to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xa78) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x14, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}, {@nodevmap}, {@access_any}, {@cache_loose}], [{@subj_role={'subj_role', 0x3d, '&\xf8%^'}}, {@obj_type={'obj_type', 0x3d, '$'}}, {@uid_lt}, {@seclabel}, {@seclabel}]}}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 2021/11/11 12:43:36 #0: triaging type=7 2021/11/11 12:43:36 triaging input for call #1 write$binfmt_elf64 (new signal=3) 12:43:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xa78) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x14, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}, {@nodevmap}, {@access_any}, {@cache_loose}], [{@subj_role={'subj_role', 0x3d, '&\xf8%^'}}, {@obj_type={'obj_type', 0x3d, '$'}}, {@uid_lt}, {@seclabel}, {@seclabel}]}}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [109647ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8643 #0 [109655ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [109655ms] <- openat=0x3 errno=14 cover=6717 #0 [109656ms] -> write$binfmt_elf64(0x3, 0x0, 0xa78) #0 [109657ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=1258 #0 [109657ms] -> close(0xffffffffffffffff) #0 [109657ms] <- close=0xffffffffffffffff errno=9 cover=41 #0 [109657ms] -> clone3(0x200008c0, 0x58) #0 [109658ms] <- clone3=0xffffffffffffffff errno=11 cover=4575 #0 [109658ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [109659ms] <- socket$nl_audit=0x4 errno=14 cover=1485 #0 [109659ms] -> setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0x4, 0x10e, 0x2, 0x20000140, 0x4) #0 [109659ms] <- setsockopt$netlink_NETLINK_DROP_MEMBERSHIP=0x0 errno=14 cover=272 #0 [109659ms] -> mount$9p_fd(0x0, 0x20000040, 0x20000080, 0x0, 0x20000240) #0 [109661ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=6845 #0 [109661ms] -> execveat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0, 0x0) #0 [109662ms] <- execveat=0xffffffffffffffff errno=26 cover=6132 12:43:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xa78) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x14, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}, {@nodevmap}, {@access_any}, {@cache_loose}], [{@subj_role={'subj_role', 0x3d, '&\xf8%^'}}, {@obj_type={'obj_type', 0x3d, '$'}}, {@uid_lt}, {@seclabel}, {@seclabel}]}}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 2021/11/11 12:43:36 result hanged=false: [109687ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8646 #0 [109696ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [109698ms] <- openat=0x3 errno=14 cover=6773 #0 [109700ms] -> write$binfmt_elf64(0x3, 0x0, 0xa78) #0 [109700ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=1258 #0 [109701ms] -> close(0xffffffffffffffff) #0 [109701ms] <- close=0xffffffffffffffff errno=9 cover=41 #0 [109701ms] -> clone3(0x200008c0, 0x58) #0 [109703ms] <- clone3=0xffffffffffffffff errno=11 cover=4720 #0 [109704ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [109704ms] <- socket$nl_audit=0x4 errno=14 cover=1441 #0 [109704ms] -> setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0x4, 0x10e, 0x2, 0x20000140, 0x4) #0 [109705ms] <- setsockopt$netlink_NETLINK_DROP_MEMBERSHIP=0x0 errno=14 cover=229 #0 [109705ms] -> mount$9p_fd(0x0, 0x20000040, 0x20000080, 0x0, 0x20000240) #0 [109706ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=6753 #0 [109707ms] -> execveat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0, 0x0) #0 [109708ms] <- execveat=0xffffffffffffffff errno=26 cover=6483 12:43:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xa78) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x14, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}, {@nodevmap}, {@access_any}, {@cache_loose}], [{@subj_role={'subj_role', 0x3d, '&\xf8%^'}}, {@obj_type={'obj_type', 0x3d, '$'}}, {@uid_lt}, {@seclabel}, {@seclabel}]}}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 2021/11/11 12:43:36 result hanged=false: [109730ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8649 #0 [109742ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [109743ms] <- openat=0x3 errno=14 cover=6678 #0 [109744ms] -> write$binfmt_elf64(0x3, 0x0, 0xa78) #0 [109745ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=1279 #0 [109746ms] -> close(0xffffffffffffffff) #0 [109746ms] <- close=0xffffffffffffffff errno=9 cover=41 #0 [109746ms] -> clone3(0x200008c0, 0x58) #0 [109747ms] <- clone3=0xffffffffffffffff errno=11 cover=4471 #0 [109748ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [109748ms] <- socket$nl_audit=0x4 errno=14 cover=1451 #0 [109749ms] -> setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0x4, 0x10e, 0x2, 0x20000140, 0x4) #0 [109749ms] <- setsockopt$netlink_NETLINK_DROP_MEMBERSHIP=0x0 errno=14 cover=229 #0 [109749ms] -> mount$9p_fd(0x0, 0x20000040, 0x20000080, 0x0, 0x20000240) #0 [109751ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=6731 #0 [109752ms] -> execveat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0, 0x0) #0 [109753ms] <- execveat=0xffffffffffffffff errno=26 cover=6439 2021/11/11 12:43:36 result hanged=false: 2021/11/11 12:43:36 added new input for call #1 write$binfmt_elf64 to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xa78) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x14, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}, {@nodevmap}, {@access_any}, {@cache_loose}], [{@subj_role={'subj_role', 0x3d, '&\xf8%^'}}, {@obj_type={'obj_type', 0x3d, '$'}}, {@uid_lt}, {@seclabel}, {@seclabel}]}}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 2021/11/11 12:43:36 #0: triaging type=7 12:43:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xa78) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x14, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}, {@nodevmap}, {@access_any}, {@cache_loose}], [{@subj_role={'subj_role', 0x3d, '&\xf8%^'}}, {@obj_type={'obj_type', 0x3d, '$'}}, {@uid_lt}, {@seclabel}, {@seclabel}]}}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [109780ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8652 2021/11/11 12:43:36 triaging input for call #0 openat (new signal=4) #0 [109788ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [109788ms] <- openat=0x3 errno=14 cover=6746 #0 [109789ms] -> write$binfmt_elf64(0x3, 0x0, 0xa78) #0 [109790ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=1247 #0 [109790ms] -> close(0xffffffffffffffff) #0 [109790ms] <- close=0xffffffffffffffff errno=9 cover=41 #0 [109790ms] -> clone3(0x200008c0, 0x58) #0 [109791ms] <- clone3=0xffffffffffffffff errno=11 cover=4552 #0 [109791ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [109791ms] <- socket$nl_audit=0x4 errno=14 cover=1419 #0 [109791ms] -> setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0x4, 0x10e, 0x2, 0x20000140, 0x4) #0 [109791ms] <- setsockopt$netlink_NETLINK_DROP_MEMBERSHIP=0x0 errno=14 cover=229 #0 [109792ms] -> mount$9p_fd(0x0, 0x20000040, 0x20000080, 0x0, 0x20000240) #0 [109793ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=6814 #0 [109794ms] -> execveat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0, 0x0) #0 [109794ms] <- execveat=0xffffffffffffffff errno=26 cover=6159 12:43:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xa78) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x14, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}, {@nodevmap}, {@access_any}, {@cache_loose}], [{@subj_role={'subj_role', 0x3d, '&\xf8%^'}}, {@obj_type={'obj_type', 0x3d, '$'}}, {@uid_lt}, {@seclabel}, {@seclabel}]}}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 2021/11/11 12:43:36 result hanged=false: [109817ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8655 #0 [109827ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [109828ms] <- openat=0x3 errno=14 cover=6726 #0 [109830ms] -> write$binfmt_elf64(0x3, 0x0, 0xa78) #0 [109830ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=1247 #0 [109832ms] -> close(0xffffffffffffffff) #0 [109832ms] <- close=0xffffffffffffffff errno=9 cover=41 #0 [109832ms] -> clone3(0x200008c0, 0x58) #0 [109833ms] <- clone3=0xffffffffffffffff errno=11 cover=4667 #0 [109834ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [109834ms] <- socket$nl_audit=0x4 errno=14 cover=1498 #0 [109835ms] -> setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0x4, 0x10e, 0x2, 0x20000140, 0x4) #0 [109835ms] <- setsockopt$netlink_NETLINK_DROP_MEMBERSHIP=0x0 errno=14 cover=229 #0 [109835ms] -> mount$9p_fd(0x0, 0x20000040, 0x20000080, 0x0, 0x20000240) #0 [109838ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=6787 #0 [109838ms] -> execveat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0, 0x0) #0 [109839ms] <- execveat=0xffffffffffffffff errno=26 cover=6482 12:43:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xa78) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x14, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}, {@nodevmap}, {@access_any}, {@cache_loose}], [{@subj_role={'subj_role', 0x3d, '&\xf8%^'}}, {@obj_type={'obj_type', 0x3d, '$'}}, {@uid_lt}, {@seclabel}, {@seclabel}]}}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 2021/11/11 12:43:36 result hanged=false: [109860ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8658 #0 [109867ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [109867ms] <- openat=0x3 errno=14 cover=6795 #0 [109869ms] -> write$binfmt_elf64(0x3, 0x0, 0xa78) #0 [109869ms] <- write$binfmt_elf64=0xffffffffffffffff errno=14 cover=1242 #0 [109870ms] -> close(0xffffffffffffffff) #0 [109870ms] <- close=0xffffffffffffffff errno=9 cover=41 #0 [109871ms] -> clone3(0x200008c0, 0x58) #0 [109871ms] <- clone3=0xffffffffffffffff errno=11 cover=4460 #0 [109875ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [109875ms] <- socket$nl_audit=0x4 errno=14 cover=1506 #0 [109876ms] -> setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0x4, 0x10e, 0x2, 0x20000140, 0x4) #0 [109876ms] <- setsockopt$netlink_NETLINK_DROP_MEMBERSHIP=0x0 errno=14 cover=243 #0 [109876ms] -> mount$9p_fd(0x0, 0x20000040, 0x20000080, 0x0, 0x20000240) #0 [109878ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=6766 #0 [109883ms] -> execveat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0, 0x0) #0 [109884ms] <- execveat=0xffffffffffffffff errno=26 cover=6221 2021/11/11 12:43:36 result hanged=false: 2021/11/11 12:43:36 added new input for call #0 openat to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xa78) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x14, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}, {@nodevmap}, {@access_any}, {@cache_loose}], [{@subj_role={'subj_role', 0x3d, '&\xf8%^'}}, {@obj_type={'obj_type', 0x3d, '$'}}, {@uid_lt}, {@seclabel}, {@seclabel}]}}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 12:43:36 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="103453ed59b6f782345631f8e945967f2ab0d83b75c81ed2288f4e02002f3d72aeac0df2943e4586a7a7218c4db5c70cdf", 0x31}], 0x1}}], 0x2, 0x8080) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0xffd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x28, 0x8080) [109956ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8661 #0 [109967ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [109967ms] <- socket$inet6_udplite=0x3 errno=14 cover=1707 #0 [109968ms] -> sendmmsg$inet6(0x3, 0x20000040, 0x2, 0x8080) #0 [109970ms] <- sendmmsg$inet6=0x2 errno=14 cover=6648 #0 [109971ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [109971ms] <- socket$inet6_udplite=0x4 errno=14 cover=1733 #0 [109971ms] -> sendmmsg$inet6(0x4, 0x20000040, 0x28, 0x8080) #0 [109973ms] <- sendmmsg$inet6=0x8 errno=14 cover=20110 enabling collider #0 [109977ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [109977ms] <- socket$inet6_udplite=0x3 errno=14 cover=1712 #0 [109978ms] -> sendmmsg$inet6(0x3, 0x20000040, 0x2, 0x8080) #0 [109978ms] <- sendmmsg$inet6=0x2 errno=14 cover=1969 pthread_create failed (errno 11) 12:43:37 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="103453ed59b6f782345631f8e945967f2ab0d83b75c81ed2288f4e02002f3d72aeac0df2943e4586a7a7218c4db5c70cdf", 0x31}], 0x1}}], 0x2, 0x8080) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0xffd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x28, 0x8080) 2021/11/11 12:43:37 result hanged=false: 2021/11/11 12:43:37 #0: triaging type=7 2021/11/11 12:43:37 triaging input for call #3 sendmmsg$inet6 (new signal=3) [110022ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8763 #0 [110033ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [110034ms] <- socket$inet6_udplite=0x3 errno=14 cover=1646 #0 [110035ms] -> sendmmsg$inet6(0x3, 0x20000040, 0x2, 0x8080) #0 [110035ms] <- sendmmsg$inet6=0x2 errno=14 cover=1983 #0 [110036ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [110036ms] <- socket$inet6_udplite=0x4 errno=14 cover=1766 #0 [110036ms] -> sendmmsg$inet6(0x4, 0x20000040, 0x28, 0x8080) #0 [110039ms] <- sendmmsg$inet6=0x8 errno=14 cover=20101 2021/11/11 12:43:37 result hanged=false: 12:43:37 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="103453ed59b6f782345631f8e945967f2ab0d83b75c81ed2288f4e02002f3d72aeac0df2943e4586a7a7218c4db5c70cdf", 0x31}], 0x1}}], 0x2, 0x8080) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0xffd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x28, 0x8080) [110065ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8765 #0 [110076ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [110076ms] <- socket$inet6_udplite=0x3 errno=14 cover=1613 #0 [110077ms] -> sendmmsg$inet6(0x3, 0x20000040, 0x2, 0x8080) #0 [110078ms] <- sendmmsg$inet6=0x2 errno=14 cover=2005 #0 [110079ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [110080ms] <- socket$inet6_udplite=0x4 errno=14 cover=1689 #0 [110081ms] -> sendmmsg$inet6(0x4, 0x20000040, 0x28, 0x8080) #0 [110083ms] <- sendmmsg$inet6=0x8 errno=14 cover=19943 2021/11/11 12:43:37 result hanged=false: 12:43:37 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="103453ed59b6f782345631f8e945967f2ab0d83b75c81ed2288f4e02002f3d72aeac0df2943e4586a7a7218c4db5c70cdf", 0x31}], 0x1}}], 0x2, 0x8080) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0xffd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x28, 0x8080) [110107ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8767 #0 [110117ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [110119ms] <- socket$inet6_udplite=0x3 errno=14 cover=1688 #0 [110120ms] -> sendmmsg$inet6(0x3, 0x20000040, 0x2, 0x8080) #0 [110121ms] <- sendmmsg$inet6=0x2 errno=14 cover=2025 #0 [110121ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [110122ms] <- socket$inet6_udplite=0x4 errno=14 cover=1688 #0 [110123ms] -> sendmmsg$inet6(0x4, 0x20000040, 0x28, 0x8080) #0 [110127ms] <- sendmmsg$inet6=0x8 errno=14 cover=20151 2021/11/11 12:43:37 result hanged=false: 2021/11/11 12:43:37 added new input for call #3 sendmmsg$inet6 to corpus: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="103453ed59b6f782345631f8e945967f2ab0d83b75c81ed2288f4e02002f3d72aeac0df2943e4586a7a7218c4db5c70cdf", 0x31}], 0x1}}], 0x2, 0x8080) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0xffd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x28, 0x8080) 2021/11/11 12:43:37 #0: triaging type=7 12:43:37 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="103453ed59b6f782345631f8e945967f2ab0d83b75c81ed2288f4e02002f3d72aeac0df2943e4586a7a7218c4db5c70cdf", 0x31}], 0x1}}], 0x2, 0x8080) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0xffd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x28, 0x8080) 2021/11/11 12:43:37 triaging input for call #1 sendmmsg$inet6 (new signal=2) [110158ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8769 #0 [110165ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [110165ms] <- socket$inet6_udplite=0x3 errno=14 cover=1646 #0 [110165ms] -> sendmmsg$inet6(0x3, 0x20000040, 0x2, 0x8080) #0 [110165ms] <- sendmmsg$inet6=0x2 errno=14 cover=1982 #0 [110166ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [110166ms] <- socket$inet6_udplite=0x4 errno=14 cover=1624 #0 [110166ms] -> sendmmsg$inet6(0x4, 0x20000040, 0x28, 0x8080) #0 [110168ms] <- sendmmsg$inet6=0x8 errno=14 cover=19996 12:43:37 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="103453ed59b6f782345631f8e945967f2ab0d83b75c81ed2288f4e02002f3d72aeac0df2943e4586a7a7218c4db5c70cdf", 0x31}], 0x1}}], 0x2, 0x8080) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0xffd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x28, 0x8080) 2021/11/11 12:43:37 result hanged=false: [110190ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8771 #0 [110199ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [110199ms] <- socket$inet6_udplite=0x3 errno=14 cover=1635 #0 [110200ms] -> sendmmsg$inet6(0x3, 0x20000040, 0x2, 0x8080) #0 [110200ms] <- sendmmsg$inet6=0x2 errno=14 cover=1994 #0 [110201ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [110201ms] <- socket$inet6_udplite=0x4 errno=14 cover=1635 #0 [110203ms] -> sendmmsg$inet6(0x4, 0x20000040, 0x28, 0x8080) #0 [110212ms] <- sendmmsg$inet6=0x8 errno=14 cover=24431 2021/11/11 12:43:37 result hanged=false: 12:43:37 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="103453ed59b6f782345631f8e945967f2ab0d83b75c81ed2288f4e02002f3d72aeac0df2943e4586a7a7218c4db5c70cdf", 0x31}], 0x1}}], 0x2, 0x8080) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0xffd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x28, 0x8080) [110234ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8773 #0 [110239ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [110241ms] <- socket$inet6_udplite=0x3 errno=14 cover=1657 #0 [110241ms] -> sendmmsg$inet6(0x3, 0x20000040, 0x2, 0x8080) #0 [110242ms] <- sendmmsg$inet6=0x2 errno=14 cover=5421 #0 [110242ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [110243ms] <- socket$inet6_udplite=0x4 errno=14 cover=1947 #0 [110243ms] -> sendmmsg$inet6(0x4, 0x20000040, 0x28, 0x8080) #0 [110245ms] <- sendmmsg$inet6=0x8 errno=14 cover=20142 2021/11/11 12:43:37 result hanged=false: 2021/11/11 12:43:37 added new input for call #1 sendmmsg$inet6 to corpus: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="103453ed59b6f782345631f8e945967f2ab0d83b75c81ed2288f4e02002f3d72aeac0df2943e4586a7a7218c4db5c70cdf", 0x31}], 0x1}}], 0x2, 0x8080) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0xffd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x28, 0x8080) 12:43:37 executing program 0: syz_io_uring_setup(0x73fa, &(0x7f00000004c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580)) [110279ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8775 #0 [110287ms] -> syz_io_uring_setup(0x73fa, 0x200004c0, 0x20ffc000, 0x20ffc000, 0x20000540, 0x20000580) #0 [110289ms] <- syz_io_uring_setup=0x3 errno=14 cover=21401 enabling collider #0 [110290ms] -> syz_io_uring_setup(0x73fa, 0x200004c0, 0x20ffc000, 0x20ffc000, 0x20000540, 0x20000580) #0 [110292ms] <- syz_io_uring_setup=0x3 errno=14 cover=28081 12:43:37 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x1}) fcntl$getflags(r0, 0x401) 2021/11/11 12:43:37 result hanged=false: [110307ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8777 2021/11/11 12:43:37 poll: candidates=8 inputs=0 signal=0 #0 [110317ms] -> creat(0x20000000, 0x0) #0 [110318ms] <- creat=0x3 errno=14 cover=6858 #0 [110319ms] -> fcntl$lock(0x3, 0x26, 0x20000600) #0 [110319ms] <- fcntl$lock=0x0 errno=14 cover=673 #0 [110319ms] -> fcntl$getflags(0x3, 0x401) #0 [110319ms] <- fcntl$getflags=0x2 errno=14 cover=71 enabling collider #0 [110319ms] -> creat(0x20000000, 0x0) #0 [110320ms] <- creat=0x3 errno=14 cover=4988 #0 [110321ms] -> fcntl$lock(0x3, 0x26, 0x20000600) #0 [110321ms] <- fcntl$lock=0x0 errno=14 cover=622 pthread_create failed (errno 11) 12:43:37 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x1}) fcntl$getflags(r0, 0x401) 2021/11/11 12:43:37 result hanged=false: 2021/11/11 12:43:37 #0: triaging type=7 2021/11/11 12:43:37 triaging input for call #2 fcntl$getflags (new signal=6) [110372ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8879 #0 [110379ms] -> creat(0x20000000, 0x0) #0 [110379ms] <- creat=0x3 errno=14 cover=6722 #0 [110380ms] -> fcntl$lock(0x3, 0x26, 0x20000600) #0 [110380ms] <- fcntl$lock=0x0 errno=14 cover=663 #0 [110380ms] -> fcntl$getflags(0x3, 0x401) #0 [110380ms] <- fcntl$getflags=0x2 errno=14 cover=71 12:43:37 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x1}) fcntl$getflags(r0, 0x401) 2021/11/11 12:43:37 result hanged=false: [110393ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8881 #0 [110408ms] -> creat(0x20000000, 0x0) #0 [110409ms] <- creat=0x3 errno=14 cover=6870 #0 [110412ms] -> fcntl$lock(0x3, 0x26, 0x20000600) #0 [110412ms] <- fcntl$lock=0x0 errno=14 cover=673 #0 [110413ms] -> fcntl$getflags(0x3, 0x401) #0 [110413ms] <- fcntl$getflags=0x2 errno=14 cover=71 12:43:37 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x1}) fcntl$getflags(r0, 0x401) [110431ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:37 result hanged=false: spawned worker pid 8883 #0 [110442ms] -> creat(0x20000000, 0x0) #0 [110442ms] <- creat=0x3 errno=14 cover=6672 #0 [110444ms] -> fcntl$lock(0x3, 0x26, 0x20000600) #0 [110444ms] <- fcntl$lock=0x0 errno=14 cover=673 #0 [110445ms] -> fcntl$getflags(0x3, 0x401) #0 [110445ms] <- fcntl$getflags=0x2 errno=14 cover=71 2021/11/11 12:43:37 result hanged=false: 2021/11/11 12:43:37 added new input for call #2 fcntl$getflags to corpus: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x1}) fcntl$getflags(r0, 0x401) 12:43:37 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x1}) fcntl$getflags(r0, 0x401) 2021/11/11 12:43:37 #0: triaging type=7 2021/11/11 12:43:37 triaging input for call #1 fcntl$lock (new signal=6) [110462ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8885 #0 [110467ms] -> creat(0x20000000, 0x0) #0 [110468ms] <- creat=0x3 errno=14 cover=6695 #0 [110468ms] -> fcntl$lock(0x3, 0x26, 0x20000600) #0 [110468ms] <- fcntl$lock=0x0 errno=14 cover=730 #0 [110468ms] -> fcntl$getflags(0x3, 0x401) #0 [110468ms] <- fcntl$getflags=0x2 errno=14 cover=71 12:43:37 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x1}) fcntl$getflags(r0, 0x401) 2021/11/11 12:43:37 result hanged=false: [110482ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8887 #0 [110489ms] -> creat(0x20000000, 0x0) #0 [110490ms] <- creat=0x3 errno=14 cover=6679 #0 [110490ms] -> fcntl$lock(0x3, 0x26, 0x20000600) #0 [110490ms] <- fcntl$lock=0x0 errno=14 cover=663 #0 [110491ms] -> fcntl$getflags(0x3, 0x401) #0 [110491ms] <- fcntl$getflags=0x2 errno=14 cover=71 12:43:37 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x1}) fcntl$getflags(r0, 0x401) 2021/11/11 12:43:37 result hanged=false: [110504ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8889 #0 [110510ms] -> creat(0x20000000, 0x0) #0 [110510ms] <- creat=0x3 errno=14 cover=6669 #0 [110511ms] -> fcntl$lock(0x3, 0x26, 0x20000600) #0 [110511ms] <- fcntl$lock=0x0 errno=14 cover=685 #0 [110511ms] -> fcntl$getflags(0x3, 0x401) #0 [110511ms] <- fcntl$getflags=0x2 errno=14 cover=71 2021/11/11 12:43:37 result hanged=false: 2021/11/11 12:43:37 added new input for call #1 fcntl$lock to corpus: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x1}) fcntl$getflags(r0, 0x401) 12:43:37 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000007c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [110526ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8891 #0 [110534ms] -> openat$sndtimer(0xffffffffffffff9c, 0x200007c0, 0x0) #0 [110534ms] <- openat$sndtimer=0x3 errno=14 cover=1367 #0 [110536ms] -> ioctl$SNDRV_TIMER_IOCTL_START(0x3, 0x54a0) #0 [110536ms] <- ioctl$SNDRV_TIMER_IOCTL_START=0xffffffffffffffff errno=77 cover=109 enabling collider #0 [110537ms] -> openat$sndtimer(0xffffffffffffff9c, 0x200007c0, 0x0) #0 [110537ms] <- openat$sndtimer=0x3 errno=14 cover=1442 #0 [110537ms] -> ioctl$SNDRV_TIMER_IOCTL_START(0x3, 0x54a0) #0 [110537ms] <- ioctl$SNDRV_TIMER_IOCTL_START=0xffffffffffffffff errno=9 cover=46 12:43:37 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000007c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2021/11/11 12:43:37 result hanged=false: 2021/11/11 12:43:37 #0: triaging type=7 2021/11/11 12:43:37 triaging input for call #1 ioctl$SNDRV_TIMER_IOCTL_START (new signal=4) [110558ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8893 #0 [110579ms] -> openat$sndtimer(0xffffffffffffff9c, 0x200007c0, 0x0) #0 [110580ms] <- openat$sndtimer=0x3 errno=14 cover=1378 #0 [110581ms] -> ioctl$SNDRV_TIMER_IOCTL_START(0x3, 0x54a0) #0 [110581ms] <- ioctl$SNDRV_TIMER_IOCTL_START=0xffffffffffffffff errno=77 cover=109 12:43:37 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000007c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2021/11/11 12:43:37 result hanged=false: [110600ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8895 #0 [110607ms] -> openat$sndtimer(0xffffffffffffff9c, 0x200007c0, 0x0) #0 [110607ms] <- openat$sndtimer=0x3 errno=14 cover=1368 #0 [110607ms] -> ioctl$SNDRV_TIMER_IOCTL_START(0x3, 0x54a0) #0 [110607ms] <- ioctl$SNDRV_TIMER_IOCTL_START=0xffffffffffffffff errno=77 cover=109 12:43:37 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000007c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2021/11/11 12:43:37 result hanged=false: [110620ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8897 #0 [110631ms] -> openat$sndtimer(0xffffffffffffff9c, 0x200007c0, 0x0) #0 [110631ms] <- openat$sndtimer=0x3 errno=14 cover=1366 #0 [110632ms] -> ioctl$SNDRV_TIMER_IOCTL_START(0x3, 0x54a0) #0 [110632ms] <- ioctl$SNDRV_TIMER_IOCTL_START=0xffffffffffffffff errno=77 cover=109 2021/11/11 12:43:37 result hanged=false: 2021/11/11 12:43:37 added new input for call #1 ioctl$SNDRV_TIMER_IOCTL_START to corpus: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000007c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 12:43:37 executing program 0: io_setup(0x3, &(0x7f0000000380)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000600)) [110661ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8899 #0 [110671ms] -> io_setup(0x3, 0x20000380) #0 [110672ms] <- io_setup=0x0 errno=14 cover=3491 #0 [110672ms] -> io_getevents(0x7fb07100b000, 0x0, 0x0, 0x0, 0x20000600) #0 [110672ms] <- io_getevents=0x0 errno=14 cover=388 enabling collider #0 [110673ms] -> io_setup(0x3, 0x20000380) #0 [110673ms] <- io_setup=0xffffffffffffffff errno=22 cover=40 12:43:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) 2021/11/11 12:43:37 result hanged=false: [110703ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8901 #0 [110712ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [110714ms] <- socket$inet_tcp=0x3 errno=14 cover=1798 #0 [110714ms] -> getsockopt$inet_int(0x3, 0x0, 0x14, 0x20000a40, 0x20000a80) #0 [110714ms] <- getsockopt$inet_int=0x0 errno=14 cover=160 enabling collider #0 [110716ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [110717ms] <- socket$inet_tcp=0x3 errno=14 cover=1811 12:43:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) 2021/11/11 12:43:37 result hanged=false: 2021/11/11 12:43:37 #0: triaging type=7 2021/11/11 12:43:37 triaging input for call #1 getsockopt$inet_int (new signal=3) [110736ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8903 #0 [110746ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [110748ms] <- socket$inet_tcp=0x3 errno=14 cover=5609 #0 [110749ms] -> getsockopt$inet_int(0x3, 0x0, 0x14, 0x20000a40, 0x20000a80) #0 [110749ms] <- getsockopt$inet_int=0x0 errno=14 cover=174 12:43:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) 2021/11/11 12:43:37 result hanged=false: [110771ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8905 #0 [110778ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [110778ms] <- socket$inet_tcp=0x3 errno=14 cover=1744 #0 [110779ms] -> getsockopt$inet_int(0x3, 0x0, 0x14, 0x20000a40, 0x20000a80) #0 [110779ms] <- getsockopt$inet_int=0x0 errno=14 cover=160 12:43:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) 2021/11/11 12:43:37 result hanged=false: [110792ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8907 #0 [110797ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [110803ms] <- socket$inet_tcp=0x3 errno=14 cover=5854 #0 [110809ms] -> getsockopt$inet_int(0x3, 0x0, 0x14, 0x20000a40, 0x20000a80) #0 [110809ms] <- getsockopt$inet_int=0x0 errno=14 cover=160 2021/11/11 12:43:37 result hanged=false: 2021/11/11 12:43:37 added new input for call #1 getsockopt$inet_int to corpus: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) 12:43:37 executing program 0: setgroups(0x0, 0x0) setgroups(0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0]) [110832ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8909 #0 [110838ms] -> setgroups(0x0, 0x0) #0 [110838ms] <- setgroups=0x0 errno=14 cover=453 #0 [110838ms] -> setgroups(0x3, 0x20000100) #0 [110838ms] <- setgroups=0x0 errno=14 cover=570 enabling collider #0 [110838ms] -> setgroups(0x0, 0x0) #0 [110838ms] <- setgroups=0x0 errno=14 cover=465 12:43:37 executing program 0: fsopen(&(0x7f0000000000)='proc\x00', 0x1) 2021/11/11 12:43:37 result hanged=false: [110850ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8911 #0 [110855ms] -> fsopen(0x20000000, 0x1) #0 [110855ms] <- fsopen=0x3 errno=14 cover=949 enabling collider #0 [110856ms] -> fsopen(0x20000000, 0x1) #0 [110856ms] <- fsopen=0x3 errno=14 cover=949 12:43:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) 2021/11/11 12:43:37 result hanged=false: [110868ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8913 #0 [110874ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [110874ms] <- socket$inet_tcp=0x3 errno=14 cover=1711 #0 [110874ms] -> getsockopt$inet_tcp_int(0x3, 0x6, 0x6, 0x20000d00, 0x20000d40) #0 [110874ms] <- getsockopt$inet_tcp_int=0x0 errno=14 cover=120 enabling collider #0 [110875ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [110875ms] <- socket$inet_tcp=0x3 errno=14 cover=1721 12:43:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) 2021/11/11 12:43:37 result hanged=false: 2021/11/11 12:43:37 #0: triaging type=7 2021/11/11 12:43:37 triaging input for call #1 getsockopt$inet_tcp_int (new signal=5) [110886ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8915 #0 [110893ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [110895ms] <- socket$inet_tcp=0x3 errno=14 cover=1744 #0 [110897ms] -> getsockopt$inet_tcp_int(0x3, 0x6, 0x6, 0x20000d00, 0x20000d40) #0 [110899ms] <- getsockopt$inet_tcp_int=0x0 errno=14 cover=120 12:43:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) 2021/11/11 12:43:37 result hanged=false: [110921ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8917 #0 [110928ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [110928ms] <- socket$inet_tcp=0x3 errno=14 cover=1733 #0 [110931ms] -> getsockopt$inet_tcp_int(0x3, 0x6, 0x6, 0x20000d00, 0x20000d40) #0 [110931ms] <- getsockopt$inet_tcp_int=0x0 errno=14 cover=120 2021/11/11 12:43:37 result hanged=false: 12:43:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) [110951ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8919 #0 [110962ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [110966ms] <- socket$inet_tcp=0x3 errno=14 cover=5478 #0 [110967ms] -> getsockopt$inet_tcp_int(0x3, 0x6, 0x6, 0x20000d00, 0x20000d40) #0 [110968ms] <- getsockopt$inet_tcp_int=0x0 errno=14 cover=120 2021/11/11 12:43:37 result hanged=false: 2021/11/11 12:43:37 added new input for call #1 getsockopt$inet_tcp_int to corpus: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) 12:43:37 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) [110985ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8921 #0 [110991ms] -> openat$procfs(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [110991ms] <- openat$procfs=0x3 errno=14 cover=2209 enabling collider #0 [110992ms] -> openat$procfs(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [110992ms] <- openat$procfs=0x3 errno=14 cover=1464 2021/11/11 12:43:37 result hanged=false: 12:43:37 executing program 0: r0 = creat(&(0x7f0000000880)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) [111005ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:37 poll: candidates=8 inputs=0 signal=0 spawned worker pid 8923 #0 [111011ms] -> creat(0x20000880, 0x0) #0 [111011ms] <- creat=0x3 errno=14 cover=6700 #0 [111012ms] -> ioctl$SNDRV_TIMER_IOCTL_STATUS64(0x3, 0x80605414, 0x0) #0 [111012ms] <- ioctl$SNDRV_TIMER_IOCTL_STATUS64=0xffffffffffffffff errno=25 cover=107 enabling collider #0 [111012ms] -> creat(0x20000880, 0x0) #0 [111012ms] <- creat=0x3 errno=14 cover=4911 2021/11/11 12:43:38 result hanged=false: 12:43:38 executing program 0: r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0xc000) shmctl$IPC_RMID(r0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7, 0xe, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [111029ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 8925 #0 [111035ms] -> shmget(0x798dd816, 0x4000, 0x200, 0x20ffb000) #0 [111035ms] <- shmget=0x8 errno=14 cover=1234 #0 [111036ms] -> shmat(0x8, 0x20ff9000, 0xc000) #0 [111036ms] <- shmat=0x20ff9000 errno=14 cover=2402 #0 [111037ms] -> shmctl$IPC_RMID(0x8, 0x0) #0 [111037ms] <- shmctl$IPC_RMID=0x0 errno=14 cover=262 #0 [111039ms] -> mbind(0x20ffa000, 0x3000, 0x0, 0x20000000, 0xe, 0x0) #0 [111039ms] <- mbind=0xffffffffffffffff errno=22 cover=87 #0 [111039ms] -> remap_file_pages(0x20ff9000, 0x4000, 0x0, 0x0, 0x0) #0 [111040ms] <- remap_file_pages=0xffffffffffffffff errno=22 cover=2936 enabling collider #0 [111041ms] -> shmget(0x798dd816, 0x4000, 0x200, 0x20ffb000) #0 [111041ms] <- shmget=0x9 errno=14 cover=1195 #0 [111048ms] -> shmat(0x9, 0x20ff9000, 0xc000) #0 [111048ms] <- shmat=0x20ff9000 errno=14 cover=1004 pthread_create failed (errno 11) 2021/11/11 12:43:38 result hanged=false: 2021/11/11 12:43:38 #0: triaging type=7 12:43:38 executing program 0: r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0xc000) shmctl$IPC_RMID(r0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7, 0xe, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2021/11/11 12:43:38 triaging input for call #4 remap_file_pages (new signal=33) [111107ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9027 #0 [111117ms] -> shmget(0x798dd816, 0x4000, 0x200, 0x20ffb000) #0 [111117ms] <- shmget=0x9 errno=14 cover=116 #0 [111118ms] -> shmat(0x9, 0x20ff9000, 0xc000) #0 [111118ms] <- shmat=0x20ff9000 errno=14 cover=2138 #0 [111119ms] -> shmctl$IPC_RMID(0x9, 0x0) #0 [111119ms] <- shmctl$IPC_RMID=0x0 errno=14 cover=155 #0 [111119ms] -> mbind(0x20ffa000, 0x3000, 0x0, 0x20000000, 0xe, 0x0) #0 [111119ms] <- mbind=0xffffffffffffffff errno=22 cover=87 #0 [111119ms] -> remap_file_pages(0x20ff9000, 0x4000, 0x0, 0x0, 0x0) #0 [111121ms] <- remap_file_pages=0xffffffffffffffff errno=22 cover=3960 12:43:38 executing program 0: r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0xc000) shmctl$IPC_RMID(r0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7, 0xe, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2021/11/11 12:43:38 result hanged=false: [111146ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9029 #0 [111157ms] -> shmget(0x798dd816, 0x4000, 0x200, 0x20ffb000) #0 [111158ms] <- shmget=0xa errno=14 cover=1206 #0 [111162ms] -> shmat(0xa, 0x20ff9000, 0xc000) #0 [111162ms] <- shmat=0x20ff9000 errno=14 cover=2026 #0 [111163ms] -> shmctl$IPC_RMID(0xa, 0x0) #0 [111163ms] <- shmctl$IPC_RMID=0x0 errno=14 cover=155 #0 [111164ms] -> mbind(0x20ffa000, 0x3000, 0x0, 0x20000000, 0xe, 0x0) #0 [111164ms] <- mbind=0xffffffffffffffff errno=22 cover=87 #0 [111165ms] -> remap_file_pages(0x20ff9000, 0x4000, 0x0, 0x0, 0x0) #0 [111165ms] <- remap_file_pages=0xffffffffffffffff errno=22 cover=2036 12:43:38 executing program 0: r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0xc000) shmctl$IPC_RMID(r0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7, 0xe, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2021/11/11 12:43:38 result hanged=false: [111194ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9031 #0 [111204ms] -> shmget(0x798dd816, 0x4000, 0x200, 0x20ffb000) #0 [111204ms] <- shmget=0xb errno=14 cover=1162 #0 [111205ms] -> shmat(0xb, 0x20ff9000, 0xc000) #0 [111205ms] <- shmat=0x20ff9000 errno=14 cover=2217 #0 [111205ms] -> shmctl$IPC_RMID(0xb, 0x0) #0 [111205ms] <- shmctl$IPC_RMID=0x0 errno=14 cover=155 #0 [111206ms] -> mbind(0x20ffa000, 0x3000, 0x0, 0x20000000, 0xe, 0x0) #0 [111206ms] <- mbind=0xffffffffffffffff errno=22 cover=87 #0 [111206ms] -> remap_file_pages(0x20ff9000, 0x4000, 0x0, 0x0, 0x0) #0 [111206ms] <- remap_file_pages=0xffffffffffffffff errno=22 cover=2045 2021/11/11 12:43:38 result hanged=false: 2021/11/11 12:43:38 added new input for call #4 remap_file_pages to corpus: r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0xc000) shmctl$IPC_RMID(r0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7, 0xe, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 12:43:38 executing program 0: r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0xc000) shmctl$IPC_RMID(r0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7, 0xe, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2021/11/11 12:43:38 #0: triaging type=7 2021/11/11 12:43:38 triaging input for call #3 mbind (new signal=2) [111238ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9033 #0 [111247ms] -> shmget(0x798dd816, 0x4000, 0x200, 0x20ffb000) #0 [111248ms] <- shmget=0xc errno=14 cover=1162 #0 [111248ms] -> shmat(0xc, 0x20ff9000, 0xc000) #0 [111249ms] <- shmat=0x20ff9000 errno=14 cover=2130 #0 [111249ms] -> shmctl$IPC_RMID(0xc, 0x0) #0 [111250ms] <- shmctl$IPC_RMID=0x0 errno=14 cover=155 #0 [111250ms] -> mbind(0x20ffa000, 0x3000, 0x0, 0x20000000, 0xe, 0x0) #0 [111250ms] <- mbind=0xffffffffffffffff errno=22 cover=87 #0 [111251ms] -> remap_file_pages(0x20ff9000, 0x4000, 0x0, 0x0, 0x0) #0 [111251ms] <- remap_file_pages=0xffffffffffffffff errno=22 cover=1986 12:43:38 executing program 0: r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0xc000) shmctl$IPC_RMID(r0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7, 0xe, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2021/11/11 12:43:38 result hanged=false: [111272ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9035 #0 [111282ms] -> shmget(0x798dd816, 0x4000, 0x200, 0x20ffb000) #0 [111282ms] <- shmget=0xd errno=14 cover=1195 #0 [111284ms] -> shmat(0xd, 0x20ff9000, 0xc000) #0 [111284ms] <- shmat=0x20ff9000 errno=14 cover=2222 #0 [111285ms] -> shmctl$IPC_RMID(0xd, 0x0) #0 [111285ms] <- shmctl$IPC_RMID=0x0 errno=14 cover=155 #0 [111285ms] -> mbind(0x20ffa000, 0x3000, 0x0, 0x20000000, 0xe, 0x0) #0 [111285ms] <- mbind=0xffffffffffffffff errno=22 cover=87 #0 [111285ms] -> remap_file_pages(0x20ff9000, 0x4000, 0x0, 0x0, 0x0) #0 [111286ms] <- remap_file_pages=0xffffffffffffffff errno=22 cover=2071 2021/11/11 12:43:38 result hanged=false: 12:43:38 executing program 0: r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0xc000) shmctl$IPC_RMID(r0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7, 0xe, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [111309ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9037 #0 [111318ms] -> shmget(0x798dd816, 0x4000, 0x200, 0x20ffb000) #0 [111319ms] <- shmget=0xe errno=14 cover=1206 #0 [111320ms] -> shmat(0xe, 0x20ff9000, 0xc000) #0 [111321ms] <- shmat=0x20ff9000 errno=14 cover=2175 #0 [111321ms] -> shmctl$IPC_RMID(0xe, 0x0) #0 [111321ms] <- shmctl$IPC_RMID=0x0 errno=14 cover=155 #0 [111322ms] -> mbind(0x20ffa000, 0x3000, 0x0, 0x20000000, 0xe, 0x0) #0 [111322ms] <- mbind=0xffffffffffffffff errno=22 cover=87 #0 [111323ms] -> remap_file_pages(0x20ff9000, 0x4000, 0x0, 0x0, 0x0) #0 [111323ms] <- remap_file_pages=0xffffffffffffffff errno=22 cover=2084 2021/11/11 12:43:38 result hanged=false: 2021/11/11 12:43:38 added new input for call #3 mbind to corpus: r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0xc000) shmctl$IPC_RMID(r0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7, 0xe, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2021/11/11 12:43:38 #0: triaging type=7 2021/11/11 12:43:38 triaging input for call #2 shmctl$IPC_RMID (new signal=9) 12:43:38 executing program 0: r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0xc000) shmctl$IPC_RMID(r0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7, 0xe, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [111348ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9039 #0 [111357ms] -> shmget(0x798dd816, 0x4000, 0x200, 0x20ffb000) #0 [111357ms] <- shmget=0xf errno=14 cover=1208 #0 [111359ms] -> shmat(0xf, 0x20ff9000, 0xc000) #0 [111359ms] <- shmat=0x20ff9000 errno=14 cover=2007 #0 [111360ms] -> shmctl$IPC_RMID(0xf, 0x0) #0 [111360ms] <- shmctl$IPC_RMID=0x0 errno=14 cover=155 #0 [111362ms] -> mbind(0x20ffa000, 0x3000, 0x0, 0x20000000, 0xe, 0x0) #0 [111362ms] <- mbind=0xffffffffffffffff errno=22 cover=87 #0 [111363ms] -> remap_file_pages(0x20ff9000, 0x4000, 0x0, 0x0, 0x0) #0 [111364ms] <- remap_file_pages=0xffffffffffffffff errno=22 cover=2101 12:43:38 executing program 0: r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0xc000) shmctl$IPC_RMID(r0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7, 0xe, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2021/11/11 12:43:38 result hanged=false: [111388ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9041 #0 [111397ms] -> shmget(0x798dd816, 0x4000, 0x200, 0x20ffb000) #0 [111398ms] <- shmget=0x10 errno=14 cover=1184 #0 [111400ms] -> shmat(0x10, 0x20ff9000, 0xc000) #0 [111400ms] <- shmat=0x20ff9000 errno=14 cover=1982 #0 [111401ms] -> shmctl$IPC_RMID(0x10, 0x0) #0 [111401ms] <- shmctl$IPC_RMID=0x0 errno=14 cover=157 #0 [111402ms] -> mbind(0x20ffa000, 0x3000, 0x0, 0x20000000, 0xe, 0x0) #0 [111403ms] <- mbind=0xffffffffffffffff errno=22 cover=87 #0 [111404ms] -> remap_file_pages(0x20ff9000, 0x4000, 0x0, 0x0, 0x0) #0 [111405ms] <- remap_file_pages=0xffffffffffffffff errno=22 cover=2114 12:43:38 executing program 0: r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0xc000) shmctl$IPC_RMID(r0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7, 0xe, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2021/11/11 12:43:38 result hanged=false: [111425ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9043 #0 [111435ms] -> shmget(0x798dd816, 0x4000, 0x200, 0x20ffb000) #0 [111436ms] <- shmget=0x11 errno=14 cover=1208 #0 [111437ms] -> shmat(0x11, 0x20ff9000, 0xc000) #0 [111437ms] <- shmat=0x20ff9000 errno=14 cover=2135 #0 [111439ms] -> shmctl$IPC_RMID(0x11, 0x0) #0 [111439ms] <- shmctl$IPC_RMID=0x0 errno=14 cover=157 #0 [111440ms] -> mbind(0x20ffa000, 0x3000, 0x0, 0x20000000, 0xe, 0x0) #0 [111441ms] <- mbind=0xffffffffffffffff errno=22 cover=87 #0 [111442ms] -> remap_file_pages(0x20ff9000, 0x4000, 0x0, 0x0, 0x0) #0 [111443ms] <- remap_file_pages=0xffffffffffffffff errno=22 cover=2127 2021/11/11 12:43:38 result hanged=false: 2021/11/11 12:43:38 added new input for call #2 shmctl$IPC_RMID to corpus: r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0xc000) shmctl$IPC_RMID(r0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7, 0xe, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 12:43:38 executing program 0: r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0xc000) shmctl$IPC_RMID(r0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7, 0xe, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2021/11/11 12:43:38 #0: triaging type=7 2021/11/11 12:43:38 triaging input for call #1 shmat (new signal=2) [111470ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9045 #0 [111478ms] -> shmget(0x798dd816, 0x4000, 0x200, 0x20ffb000) #0 [111483ms] <- shmget=0x12 errno=14 cover=1228 #0 [111485ms] -> shmat(0x12, 0x20ff9000, 0xc000) #0 [111485ms] <- shmat=0x20ff9000 errno=14 cover=2080 #0 [111485ms] -> shmctl$IPC_RMID(0x12, 0x0) #0 [111485ms] <- shmctl$IPC_RMID=0x0 errno=14 cover=155 #0 [111486ms] -> mbind(0x20ffa000, 0x3000, 0x0, 0x20000000, 0xe, 0x0) #0 [111486ms] <- mbind=0xffffffffffffffff errno=22 cover=87 #0 [111486ms] -> remap_file_pages(0x20ff9000, 0x4000, 0x0, 0x0, 0x0) #0 [111487ms] <- remap_file_pages=0xffffffffffffffff errno=22 cover=2075 2021/11/11 12:43:38 result hanged=false: 12:43:38 executing program 0: r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0xc000) shmctl$IPC_RMID(r0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7, 0xe, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [111508ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9047 #0 [111517ms] -> shmget(0x798dd816, 0x4000, 0x200, 0x20ffb000) #0 [111517ms] <- shmget=0x13 errno=14 cover=1173 #0 [111518ms] -> shmat(0x13, 0x20ff9000, 0xc000) #0 [111519ms] <- shmat=0x20ff9000 errno=14 cover=2175 #0 [111520ms] -> shmctl$IPC_RMID(0x13, 0x0) #0 [111520ms] <- shmctl$IPC_RMID=0x0 errno=14 cover=155 #0 [111520ms] -> mbind(0x20ffa000, 0x3000, 0x0, 0x20000000, 0xe, 0x0) #0 [111520ms] <- mbind=0xffffffffffffffff errno=22 cover=87 #0 [111520ms] -> remap_file_pages(0x20ff9000, 0x4000, 0x0, 0x0, 0x0) #0 [111522ms] <- remap_file_pages=0xffffffffffffffff errno=22 cover=2191 12:43:38 executing program 0: r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0xc000) shmctl$IPC_RMID(r0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7, 0xe, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2021/11/11 12:43:38 result hanged=false: [111545ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9049 #0 [111554ms] -> shmget(0x798dd816, 0x4000, 0x200, 0x20ffb000) #0 [111555ms] <- shmget=0x14 errno=14 cover=1195 #0 [111556ms] -> shmat(0x14, 0x20ff9000, 0xc000) #0 [111557ms] <- shmat=0x20ff9000 errno=14 cover=1901 #0 [111557ms] -> shmctl$IPC_RMID(0x14, 0x0) #0 [111557ms] <- shmctl$IPC_RMID=0x0 errno=14 cover=155 #0 [111557ms] -> mbind(0x20ffa000, 0x3000, 0x0, 0x20000000, 0xe, 0x0) #0 [111557ms] <- mbind=0xffffffffffffffff errno=22 cover=87 #0 [111558ms] -> remap_file_pages(0x20ff9000, 0x4000, 0x0, 0x0, 0x0) #0 [111558ms] <- remap_file_pages=0xffffffffffffffff errno=22 cover=2173 2021/11/11 12:43:38 result hanged=false: 2021/11/11 12:43:38 added new input for call #1 shmat to corpus: r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0xc000) shmctl$IPC_RMID(r0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7, 0xe, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 12:43:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0xfffffffffffffffd, &(0x7f00000011c0)) [111591ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9051 #0 [111600ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [111601ms] <- socket$inet_tcp=0x3 errno=14 cover=1766 #0 [111602ms] -> getsockopt$inet_mtu(0x3, 0x0, 0xa, 0xffffffff81000000, 0x200011c0) #0 [111602ms] <- getsockopt$inet_mtu=0x0 errno=14 cover=151 enabling collider #0 [111602ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [111602ms] <- socket$inet_tcp=0x3 errno=14 cover=1765 #0 [111602ms] -> getsockopt$inet_mtu(0x3, 0x0, 0xa, 0xffffffff81000000, 0x200011c0) #0 [111602ms] <- getsockopt$inet_mtu=0xffffffffffffffff errno=9 cover=50 2021/11/11 12:43:38 result hanged=false: 12:43:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0xfffffffffffffffd, &(0x7f00000011c0)) 2021/11/11 12:43:38 #0: triaging type=7 2021/11/11 12:43:38 triaging input for call #1 getsockopt$inet_mtu (new signal=3) [111623ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 [ 3017.085473] INFO: task syz-executor.0:154483 blocked for more than 143 seconds. [ 3017.087397] Not tainted 5.10.78 #1 [ 3017.088391] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3017.090068] task:syz-executor.0 state:D stack:27904 pid:154483 ppid:152278 flags:0x00000004 spawned worker pid 9053 [ 3017.091892] Call Trace: [ 3017.092853] __schedule+0x84b/0x1e90 [ 3017.093680] ? io_schedule_timeout+0x150/0x150 [ 3017.094681] schedule+0xcb/0x270 [ 3017.095419] schedule_preempt_disabled+0xc/0x20 [ 3017.096428] __mutex_lock+0x821/0x1310 [ 3017.097276] ? perf_event_ctx_lock_nested+0x236/0x480 #0 [111636ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [111636ms] <- socket$inet_tcp=0x3 errno=14 cover=1744 [ 3017.098383] ? mutex_lock_io_nested+0x11b0/0x11b0 [ 3017.099732] ? find_held_lock+0x2c/0x110 [ 3017.100661] ? perf_event_ctx_lock_nested+0x1fc/0x480 [ 3017.101770] ? mutex_lock_io_nested+0x11b0/0x11b0 #0 [111638ms] -> getsockopt$inet_mtu(0x3, 0x0, 0xa, 0xffffffff81000000, 0x200011c0) #0 [111638ms] <- getsockopt$inet_mtu=0x0 errno=14 cover=151 [ 3017.103313] ? find_held_lock+0x2c/0x110 [ 3017.104741] ? perf_event_ctx_lock_nested+0x236/0x480 [ 3017.106275] perf_event_ctx_lock_nested+0x236/0x480 [ 3017.107356] ? __perf_pmu_sched_task+0x360/0x360 [ 3017.108402] perf_event_release_kernel+0x3a6/0xc20 [ 3017.109457] ? fsnotify_first_mark+0x1f0/0x1f0 [ 3017.110447] ? perf_remove_from_context+0x1f0/0x1f0 [ 3017.111514] ? task_work_run+0xbc/0x1a0 [ 3017.112394] perf_release+0x33/0x40 [ 3017.113160] __fput+0x285/0x970 [ 3017.113873] ? perf_event_release_kernel+0xc20/0xc20 [ 3017.114972] task_work_run+0xe2/0x1a0 [ 3017.115804] exit_to_user_mode_prepare+0x155/0x160 [ 3017.116859] syscall_exit_to_user_mode+0x38/0x230 [ 3017.117884] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3017.118982] RIP: 0033:0x7fdb502da72b 12:43:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0xfffffffffffffffd, &(0x7f00000011c0)) 2021/11/11 12:43:38 result hanged=false: [ 3017.119797] RSP: 002b:00007ffd85590850 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 3017.121729] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00007fdb502da72b [ 3017.123276] RDX: ffffffffffffffbc RSI: 0000000000000080 RDI: 0000000000000005 [ 3017.124825] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fdb50440fe8 [111664ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 [ 3017.126338] R10: 00007ffd85590940 R11: 0000000000000293 R12: 00000000002b8d63 [ 3017.128154] R13: 00000000000003e8 R14: 00007fdb5043af60 R15: 00000000002b8d48 [ 3017.129766] INFO: task syz-executor.0:154484 blocked for more than 143 seconds. [ 3017.131350] Not tainted 5.10.78 #1 [ 3017.132216] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3017.133915] task:syz-executor.0 state:D stack:28864 pid:154484 ppid:152278 flags:0x00004004 [ 3017.135706] Call Trace: [ 3017.136277] __schedule+0x84b/0x1e90 [ 3017.137093] ? io_schedule_timeout+0x150/0x150 [ 3017.138080] schedule+0xcb/0x270 spawned worker pid 9055 #0 [111677ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [111677ms] <- socket$inet_tcp=0x3 errno=14 cover=1722 #0 [111678ms] -> getsockopt$inet_mtu(0x3, 0x0, 0xa, 0xffffffff81000000, 0x200011c0) #0 [111678ms] <- getsockopt$inet_mtu=0x0 errno=14 cover=151 [ 3017.138815] schedule_preempt_disabled+0xc/0x20 [ 3017.140112] __mutex_lock+0x821/0x1310 [ 3017.140990] ? __do_sys_perf_event_open+0x1234/0x2c80 [ 3017.142100] ? mutex_lock_io_nested+0x11b0/0x11b0 [ 3017.143127] ? find_held_lock+0x2c/0x110 [ 3017.144008] ? security_capable+0x95/0xc0 [ 3017.144934] ? __do_sys_perf_event_open+0x1234/0x2c80 [ 3017.146027] __do_sys_perf_event_open+0x1234/0x2c80 [ 3017.147359] ? perf_event_set_output+0x4c0/0x4c0 [ 3017.148475] ? vfs_write+0x7d7/0xa50 [ 3017.149302] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 3017.150417] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3017.151519] do_syscall_64+0x33/0x40 [ 3017.152315] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3017.153448] RIP: 0033:0x7fdb50327b19 [ 3017.154214] RSP: 002b:00007fdb4d89d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3017.155848] RAX: ffffffffffffffda RBX: 00007fdb5043af60 RCX: 00007fdb50327b19 [ 3017.157372] RDX: 0000000000000000 RSI: 0000000000000619 RDI: 0000000020001d80 [ 3017.158887] RBP: 00007fdb50381f6d R08: 0000000000000000 R09: 0000000000000000 [ 3017.160438] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 3017.161966] R13: 00007ffd855907ef R14: 00007fdb4d89d300 R15: 0000000000022000 [ 3017.163520] [ 3017.163520] Showing all locks held in the system: [ 3017.164851] 1 lock held by khungtaskd/22: [ 3017.165725] #0: ffffffff84df6720 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x269 12:43:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0xfffffffffffffffd, &(0x7f00000011c0)) 2021/11/11 12:43:38 result hanged=false: [ 3017.167693] 1 lock held by in:imklog/179: [ 3017.168752] #0: ffff88800c9c0ff0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 3017.170560] 1 lock held by syz-executor.0/154483: [ 3017.171611] #0: ffff88800d7efcb0 (&ctx->mutex){+.+.}-{3:3}, at: perf_event_ctx_lock_nested+0x236/0x480 [ 3017.173694] 3 locks held by syz-executor.0/154484: [ 3017.174749] #0: ffff88802df2acd8 (&sig->exec_update_lock){++++}-{3:3}, at: __do_sys_perf_event_open+0xfbf/0x2c80 [ 3017.176991] #1: ffff88800d7efcb0 (&ctx->mutex){+.+.}-{3:3}, at: __do_sys_perf_event_open+0x1227/0x2c80 [ 3017.179046] #2: ffff88800d7efcb0 (&ctx->mutex/1){+.+.}-{3:3}, at: __do_sys_perf_event_open+0x1234/0x2c80 [ 3017.181194] 2 locks held by systemd-udevd/154938: [ 3017.182220] [ 3017.182590] ============================================= [ 3017.182590] [111711ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9057 #0 [111727ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [111728ms] <- socket$inet_tcp=0x3 errno=14 cover=1722 #0 [111728ms] -> getsockopt$inet_mtu(0x3, 0x0, 0xa, 0xffffffff81000000, 0x200011c0) #0 [111728ms] <- getsockopt$inet_mtu=0x0 errno=14 cover=151 2021/11/11 12:43:38 result hanged=false: 2021/11/11 12:43:38 added new input for call #1 getsockopt$inet_mtu to corpus: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0xfffffffffffffffd, &(0x7f00000011c0)) 12:43:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) [111753ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9059 #0 [111762ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [111767ms] <- perf_event_open=0x3 errno=14 cover=6313 #0 [111771ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [111772ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12226 #0 [111775ms] -> mount(0x0, 0x20000080, 0x200000c0, 0x0, 0x0) #0 [111780ms] <- mount=0x0 errno=14 cover=13157 #0 [111783ms] -> ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) #0 [111783ms] <- ioctl$F2FS_IOC_GET_FEATURES=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [111794ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [111795ms] <- perf_event_open=0x3 errno=14 cover=6804 #0 [111795ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [111796ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1369 pthread_create failed (errno 11) 12:43:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) 2021/11/11 12:43:38 result hanged=false: 2021/11/11 12:43:38 #0: triaging type=7 2021/11/11 12:43:38 triaging input for call #2 mount (new signal=2) umount(./979/mnt) [111868ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9161 #0 [111877ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [111877ms] <- perf_event_open=0x3 errno=14 cover=6482 #0 [111878ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [111879ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12118 #0 [111880ms] -> mount(0x0, 0x20000080, 0x200000c0, 0x0, 0x0) #0 [111883ms] <- mount=0x0 errno=14 cover=12998 #0 [111884ms] -> ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) #0 [111885ms] <- ioctl$F2FS_IOC_GET_FEATURES=0xffffffffffffffff errno=9 cover=45 12:43:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) 2021/11/11 12:43:38 result hanged=false: umount(./980/mnt) [111915ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9163 #0 [111925ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [111926ms] <- perf_event_open=0x3 errno=14 cover=6740 #0 [111927ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [111928ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12160 #0 [111929ms] -> mount(0x0, 0x20000080, 0x200000c0, 0x0, 0x0) #0 [111932ms] <- mount=0x0 errno=14 cover=13102 #0 [111933ms] -> ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) #0 [111933ms] <- ioctl$F2FS_IOC_GET_FEATURES=0xffffffffffffffff errno=9 cover=45 12:43:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) 2021/11/11 12:43:38 result hanged=false: umount(./981/mnt) [111966ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9165 #0 [111975ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [111975ms] <- perf_event_open=0x3 errno=14 cover=6517 #0 [111976ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [111977ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12154 #0 [111978ms] -> mount(0x0, 0x20000080, 0x200000c0, 0x0, 0x0) #0 [111981ms] <- mount=0x0 errno=14 cover=13223 #0 [111983ms] -> ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) #0 [111983ms] <- ioctl$F2FS_IOC_GET_FEATURES=0xffffffffffffffff errno=9 cover=45 2021/11/11 12:43:38 result hanged=false: 2021/11/11 12:43:38 added new input for call #2 mount to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) umount(./982/mnt) 12:43:39 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f000000b480)='/proc/cgroups\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) readlinkat(r0, &(0x7f000000c380)='\x00', &(0x7f000000c3c0)=""/171, 0xab) [112025ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9167 #0 [112034ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [112038ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=18105 #0 [112039ms] -> openat$procfs(0xffffffffffffff9c, 0x2000b480, 0x0, 0x0) #0 [112040ms] <- openat$procfs=0x3 errno=14 cover=1393 #0 [112041ms] -> syz_genetlink_get_family_id$nl80211(0x2000b500, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [112042ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11378 #0 [112042ms] -> readlinkat(0x3, 0x2000c380, 0x2000c3c0, 0xab) #0 [112043ms] <- readlinkat=0xffffffffffffffff errno=2 cover=374 enabling collider #0 [112043ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [112044ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11473 #0 [112045ms] -> openat$procfs(0xffffffffffffff9c, 0x2000b480, 0x0, 0x0) #0 [112045ms] <- openat$procfs=0x3 errno=14 cover=1393 pthread_create failed (errno 11) 12:43:39 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f000000b480)='/proc/cgroups\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) readlinkat(r0, &(0x7f000000c380)='\x00', &(0x7f000000c3c0)=""/171, 0xab) 2021/11/11 12:43:39 result hanged=false: 2021/11/11 12:43:39 #0: triaging type=7 2021/11/11 12:43:39 triaging input for call #3 readlinkat (new signal=24) [112101ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9269 #0 [112111ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [112113ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12939 #0 [112115ms] -> openat$procfs(0xffffffffffffff9c, 0x2000b480, 0x0, 0x0) #0 [112116ms] <- openat$procfs=0x3 errno=14 cover=1416 #0 [112117ms] -> syz_genetlink_get_family_id$nl80211(0x2000b500, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [112118ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11437 #0 [112120ms] -> readlinkat(0x3, 0x2000c380, 0x2000c3c0, 0xab) #0 [112120ms] <- readlinkat=0xffffffffffffffff errno=2 cover=364 2021/11/11 12:43:39 result hanged=false: 12:43:39 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f000000b480)='/proc/cgroups\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) readlinkat(r0, &(0x7f000000c380)='\x00', &(0x7f000000c3c0)=""/171, 0xab) [112142ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9271 #0 [112151ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [112152ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12965 #0 [112155ms] -> openat$procfs(0xffffffffffffff9c, 0x2000b480, 0x0, 0x0) #0 [112156ms] <- openat$procfs=0x3 errno=14 cover=1524 #0 [112156ms] -> syz_genetlink_get_family_id$nl80211(0x2000b500, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [112157ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11378 #0 [112158ms] -> readlinkat(0x3, 0x2000c380, 0x2000c3c0, 0xab) #0 [112158ms] <- readlinkat=0xffffffffffffffff errno=2 cover=363 12:43:39 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f000000b480)='/proc/cgroups\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) readlinkat(r0, &(0x7f000000c380)='\x00', &(0x7f000000c3c0)=""/171, 0xab) 2021/11/11 12:43:39 result hanged=false: [112178ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9273 #0 [112188ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [112190ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12962 #0 [112191ms] -> openat$procfs(0xffffffffffffff9c, 0x2000b480, 0x0, 0x0) #0 [112192ms] <- openat$procfs=0x3 errno=14 cover=1443 #0 [112192ms] -> syz_genetlink_get_family_id$nl80211(0x2000b500, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [112194ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11395 #0 [112195ms] -> readlinkat(0x3, 0x2000c380, 0x2000c3c0, 0xab) #0 [112195ms] <- readlinkat=0xffffffffffffffff errno=2 cover=374 2021/11/11 12:43:39 result hanged=false: 2021/11/11 12:43:39 added new input for call #3 readlinkat to corpus: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f000000b480)='/proc/cgroups\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) readlinkat(r0, &(0x7f000000c380)='\x00', &(0x7f000000c3c0)=""/171, 0xab) 2021/11/11 12:43:39 #0: triaging type=7 2021/11/11 12:43:39 triaging input for call #0 syz_genetlink_get_family_id$nl80211 (new signal=2) 12:43:39 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f000000b480)='/proc/cgroups\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) readlinkat(r0, &(0x7f000000c380)='\x00', &(0x7f000000c3c0)=""/171, 0xab) [112218ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9275 #0 [112229ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [112230ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=13061 #0 [112232ms] -> openat$procfs(0xffffffffffffff9c, 0x2000b480, 0x0, 0x0) #0 [112232ms] <- openat$procfs=0x3 errno=14 cover=1405 #0 [112233ms] -> syz_genetlink_get_family_id$nl80211(0x2000b500, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [112235ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11462 #0 [112236ms] -> readlinkat(0x3, 0x2000c380, 0x2000c3c0, 0xab) #0 [112236ms] <- readlinkat=0xffffffffffffffff errno=2 cover=364 12:43:39 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f000000b480)='/proc/cgroups\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) readlinkat(r0, &(0x7f000000c380)='\x00', &(0x7f000000c3c0)=""/171, 0xab) 2021/11/11 12:43:39 result hanged=false: [112258ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9277 #0 [112269ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [112270ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=13081 #0 [112272ms] -> openat$procfs(0xffffffffffffff9c, 0x2000b480, 0x0, 0x0) #0 [112273ms] <- openat$procfs=0x3 errno=14 cover=1405 #0 [112273ms] -> syz_genetlink_get_family_id$nl80211(0x2000b500, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [112274ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11403 #0 [112275ms] -> readlinkat(0x3, 0x2000c380, 0x2000c3c0, 0xab) #0 [112276ms] <- readlinkat=0xffffffffffffffff errno=2 cover=364 12:43:39 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f000000b480)='/proc/cgroups\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) readlinkat(r0, &(0x7f000000c380)='\x00', &(0x7f000000c3c0)=""/171, 0xab) 2021/11/11 12:43:39 result hanged=false: [112303ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9279 #0 [112313ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [112314ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12920 #0 [112316ms] -> openat$procfs(0xffffffffffffff9c, 0x2000b480, 0x0, 0x0) #0 [112316ms] <- openat$procfs=0x3 errno=14 cover=1524 #0 [112317ms] -> syz_genetlink_get_family_id$nl80211(0x2000b500, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [112318ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11424 #0 [112321ms] -> readlinkat(0x3, 0x2000c380, 0x2000c3c0, 0xab) #0 [112321ms] <- readlinkat=0xffffffffffffffff errno=2 cover=363 2021/11/11 12:43:39 result hanged=false: 2021/11/11 12:43:39 added new input for call #0 syz_genetlink_get_family_id$nl80211 to corpus: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f000000b480)='/proc/cgroups\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) readlinkat(r0, &(0x7f000000c380)='\x00', &(0x7f000000c3c0)=""/171, 0xab) 12:43:39 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='*!()\\&&!#-^\'@^#\x00') [112372ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9281 #0 [112380ms] -> syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [112381ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=1718 #0 [112382ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [112384ms] <- perf_event_open=0x3 errno=14 cover=6821 #0 [112385ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [112385ms] <- newfstatat=0xffffffffffffffff errno=14 cover=639 #0 [112386ms] -> ioctl$PERF_EVENT_IOC_SET_FILTER(0x3, 0x40082406, 0x20000000) #0 [112386ms] <- ioctl$PERF_EVENT_IOC_SET_FILTER=0xffffffffffffffff errno=3 cover=859 enabling collider #0 [112395ms] -> syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [112395ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=1392 #0 [112396ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [112396ms] <- perf_event_open=0x3 errno=14 cover=7136 pthread_create failed (errno 11) 2021/11/11 12:43:39 result hanged=false: 12:43:39 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='*!()\\&&!#-^\'@^#\x00') 2021/11/11 12:43:39 #0: triaging type=7 2021/11/11 12:43:39 triaging input for call #3 ioctl$PERF_EVENT_IOC_SET_FILTER (new signal=20) [112467ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9383 #0 [112476ms] -> syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [112477ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=1628 #0 [112477ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [112478ms] <- perf_event_open=0x3 errno=14 cover=7578 #0 [112479ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [112479ms] <- newfstatat=0xffffffffffffffff errno=14 cover=599 #0 [112479ms] -> ioctl$PERF_EVENT_IOC_SET_FILTER(0x3, 0x40082406, 0x20000000) #0 [112479ms] <- ioctl$PERF_EVENT_IOC_SET_FILTER=0xffffffffffffffff errno=3 cover=791 12:43:39 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='*!()\\&&!#-^\'@^#\x00') 2021/11/11 12:43:39 result hanged=false: [112513ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9385 #0 [112524ms] -> syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [112524ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=1636 #0 [112526ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [112527ms] <- perf_event_open=0x3 errno=14 cover=7852 #0 [112528ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [112529ms] <- newfstatat=0xffffffffffffffff errno=14 cover=599 #0 [112530ms] -> ioctl$PERF_EVENT_IOC_SET_FILTER(0x3, 0x40082406, 0x20000000) #0 [112530ms] <- ioctl$PERF_EVENT_IOC_SET_FILTER=0xffffffffffffffff errno=3 cover=780 12:43:39 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='*!()\\&&!#-^\'@^#\x00') 2021/11/11 12:43:39 result hanged=false: [112562ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9387 #0 [112573ms] -> syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [112573ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=1640 #0 [112575ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [112575ms] <- perf_event_open=0x3 errno=14 cover=6652 #0 [112576ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [112576ms] <- newfstatat=0xffffffffffffffff errno=14 cover=654 #0 [112577ms] -> ioctl$PERF_EVENT_IOC_SET_FILTER(0x3, 0x40082406, 0x20000000) #0 [112577ms] <- ioctl$PERF_EVENT_IOC_SET_FILTER=0xffffffffffffffff errno=3 cover=791 2021/11/11 12:43:39 result hanged=false: 2021/11/11 12:43:39 added new input for call #3 ioctl$PERF_EVENT_IOC_SET_FILTER to corpus: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='*!()\\&&!#-^\'@^#\x00') 12:43:39 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='*!()\\&&!#-^\'@^#\x00') 2021/11/11 12:43:39 #0: triaging type=7 2021/11/11 12:43:39 triaging input for call #2 newfstatat (new signal=1) [112611ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9389 #0 [112620ms] -> syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [112620ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=1629 #0 [112621ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [112622ms] <- perf_event_open=0x3 errno=14 cover=6633 #0 [112624ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [112624ms] <- newfstatat=0xffffffffffffffff errno=14 cover=611 #0 [112626ms] -> ioctl$PERF_EVENT_IOC_SET_FILTER(0x3, 0x40082406, 0x20000000) #0 [112626ms] <- ioctl$PERF_EVENT_IOC_SET_FILTER=0xffffffffffffffff errno=3 cover=780 12:43:39 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='*!()\\&&!#-^\'@^#\x00') 2021/11/11 12:43:39 result hanged=false: [112655ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9391 #0 [112663ms] -> syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [112663ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=1627 #0 [112665ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [112666ms] <- perf_event_open=0x3 errno=14 cover=6674 #0 [112667ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [112667ms] <- newfstatat=0xffffffffffffffff errno=14 cover=639 #0 [112667ms] -> ioctl$PERF_EVENT_IOC_SET_FILTER(0x3, 0x40082406, 0x20000000) #0 [112667ms] <- ioctl$PERF_EVENT_IOC_SET_FILTER=0xffffffffffffffff errno=3 cover=842 12:43:39 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='*!()\\&&!#-^\'@^#\x00') 2021/11/11 12:43:39 result hanged=false: [112695ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9393 #0 [112705ms] -> syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [112707ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=1707 #0 [112708ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [112709ms] <- perf_event_open=0x3 errno=14 cover=6778 #0 [112710ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [112711ms] <- newfstatat=0xffffffffffffffff errno=14 cover=628 #0 [112711ms] -> ioctl$PERF_EVENT_IOC_SET_FILTER(0x3, 0x40082406, 0x20000000) #0 [112711ms] <- ioctl$PERF_EVENT_IOC_SET_FILTER=0xffffffffffffffff errno=3 cover=834 2021/11/11 12:43:39 result hanged=false: 2021/11/11 12:43:39 added new input for call #2 newfstatat to corpus: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='*!()\\&&!#-^\'@^#\x00') 2021/11/11 12:43:39 #0: triaging type=7 2021/11/11 12:43:39 triaging input for call #0 syz_mount_image$vfat (new signal=2) 12:43:39 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='*!()\\&&!#-^\'@^#\x00') [112746ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9395 #0 [112755ms] -> syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [112755ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=1680 #0 [112757ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [112758ms] <- perf_event_open=0x3 errno=14 cover=7203 #0 [112762ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [112763ms] <- newfstatat=0xffffffffffffffff errno=14 cover=5281 #0 [112765ms] -> ioctl$PERF_EVENT_IOC_SET_FILTER(0x3, 0x40082406, 0x20000000) #0 [112765ms] <- ioctl$PERF_EVENT_IOC_SET_FILTER=0xffffffffffffffff errno=3 cover=820 12:43:39 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='*!()\\&&!#-^\'@^#\x00') 2021/11/11 12:43:39 result hanged=false: [112802ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9397 #0 [112814ms] -> syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [112814ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=1635 #0 [112816ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [112818ms] <- perf_event_open=0x3 errno=14 cover=7331 #0 [112819ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [112819ms] <- newfstatat=0xffffffffffffffff errno=14 cover=610 #0 [112821ms] -> ioctl$PERF_EVENT_IOC_SET_FILTER(0x3, 0x40082406, 0x20000000) #0 [112821ms] <- ioctl$PERF_EVENT_IOC_SET_FILTER=0xffffffffffffffff errno=3 cover=808 12:43:39 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='*!()\\&&!#-^\'@^#\x00') 2021/11/11 12:43:39 result hanged=false: [112852ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9399 #0 [112861ms] -> syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [112862ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=1628 #0 [112863ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [112864ms] <- perf_event_open=0x3 errno=14 cover=6665 #0 [112865ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [112865ms] <- newfstatat=0xffffffffffffffff errno=14 cover=599 #0 [112869ms] -> ioctl$PERF_EVENT_IOC_SET_FILTER(0x3, 0x40082406, 0x20000000) #0 [112869ms] <- ioctl$PERF_EVENT_IOC_SET_FILTER=0xffffffffffffffff errno=3 cover=780 2021/11/11 12:43:39 result hanged=false: 2021/11/11 12:43:39 added new input for call #0 syz_mount_image$vfat to corpus: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='*!()\\&&!#-^\'@^#\x00') 12:43:39 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000300)={0x2, 0x0, "277fed"}) [112908ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9401 #0 [112920ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [112921ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=6310 #0 [112926ms] -> ioctl$HCIINQUIRY(0x4, 0x800448f0, 0x20000300) #0 [112926ms] <- ioctl$HCIINQUIRY=0xffffffffffffffff errno=110 cover=1290 enabling collider #0 [112927ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [112929ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=5468 12:43:39 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000300)={0x2, 0x0, "277fed"}) 2021/11/11 12:43:39 result hanged=false: 2021/11/11 12:43:39 #0: triaging type=7 2021/11/11 12:43:39 triaging input for call #1 ioctl$HCIINQUIRY (new signal=38) [112950ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9403 #0 [112959ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [112962ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=6308 #0 [112963ms] -> ioctl$HCIINQUIRY(0x4, 0x800448f0, 0x20000300) #0 [112964ms] <- ioctl$HCIINQUIRY=0xffffffffffffffff errno=110 cover=1231 12:43:39 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000300)={0x2, 0x0, "277fed"}) 2021/11/11 12:43:39 result hanged=false: [112984ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9405 #0 [112995ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [112999ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=6304 #0 [113000ms] -> ioctl$HCIINQUIRY(0x4, 0x800448f0, 0x20000300) #0 [113001ms] <- ioctl$HCIINQUIRY=0xffffffffffffffff errno=110 cover=1231 12:43:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000300)={0x2, 0x0, "277fed"}) 2021/11/11 12:43:40 result hanged=false: [113025ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9407 #0 [113034ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [113035ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=6256 #0 [113038ms] -> ioctl$HCIINQUIRY(0x4, 0x800448f0, 0x20000300) #0 [113038ms] <- ioctl$HCIINQUIRY=0xffffffffffffffff errno=110 cover=1231 2021/11/11 12:43:40 result hanged=false: 2021/11/11 12:43:40 added new input for call #1 ioctl$HCIINQUIRY to corpus: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000300)={0x2, 0x0, "277fed"}) 12:43:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(r0) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x899) [113063ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9409 #0 [113073ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [113077ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3517 #0 [113077ms] -> dup(0x3) #0 [113077ms] <- dup=0x4 errno=14 cover=87 #0 [113078ms] -> write$tun(0x4, 0x20000000, 0x899) #0 [113084ms] <- write$tun=0x899 errno=14 cover=137472 enabling collider #0 [113088ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [113088ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3439 #0 [113089ms] -> dup(0x3) #0 [113089ms] <- dup=0x4 errno=14 cover=86 pthread_create failed (errno 11) 12:43:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(r0) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x899) 2021/11/11 12:43:40 result hanged=false: 2021/11/11 12:43:40 #0: triaging type=7 2021/11/11 12:43:40 triaging input for call #2 write$tun (new signal=11) [113139ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9511 #0 [113150ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [113150ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3419 #0 [113151ms] -> dup(0x3) #0 [113151ms] <- dup=0x4 errno=14 cover=87 #0 [113151ms] -> write$tun(0x4, 0x20000000, 0x899) #0 [113156ms] <- write$tun=0x899 errno=14 cover=133212 2021/11/11 12:43:40 result hanged=false: 12:43:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(r0) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x899) [113189ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9513 #0 [113200ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [113200ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3462 #0 [113201ms] -> dup(0x3) #0 [113201ms] <- dup=0x4 errno=14 cover=87 #0 [113201ms] -> write$tun(0x4, 0x20000000, 0x899) #0 [113211ms] <- write$tun=0x899 errno=14 cover=133196 12:43:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(r0) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x899) 2021/11/11 12:43:40 result hanged=false: [113242ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9515 #0 [113252ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [113253ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3437 #0 [113255ms] -> dup(0x3) #0 [113255ms] <- dup=0x4 errno=14 cover=87 #0 [113256ms] -> write$tun(0x4, 0x20000000, 0x899) #0 [113264ms] <- write$tun=0x899 errno=14 cover=133231 2021/11/11 12:43:40 result hanged=false: 2021/11/11 12:43:40 added new input for call #2 write$tun to corpus: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(r0) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000ffff088f00000000000000000000000000000000000000000000000000008837063a0a75dca13935f55d50a8ef4a0ed1ea321f247efc5d8954e92c316a3b8362448220c5628e98b81cc549054a05a873f901014bd6b975892502c7016dbea88de2e489fcc5902e61821d7d09440b9634900494caa4ec2808d331e0f42acecd6dd17aa615039e990a202629ff5a8b5947dcebf78688df7ec628c4f7e5f4259f1fb13f68f92126c4f7f187483035e7cb5524d94b6eabb5f1b71c75430a018c21fedea41fd982bfee6c20368ab19eed2e226b9195c94c98f8d3f24b08c9872fc6ff9d277a347a1f28b5ae56103478a909f5fb27d9b3332092020496c74ae2441a1c2d35c8633a60ee005f367a44d583ddfc26f8b495f5ddd8f5e2b4e1b2e0e8de004d0f9cc9ce6d8afc757ec07812ccbb60191b16be617a53bcae7461b24115804596c97e6155fab34c2c85e31a2cb2468fd4f6127a8dc34ec10dbceff6aabf5d2345872efdb20a82d82db910ff27174b3e7a82612910209d2d5996e2d246d7e0b88f0ea921f93fbcd4ad11dcee801c7feede41db31bf33861e35c5f06870d03a63dc4987b0faa15ce3a0ea0a2f1385c5e04ae9396f82773f496b31b2877defbd1b3f43c5f2d20ab6e18335bb1311d3f8a38eb98e07d32b042938055531af87eed25e4695c2234a41234e7d63519c2b99f7854eff1808b298a4b27344f57e7c6511e4c1af6cdf3d921d7bcea19fc0e9d2185b1bae6649809504330600a69e34c9cc5b5f10f4c15724b365a1ec8acc510bb270c70fb6fdcbd5fe4c7db54898cc9a04a5261d6cee7328caf997a330d63666c97bf980d8ca5b26a78bbdd10b746e8691ff890950e6598d6197922808f80f7e0bbaf2d3d58565132d76b5e2d1122f0edc63388d416660c7c937e2cee80d514cbd5ac9439f7e49e7ab1fbce3c720a041feea3bca301bec65f05ab82734eb91959cf27501a37644a6a6e8495d033115d19c9ac0725f714a79ac0813bf946c06eb82ac6da447104f13fbec1a694b18a59d9d90b6c16239b3202ef7057227ab559df171f851b6e84c499bafa8c5403c93b222d7031527dc00988cc95292f534e6768637a8b9a0f4286ec7054723c5780c587dcd4dd3cadc8d8b96915505de4abe0e4c8b4acb302a4c08c3a193c4571b9351a8d9ebfc89d6258084555cb12df1a2c2962c7fd9508d80752d60c1e28575f05393fe435cbb38b85b86de0502a68f516aad8ab41eff2dbf4f7015794409f0d60fcb1a57bba2420f6289ac372df59dce9027f77af7efbcb91d753e989410fd8d96e386d92a98993296143102d70f79673015f4fdb558f36aae72ad49afd2f449b4db242072b4aef81dd45ff948851b7c544c1efbea83800f78d243eae6066b4cbf7b90568e9e86cc24c10cc808e96898937bde6ce88196bfd256f3e86ee3f7e6b9793bf8a84b574530e986b9d7d9c60274fd0b1173989f1b4a03be7cd910e4f101b5c9fd9b8baaaa09f1fcc15a359971afe6375c54a6f6e0b6c39ce786b56638906d92210cef7a6b6f574105e46083b58bd6f7d903053c6ec932f799522fa956b3a658dbebb98e209ef0fb0261a26f4708aeafacaaa63ccdbd8f8cdfaca0db581ec60c9aa9e0565273b5110204115bfc8980922a0db96d180eae06617fc6c138d3354e15e7e562e583170ce1c96b47645612dc07b1f5f3bfd921d1030e4b7dfff8309ffe4d9cb181cb4604d651a8e172546ecdf7f5f81ac126938a42cb5bb52959b785ac3d51e447d8afb412d2f358b8091944d3f50de86e78447eef8f298aaa967eb6a99c036efbaf2c0f1b1d59758d83acee3c9c1e90feeb1832e4bc09ee979e0ebe7e71e5e218c852177d104517d073ae226e44abdbbea6f50b660d73db360f409df8be8d5a160fadc90f0e320b032a0165e4d7f53bc3071eff074621f435d762da0c01e005d5fb92858a8f86161fddeb4f117be0e1fce7a4371fc8daaec8c5d6fc82778633c8644fe492bef65eeaa4a910d8cad32c5e161548d65a20a4aca5636c8fb4e3deed9c640bb78f716884cfffb527657466d812e4d8ee673e5b9af8555539c2eaae4f45b826d4aa9d9de7ac82e4befd7b5b01f1e1bf49df427ef13d6fc6899a38077c4ad3cbb8376929455151327c9cfa0a01bc17484922d080ef9b90f36f6c8e3f7e82a94655ff0990bac08b7c6c01906e1c6d5d75beee11a32968a7cc61f14a17add34b127b69d88642e4bd09a802f1f45aea0c3dfd847c92d74b0404b10dcb77ff80b2be134f760b6eb2eeac857a544c2c6c039637f30618c57d65fa0d302f3a6bac8ed7d7e00c246833e3744da5a0fc50d9b90f5e9b747718d4a7e8ea9c268beaede3669255614b5eaefc3251296d67e98b00366a47242fef5737ca1cc7443f9bb6571a2d37ddd52f829c3c6f94f052a72094fd5de738c81c2a27daa0e1f49405c80ee73a91d7856449a70200dfffb76bded297d27486f5bbadb91c8d9e53ceceb603e3c35a3a3f0771d099d3420750162a51344b7ef9a1fd7b9f661962ffdf8e19c8f911b46934d7017897a564604e19a054ad54a17c0888ea5f89ca08b31139637233c766cf83f798369fc2590b0c3d415d8dddd61e01dffa696a47f9e638cd099f1e10f0dc349cf08fd7f9bef539f043ffa24e3dda20a2ed69974989e850fc597b1fb39168949b716ba2962cc02e2584df7294e0cfa4ba0c29d46e4b539b71"], 0x899) 12:43:40 executing program 0: futex(&(0x7f0000000100), 0x8c, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x88, 0x0, 0x0, 0x0, 0x0) [113298ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 12:43:40 poll: candidates=8 inputs=0 signal=0 spawned worker pid 9517 #0 [113308ms] -> futex(0x20000100, 0x8c, 0x0, 0x0, 0x0, 0x0) #0 [113309ms] <- futex=0xffffffffffffffff errno=22 cover=163 #0 [113309ms] -> futex(0x20000000, 0x88, 0x0, 0x0, 0x0, 0x0) #0 [113309ms] <- futex=0x0 errno=14 cover=97 enabling collider #0 [113310ms] -> futex(0x20000100, 0x8c, 0x0, 0x0, 0x0, 0x0) #0 [113310ms] <- futex=0xffffffffffffffff errno=22 cover=51 12:43:40 executing program 0: futex(&(0x7f0000000100), 0x8c, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x88, 0x0, 0x0, 0x0, 0x0) 2021/11/11 12:43:40 result hanged=false: 2021/11/11 12:43:40 #0: triaging type=7 2021/11/11 12:43:40 triaging input for call #1 futex (new signal=8) [113330ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9519 #0 [113341ms] -> futex(0x20000100, 0x8c, 0x0, 0x0, 0x0, 0x0) #0 [113342ms] <- futex=0xffffffffffffffff errno=22 cover=130 #0 [113343ms] -> futex(0x20000000, 0x88, 0x0, 0x0, 0x0, 0x0) #0 [113343ms] <- futex=0x0 errno=14 cover=97 2021/11/11 12:43:40 result hanged=false: 12:43:40 executing program 0: futex(&(0x7f0000000100), 0x8c, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x88, 0x0, 0x0, 0x0, 0x0) [113365ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9521 #0 [113373ms] -> futex(0x20000100, 0x8c, 0x0, 0x0, 0x0, 0x0) #0 [113375ms] <- futex=0xffffffffffffffff errno=22 cover=130 #0 [113376ms] -> futex(0x20000000, 0x88, 0x0, 0x0, 0x0, 0x0) #0 [113376ms] <- futex=0x0 errno=14 cover=97 2021/11/11 12:43:40 result hanged=false: 12:43:40 executing program 0: futex(&(0x7f0000000100), 0x8c, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x88, 0x0, 0x0, 0x0, 0x0) [113397ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9523 #0 [113406ms] -> futex(0x20000100, 0x8c, 0x0, 0x0, 0x0, 0x0) #0 [113407ms] <- futex=0xffffffffffffffff errno=22 cover=130 #0 [113407ms] -> futex(0x20000000, 0x88, 0x0, 0x0, 0x0, 0x0) #0 [113407ms] <- futex=0x0 errno=14 cover=97 2021/11/11 12:43:40 result hanged=false: 2021/11/11 12:43:40 added new input for call #1 futex to corpus: futex(&(0x7f0000000100), 0x8c, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x88, 0x0, 0x0, 0x0, 0x0) 12:43:40 executing program 0: futex(&(0x7f0000000100), 0x8c, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x88, 0x0, 0x0, 0x0, 0x0) 2021/11/11 12:43:40 #0: triaging type=7 2021/11/11 12:43:40 triaging input for call #0 futex (new signal=6) [113432ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9525 #0 [113442ms] -> futex(0x20000100, 0x8c, 0x0, 0x0, 0x0, 0x0) #0 [113443ms] <- futex=0xffffffffffffffff errno=22 cover=130 #0 [113443ms] -> futex(0x20000000, 0x88, 0x0, 0x0, 0x0, 0x0) #0 [113443ms] <- futex=0x0 errno=14 cover=97 12:43:40 executing program 0: futex(&(0x7f0000000100), 0x8c, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x88, 0x0, 0x0, 0x0, 0x0) 2021/11/11 12:43:40 result hanged=false: [113463ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9527 #0 [113472ms] -> futex(0x20000100, 0x8c, 0x0, 0x0, 0x0, 0x0) #0 [113474ms] <- futex=0xffffffffffffffff errno=22 cover=130 #0 [113475ms] -> futex(0x20000000, 0x88, 0x0, 0x0, 0x0, 0x0) #0 [113475ms] <- futex=0x0 errno=14 cover=97 2021/11/11 12:43:40 result hanged=false: 12:43:40 executing program 0: futex(&(0x7f0000000100), 0x8c, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x88, 0x0, 0x0, 0x0, 0x0) [113494ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9529 #0 [113505ms] -> futex(0x20000100, 0x8c, 0x0, 0x0, 0x0, 0x0) #0 [113509ms] <- futex=0xffffffffffffffff errno=22 cover=130 #0 [113510ms] -> futex(0x20000000, 0x88, 0x0, 0x0, 0x0, 0x0) #0 [113510ms] <- futex=0x0 errno=14 cover=100 2021/11/11 12:43:40 result hanged=false: 2021/11/11 12:43:40 added new input for call #0 futex to corpus: futex(&(0x7f0000000100), 0x8c, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x88, 0x0, 0x0, 0x0, 0x0) 12:43:40 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [113529ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9531 #0 [113540ms] -> pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x9999999999999999) #0 [113540ms] <- pselect6=0xffffffffffffffff errno=14 cover=39 enabling collider #0 [113541ms] -> pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x9999999999999999) #0 [113541ms] <- pselect6=0xffffffffffffffff errno=14 cover=39 12:43:40 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 2021/11/11 12:43:40 result hanged=false: 2021/11/11 12:43:40 #0: triaging type=7 2021/11/11 12:43:40 triaging input for call #0 pselect6 (new signal=2) [113565ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9533 #0 [113574ms] -> pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x9999999999999999) #0 [113574ms] <- pselect6=0xffffffffffffffff errno=14 cover=39 2021/11/11 12:43:40 result hanged=false: 12:43:40 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [113595ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9535 #0 [113606ms] -> pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x9999999999999999) #0 [113607ms] <- pselect6=0xffffffffffffffff errno=14 cover=39 2021/11/11 12:43:40 result hanged=false: 12:43:40 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [113629ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9537 #0 [113639ms] -> pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x9999999999999999) #0 [113639ms] <- pselect6=0xffffffffffffffff errno=14 cover=39 2021/11/11 12:43:40 result hanged=false: 2021/11/11 12:43:40 added new input for call #0 pselect6 to corpus: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 12:43:40 executing program 0: capset(&(0x7f0000000d00)={0x20071026}, &(0x7f0000000d40)={0x7fff}) [113662ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9539 #0 [113673ms] -> capset(0x20000d00, 0x20000d40) #0 [113675ms] <- capset=0xffffffffffffffff errno=1 cover=351 enabling collider #0 [113676ms] -> capset(0x20000d00, 0x20000d40) #0 [113676ms] <- capset=0xffffffffffffffff errno=1 cover=408 12:43:40 executing program 0: capset(&(0x7f0000000d00)={0x20071026}, &(0x7f0000000d40)={0x7fff}) 2021/11/11 12:43:40 result hanged=false: 2021/11/11 12:43:40 #0: triaging type=7 2021/11/11 12:43:40 triaging input for call #0 capset (new signal=8) [113696ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9541 #0 [113705ms] -> capset(0x20000d00, 0x20000d40) #0 [113705ms] <- capset=0xffffffffffffffff errno=1 cover=395 12:43:40 executing program 0: capset(&(0x7f0000000d00)={0x20071026}, &(0x7f0000000d40)={0x7fff}) 2021/11/11 12:43:40 result hanged=false: [113728ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9543 #0 [113740ms] -> capset(0x20000d00, 0x20000d40) #0 [113740ms] <- capset=0xffffffffffffffff errno=1 cover=373 2021/11/11 12:43:40 result hanged=false: 12:43:40 executing program 0: capset(&(0x7f0000000d00)={0x20071026}, &(0x7f0000000d40)={0x7fff}) [113766ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9545 #0 [113775ms] -> capset(0x20000d00, 0x20000d40) #0 [113776ms] <- capset=0xffffffffffffffff errno=1 cover=384 2021/11/11 12:43:40 result hanged=false: 2021/11/11 12:43:40 added new input for call #0 capset to corpus: capset(&(0x7f0000000d00)={0x20071026}, &(0x7f0000000d40)={0x7fff}) 12:43:40 executing program 0: syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, 0x0, 0x0) [113799ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9547 #0 [113809ms] -> syz_genetlink_get_family_id$nl802154(0x20000240, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [113810ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=8817 #0 [113812ms] -> sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, 0x0, 0x0) #0 [113812ms] <- sendmsg$NL802154_CMD_DEL_SEC_DEV=0xffffffffffffffff errno=9 cover=52 enabling collider #0 [113813ms] -> syz_genetlink_get_family_id$nl802154(0x20000240, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [113814ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=7277 2021/11/11 12:43:40 result hanged=false: 12:43:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), &(0x7f0000001cc0)='system_u:object_r:default_context_t:s0\x00', 0x27, 0x0) [113838ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9549 #0 [113848ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [113848ms] <- socket$inet_udp=0x3 errno=14 cover=1695 #0 [113849ms] -> sendmsg$sock(0x3, 0x0, 0x0) #0 [113849ms] <- sendmsg$sock=0xffffffffffffffff errno=14 cover=432 #0 [113851ms] -> accept4(0x3, 0x0, 0x0, 0x0) #0 [113851ms] <- accept4=0xffffffffffffffff errno=95 cover=1276 #0 [113852ms] -> mknodat(0xffffffffffffff9c, 0x20001c00, 0x0, 0x0) #0 [113853ms] <- mknodat=0x0 errno=14 cover=6302 #0 [113857ms] -> lsetxattr$security_selinux(0x20001c40, 0x20001c80, 0x20001cc0, 0x27, 0x0) #0 [113858ms] <- lsetxattr$security_selinux=0x0 errno=14 cover=8584 enabling collider #0 [113858ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [113859ms] <- socket$inet_udp=0x3 errno=14 cover=1814 #0 [113859ms] -> sendmsg$sock(0x3, 0x0, 0x0) #0 [113859ms] <- sendmsg$sock=0xffffffffffffffff errno=14 cover=446 pthread_create failed (errno 11) 12:43:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), &(0x7f0000001cc0)='system_u:object_r:default_context_t:s0\x00', 0x27, 0x0) 2021/11/11 12:43:40 result hanged=false: 2021/11/11 12:43:40 #0: triaging type=7 2021/11/11 12:43:40 triaging input for call #4 lsetxattr$security_selinux (new signal=14) [113915ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9651 #0 [113925ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [113927ms] <- socket$inet_udp=0x3 errno=14 cover=1673 #0 [113929ms] -> sendmsg$sock(0x3, 0x0, 0x0) #0 [113929ms] <- sendmsg$sock=0xffffffffffffffff errno=14 cover=432 #0 [113929ms] -> accept4(0x3, 0x0, 0x0, 0x0) #0 [113929ms] <- accept4=0xffffffffffffffff errno=95 cover=1218 #0 [113930ms] -> mknodat(0xffffffffffffff9c, 0x20001c00, 0x0, 0x0) #0 [113930ms] <- mknodat=0x0 errno=14 cover=6158 #0 [113932ms] -> lsetxattr$security_selinux(0x20001c40, 0x20001c80, 0x20001cc0, 0x27, 0x0) #0 [113932ms] <- lsetxattr$security_selinux=0x0 errno=14 cover=2869 12:43:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), &(0x7f0000001cc0)='system_u:object_r:default_context_t:s0\x00', 0x27, 0x0) 2021/11/11 12:43:40 result hanged=false: [113955ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9653 #0 [113963ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [113964ms] <- socket$inet_udp=0x3 errno=14 cover=1706 #0 [113965ms] -> sendmsg$sock(0x3, 0x0, 0x0) #0 [113966ms] <- sendmsg$sock=0xffffffffffffffff errno=14 cover=432 #0 [113966ms] -> accept4(0x3, 0x0, 0x0, 0x0) #0 [113966ms] <- accept4=0xffffffffffffffff errno=95 cover=1192 #0 [113971ms] -> mknodat(0xffffffffffffff9c, 0x20001c00, 0x0, 0x0) #0 [113971ms] <- mknodat=0x0 errno=14 cover=6404 #0 [113973ms] -> lsetxattr$security_selinux(0x20001c40, 0x20001c80, 0x20001cc0, 0x27, 0x0) #0 [113973ms] <- lsetxattr$security_selinux=0x0 errno=14 cover=2889 12:43:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), &(0x7f0000001cc0)='system_u:object_r:default_context_t:s0\x00', 0x27, 0x0) 2021/11/11 12:43:40 result hanged=false: [113996ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9655 #0 [114004ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [114006ms] <- socket$inet_udp=0x3 errno=14 cover=1662 #0 [114006ms] -> sendmsg$sock(0x3, 0x0, 0x0) #0 [114006ms] <- sendmsg$sock=0xffffffffffffffff errno=14 cover=432 #0 [114007ms] -> accept4(0x3, 0x0, 0x0, 0x0) #0 [114007ms] <- accept4=0xffffffffffffffff errno=95 cover=1178 #0 [114007ms] -> mknodat(0xffffffffffffff9c, 0x20001c00, 0x0, 0x0) #0 [114008ms] <- mknodat=0x0 errno=14 cover=6174 #0 [114009ms] -> lsetxattr$security_selinux(0x20001c40, 0x20001c80, 0x20001cc0, 0x27, 0x0) #0 [114009ms] <- lsetxattr$security_selinux=0x0 errno=14 cover=2869 2021/11/11 12:43:41 result hanged=false: 2021/11/11 12:43:41 added new input for call #4 lsetxattr$security_selinux to corpus: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), &(0x7f0000001cc0)='system_u:object_r:default_context_t:s0\x00', 0x27, 0x0) 12:43:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), &(0x7f0000001cc0)='system_u:object_r:default_context_t:s0\x00', 0x27, 0x0) 2021/11/11 12:43:41 #0: triaging type=7 2021/11/11 12:43:41 triaging input for call #2 accept4 (new signal=1) [114036ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9657 #0 [114046ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [114047ms] <- socket$inet_udp=0x3 errno=14 cover=1695 #0 [114047ms] -> sendmsg$sock(0x3, 0x0, 0x0) #0 [114047ms] <- sendmsg$sock=0xffffffffffffffff errno=14 cover=432 #0 [114047ms] -> accept4(0x3, 0x0, 0x0, 0x0) #0 [114048ms] <- accept4=0xffffffffffffffff errno=95 cover=1167 #0 [114048ms] -> mknodat(0xffffffffffffff9c, 0x20001c00, 0x0, 0x0) #0 [114048ms] <- mknodat=0x0 errno=14 cover=6125 #0 [114049ms] -> lsetxattr$security_selinux(0x20001c40, 0x20001c80, 0x20001cc0, 0x27, 0x0) #0 [114049ms] <- lsetxattr$security_selinux=0x0 errno=14 cover=2892 12:43:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), &(0x7f0000001cc0)='system_u:object_r:default_context_t:s0\x00', 0x27, 0x0) 2021/11/11 12:43:41 result hanged=false: [114073ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9659 #0 [114082ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [114082ms] <- socket$inet_udp=0x3 errno=14 cover=1684 #0 [114084ms] -> sendmsg$sock(0x3, 0x0, 0x0) #0 [114084ms] <- sendmsg$sock=0xffffffffffffffff errno=14 cover=432 #0 [114087ms] -> accept4(0x3, 0x0, 0x0, 0x0) #0 [114087ms] <- accept4=0xffffffffffffffff errno=95 cover=1287 #0 [114089ms] -> mknodat(0xffffffffffffff9c, 0x20001c00, 0x0, 0x0) #0 [114089ms] <- mknodat=0x0 errno=14 cover=6375 #0 [114090ms] -> lsetxattr$security_selinux(0x20001c40, 0x20001c80, 0x20001cc0, 0x27, 0x0) #0 [114091ms] <- lsetxattr$security_selinux=0x0 errno=14 cover=2887 12:43:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), &(0x7f0000001cc0)='system_u:object_r:default_context_t:s0\x00', 0x27, 0x0) 2021/11/11 12:43:41 result hanged=false: [114114ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9661 #0 [114123ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [114124ms] <- socket$inet_udp=0x3 errno=14 cover=1684 #0 [114125ms] -> sendmsg$sock(0x3, 0x0, 0x0) #0 [114125ms] <- sendmsg$sock=0xffffffffffffffff errno=14 cover=432 #0 [114127ms] -> accept4(0x3, 0x0, 0x0, 0x0) #0 [114127ms] <- accept4=0xffffffffffffffff errno=95 cover=1265 #0 [114129ms] -> mknodat(0xffffffffffffff9c, 0x20001c00, 0x0, 0x0) #0 [114129ms] <- mknodat=0x0 errno=14 cover=6329 #0 [114131ms] -> lsetxattr$security_selinux(0x20001c40, 0x20001c80, 0x20001cc0, 0x27, 0x0) #0 [114131ms] <- lsetxattr$security_selinux=0x0 errno=14 cover=2879 2021/11/11 12:43:41 result hanged=false: 2021/11/11 12:43:41 added new input for call #2 accept4 to corpus: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), &(0x7f0000001cc0)='system_u:object_r:default_context_t:s0\x00', 0x27, 0x0) 12:43:41 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) [114158ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9663 #0 [114168ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [114171ms] <- perf_event_open=0x3 errno=14 cover=6509 #0 [114172ms] -> add_key$keyring(0x20000040, 0x20000080, 0x0, 0x0, 0xfffffffffffffffd) #0 [114173ms] <- add_key$keyring=0xbbbe48a errno=14 cover=1250 enabling collider #0 [114183ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [114185ms] <- perf_event_open=0x3 errno=14 cover=9178 #0 [114186ms] -> add_key$keyring(0x20000040, 0x20000080, 0x0, 0x0, 0xfffffffffffffffd) #0 [114186ms] <- add_key$keyring=0x84f1f55 errno=14 cover=1206 2021/11/11 12:43:41 result hanged=false: 12:43:41 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) 2021/11/11 12:43:41 #0: triaging type=7 2021/11/11 12:43:41 triaging input for call #1 add_key$keyring (new signal=2) [114217ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9665 #0 [114226ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [114227ms] <- perf_event_open=0x3 errno=14 cover=7750 #0 [114229ms] -> add_key$keyring(0x20000040, 0x20000080, 0x0, 0x0, 0xfffffffffffffffd) #0 [114229ms] <- add_key$keyring=0x39febee3 errno=14 cover=1147 12:43:41 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) 2021/11/11 12:43:41 result hanged=false: [114261ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9667 #0 [114272ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [114273ms] <- perf_event_open=0x3 errno=14 cover=6696 #0 [114278ms] -> add_key$keyring(0x20000040, 0x20000080, 0x0, 0x0, 0xfffffffffffffffd) #0 [114278ms] <- add_key$keyring=0x66922f8 errno=14 cover=1519 12:43:41 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) 2021/11/11 12:43:41 result hanged=false: [114309ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9669 #0 [114320ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [114321ms] <- perf_event_open=0x3 errno=14 cover=6641 #0 [114322ms] -> add_key$keyring(0x20000040, 0x20000080, 0x0, 0x0, 0xfffffffffffffffd) #0 [114322ms] <- add_key$keyring=0x1fcba2ff errno=14 cover=1142 2021/11/11 12:43:41 result hanged=false: 2021/11/11 12:43:41 added new input for call #1 add_key$keyring to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) 12:43:41 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) 2021/11/11 12:43:41 #0: triaging type=7 2021/11/11 12:43:41 triaging input for call #0 perf_event_open (new signal=2) [114359ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9671 #0 [114369ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [114372ms] <- perf_event_open=0x3 errno=14 cover=6710 #0 [114373ms] -> add_key$keyring(0x20000040, 0x20000080, 0x0, 0x0, 0xfffffffffffffffd) #0 [114374ms] <- add_key$keyring=0x3d22c29e errno=14 cover=1159 12:43:41 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) 2021/11/11 12:43:41 result hanged=false: [114400ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9673 #0 [114410ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [114411ms] <- perf_event_open=0x3 errno=14 cover=6620 #0 [114413ms] -> add_key$keyring(0x20000040, 0x20000080, 0x0, 0x0, 0xfffffffffffffffd) #0 [114413ms] <- add_key$keyring=0x1ee7b290 errno=14 cover=1179 12:43:41 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) 2021/11/11 12:43:41 result hanged=false: [114443ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9675 #0 [114457ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [114458ms] <- perf_event_open=0x3 errno=14 cover=7490 #0 [114459ms] -> add_key$keyring(0x20000040, 0x20000080, 0x0, 0x0, 0xfffffffffffffffd) #0 [114460ms] <- add_key$keyring=0x1fd37e8d errno=14 cover=1153 2021/11/11 12:43:41 result hanged=false: 2021/11/11 12:43:41 added new input for call #0 perf_event_open to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) 12:43:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') [114496ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9677 #0 [114505ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) [ 3019.981288] audit: type=1326 audit(1636634621.507:2238): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=164901 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb070ec75ff code=0x7ffc0000 [ 3019.985889] audit: type=1326 audit(1636634621.507:2239): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=164901 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb070ec75ff code=0x7ffc0000 #0 [114519ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=81032 #0 [114523ms] -> syz_mount_image$tmpfs(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [114527ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=18602 #0 [114530ms] -> rename(0x20000240, 0x20000280) [ 3019.993618] audit: type=1326 audit(1636634621.509:2240): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=164901 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb070ec75ff code=0x7ffc0000 [ 3019.999401] audit: type=1326 audit(1636634621.509:2241): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=164901 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb070f14b19 code=0x7ffc0000 #0 [114532ms] <- rename=0x0 errno=14 cover=4024 enabling collider #0 [114532ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [114538ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=54723 #0 [114540ms] -> syz_mount_image$tmpfs(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [114550ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=17 cover=7433 [ 3020.015597] audit: type=1326 audit(1636634621.510:2242): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=164901 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb070ec75ff code=0x7ffc0000 [ 3020.020113] audit: type=1326 audit(1636634621.511:2243): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=164901 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb070ec75ff code=0x7ffc0000 [ 3020.027472] audit: type=1326 audit(1636634621.511:2244): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=164901 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb070ec75ff code=0x7ffc0000 [ 3020.031957] audit: type=1326 audit(1636634621.511:2245): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=164901 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb070ec75ff code=0x7ffc0000 [ 3020.036666] audit: type=1326 audit(1636634621.511:2246): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=164901 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb070ec75ff code=0x7ffc0000 [ 3020.042233] audit: type=1326 audit(1636634621.512:2247): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=164901 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb070ec75ff code=0x7ffc0000 pthread_create failed (errno 11) 12:43:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') 2021/11/11 12:43:41 result hanged=false: 2021/11/11 12:43:41 #0: triaging type=7 2021/11/11 12:43:41 triaging input for call #2 rename (new signal=5) [114619ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9779 #0 [114626ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [114628ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=6616 #0 [114629ms] -> syz_mount_image$tmpfs(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [114635ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=18549 #0 [114638ms] -> rename(0x20000240, 0x20000280) #0 [114640ms] <- rename=0x0 errno=14 cover=3931 12:43:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') 2021/11/11 12:43:41 result hanged=false: [114664ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9781 #0 [114674ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [114674ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=6510 #0 [114681ms] -> syz_mount_image$tmpfs(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [114686ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=18553 #0 [114690ms] -> rename(0x20000240, 0x20000280) #0 [114692ms] <- rename=0x0 errno=14 cover=4033 12:43:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') 2021/11/11 12:43:41 result hanged=false: [114717ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9783 #0 [114724ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [114724ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=3013 #0 [114729ms] -> syz_mount_image$tmpfs(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [114736ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=18531 #0 [114745ms] -> rename(0x20000240, 0x20000280) #0 [114748ms] <- rename=0x0 errno=14 cover=4120 2021/11/11 12:43:41 result hanged=false: 2021/11/11 12:43:41 added new input for call #2 rename to corpus: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') 12:43:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') 2021/11/11 12:43:41 #0: triaging type=7 2021/11/11 12:43:41 triaging input for call #1 syz_mount_image$tmpfs (new signal=2) [114775ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9785 #0 [114786ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [114787ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=4015 #0 [114790ms] -> syz_mount_image$tmpfs(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [114800ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=18568 #0 [114803ms] -> rename(0x20000240, 0x20000280) #0 [114806ms] <- rename=0x0 errno=14 cover=3946 2021/11/11 12:43:41 result hanged=false: 12:43:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') [114828ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9787 #0 [114835ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [114836ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=2944 #0 [114841ms] -> syz_mount_image$tmpfs(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [114853ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=18582 #0 [114856ms] -> rename(0x20000240, 0x20000280) #0 [114858ms] <- rename=0x0 errno=14 cover=8426 12:43:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') 2021/11/11 12:43:41 result hanged=false: [114881ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9789 #0 [114889ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [114890ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=2981 #0 [114894ms] -> syz_mount_image$tmpfs(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [114908ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=18879 #0 [114911ms] -> rename(0x20000240, 0x20000280) #0 [114912ms] <- rename=0x0 errno=14 cover=3947 2021/11/11 12:43:41 result hanged=false: 2021/11/11 12:43:41 added new input for call #1 syz_mount_image$tmpfs to corpus: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') [ 3020.413296] Bluetooth: hci2: command 0x0401 tx timeout 2021/11/11 12:43:41 #0: triaging type=7 2021/11/11 12:43:41 triaging input for call #0 seccomp$SECCOMP_SET_MODE_FILTER_LISTENER (new signal=3) 12:43:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') [114988ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9791 #0 [114995ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [114995ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=3239 #0 [114998ms] -> syz_mount_image$tmpfs(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [115003ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=18436 #0 [115006ms] -> rename(0x20000240, 0x20000280) #0 [115011ms] <- rename=0x0 errno=14 cover=4007 12:43:42 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') 2021/11/11 12:43:42 result hanged=false: [115034ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9793 #0 [115041ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [115041ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=3113 #0 [115044ms] -> syz_mount_image$tmpfs(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [115052ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=18533 #0 [115055ms] -> rename(0x20000240, 0x20000280) #0 [115056ms] <- rename=0x0 errno=14 cover=3922 12:43:42 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') 2021/11/11 12:43:42 result hanged=false: [115084ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9795 #0 [115091ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [115091ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=2912 #0 [115095ms] -> syz_mount_image$tmpfs(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [115107ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=18527 #0 [115110ms] -> rename(0x20000240, 2021/11/11 12:43:42 poll: candidates=0 inputs=0 signal=0 0x20000280) #0 [115117ms] <- rename=0x0 errno=14 cover=4005 2021/11/11 12:43:42 result hanged=false: 2021/11/11 12:43:42 added new input for call #0 seccomp$SECCOMP_SET_MODE_FILTER_LISTENER to corpus: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') 12:43:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, 0x0) [115149ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9797 #0 [115156ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [115156ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1687 #0 [115157ms] -> ioctl$TCSETSF(0x3, 0x5404, 0x0) #0 [115157ms] <- ioctl$TCSETSF=0xffffffffffffffff errno=14 cover=557 enabling collider #0 [115157ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [115157ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1662 2021/11/11 12:43:42 result hanged=false: 2021/11/11 12:43:42 #0: triaging type=7 2021/11/11 12:43:42 triaging input for call #1 ioctl$TCSETSF (new signal=1) 12:43:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, 0x0) [115175ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9799 #0 [115183ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [115183ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1663 #0 [115185ms] -> ioctl$TCSETSF(0x3, 0x5404, 0x0) #0 [115185ms] <- ioctl$TCSETSF=0xffffffffffffffff errno=14 cover=557 2021/11/11 12:43:42 result hanged=false: 12:43:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, 0x0) [115203ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9801 #0 [115209ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [115209ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1684 #0 [115211ms] -> ioctl$TCSETSF(0x3, 0x5404, 0x0) #0 [115211ms] <- ioctl$TCSETSF=0xffffffffffffffff errno=14 cover=557 12:43:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, 0x0) 2021/11/11 12:43:42 result hanged=false: [115230ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9803 #0 [115236ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [115236ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1685 #0 [115236ms] -> ioctl$TCSETSF(0x3, 0x5404, 0x0) #0 [115236ms] <- ioctl$TCSETSF=0xffffffffffffffff errno=14 cover=557 2021/11/11 12:43:42 result hanged=false: 2021/11/11 12:43:42 added new input for call #1 ioctl$TCSETSF to corpus: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, 0x0) 12:43:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, 0x0) 2021/11/11 12:43:42 #0: triaging type=7 2021/11/11 12:43:42 triaging input for call #0 syz_open_dev$tty1 (new signal=4) [115253ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9805 #0 [115263ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [115263ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1662 #0 [115264ms] -> ioctl$TCSETSF(0x3, 0x5404, 0x0) #0 [115264ms] <- ioctl$TCSETSF=0xffffffffffffffff errno=14 cover=557 12:43:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, 0x0) 2021/11/11 12:43:42 result hanged=false: [115282ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9807 #0 [115290ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [115290ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1662 #0 [115291ms] -> ioctl$TCSETSF(0x3, 0x5404, 0x0) #0 [115291ms] <- ioctl$TCSETSF=0xffffffffffffffff errno=14 cover=557 2021/11/11 12:43:42 result hanged=false: 12:43:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, 0x0) [115312ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9809 #0 [115320ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [115322ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1718 #0 [115323ms] -> ioctl$TCSETSF(0x3, 0x5404, 0x0) #0 [115323ms] <- ioctl$TCSETSF=0xffffffffffffffff errno=14 cover=557 2021/11/11 12:43:42 result hanged=false: 2021/11/11 12:43:42 added new input for call #0 syz_open_dev$tty1 to corpus: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, 0x0) 12:43:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) unshare(0x28020600) [115348ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9811 2021/11/11 12:43:42 poll: candidates=8 inputs=0 signal=0 #0 [115358ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [115358ms] <- perf_event_open=0x3 errno=14 cover=8050 #0 [115359ms] -> shmget$private(0x0, 0x3000, 0x0, 0x20ffb000) #0 [115359ms] <- shmget$private=0x15 errno=14 cover=3725 #0 [115359ms] -> unshare(0x28020600) #0 [115366ms] <- unshare=0x0 errno=14 cover=94085 enabling collider #0 [115367ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [115367ms] <- perf_event_open=0x4 errno=14 cover=7098 #0 [115368ms] -> shmget$private(0x0, 0x3000, 0x0, 0x20ffb000) #0 [115370ms] <- shmget$private=0x0 errno=14 cover=5270 pthread_create failed (errno 11) 12:43:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) unshare(0x28020600) 2021/11/11 12:43:42 result hanged=false: 2021/11/11 12:43:42 #0: triaging type=7 2021/11/11 12:43:42 triaging input for call #2 unshare (new signal=68) [115430ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9913 #0 [115441ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [115442ms] <- perf_event_open=0x3 errno=14 cover=6999 #0 [115443ms] -> shmget$private(0x0, 0x3000, 0x0, 0x20ffb000) #0 [115444ms] <- shmget$private=0x16 errno=14 cover=4034 #0 [115445ms] -> unshare(0x28020600) #0 [115450ms] <- unshare=0x0 errno=14 cover=95113 12:43:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) unshare(0x28020600) 2021/11/11 12:43:42 result hanged=false: [115478ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9915 #0 [115486ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [115487ms] <- perf_event_open=0x3 errno=14 cover=9241 #0 [115487ms] -> shmget$private(0x0, 0x3000, 0x0, 0x20ffb000) #0 [115487ms] <- shmget$private=0x17 errno=14 cover=3773 #0 [115488ms] -> unshare(0x28020600) #0 [115493ms] <- unshare=0x0 errno=14 cover=94777 12:43:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) unshare(0x28020600) 2021/11/11 12:43:42 result hanged=false: [115538ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9917 #0 [115548ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [115551ms] <- perf_event_open=0x3 errno=14 cover=6485 #0 [115553ms] -> shmget$private(0x0, 0x3000, 0x0, 0x20ffb000) #0 [115553ms] <- shmget$private=0x18 errno=14 cover=3882 #0 [115554ms] -> unshare(0x28020600) #0 [115561ms] <- unshare=0x0 errno=14 cover=94628 2021/11/11 12:43:42 result hanged=false: 2021/11/11 12:43:42 added new input for call #2 unshare to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) unshare(0x28020600) 2021/11/11 12:43:42 #0: triaging type=7 2021/11/11 12:43:42 triaging input for call #1 shmget$private (new signal=9) 12:43:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) unshare(0x28020600) [115623ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9919 #0 [115631ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [115632ms] <- perf_event_open=0x3 errno=14 cover=6474 #0 [115634ms] -> shmget$private(0x0, 0x3000, 0x0, 0x20ffb000) #0 [115635ms] <- shmget$private=0x19 errno=14 cover=4733 #0 [115635ms] -> unshare(0x28020600) #0 [115643ms] <- unshare=0x0 errno=14 cover=95166 12:43:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) unshare(0x28020600) 2021/11/11 12:43:42 result hanged=false: [115690ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9921 #0 [115697ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [115698ms] <- perf_event_open=0x3 errno=14 cover=8030 #0 [115698ms] -> shmget$private(0x0, 0x3000, 0x0, 0x20ffb000) #0 [115699ms] <- shmget$private=0x1a errno=14 cover=3842 #0 [115699ms] -> unshare(0x28020600) #0 [115704ms] <- unshare=0x0 errno=14 cover=94556 12:43:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) unshare(0x28020600) 2021/11/11 12:43:42 result hanged=false: [115748ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9923 #0 [115758ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [115760ms] <- perf_event_open=0x3 errno=14 cover=6493 #0 [115761ms] -> shmget$private(0x0, 0x3000, 0x0, 0x20ffb000) #0 [115763ms] <- shmget$private=0x1b errno=14 cover=3891 #0 [115764ms] -> unshare(0x28020600) #0 [115772ms] <- unshare=0x0 errno=14 cover=95361 2021/11/11 12:43:42 result hanged=false: 2021/11/11 12:43:42 added new input for call #1 shmget$private to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) unshare(0x28020600) 12:43:42 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/keycreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='L', 0x1}], 0x1) [115806ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9925 #0 [115813ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [115814ms] <- syz_open_procfs=0x3 errno=14 cover=4685 #0 [115815ms] -> prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) SIGSEGV on (nil), exiting #1 [116816ms] -> writev(0x3, 0x20000340, 0x1) #1 [116816ms] <- writev=0xffffffffffffffff errno=3 cover=181 enabling collider #1 [116918ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #1 [116920ms] <- syz_open_procfs=0x3 errno=14 cover=4210 #1 [116920ms] -> prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) SIGSEGV on (nil), exiting #2 [116921ms] -> writev(0x3, 0x20000340, 0x1) #2 [116921ms] <- writev=0xffffffffffffffff errno=3 cover=181 12:43:43 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/keycreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='L', 0x1}], 0x1) 2021/11/11 12:43:43 result hanged=false: 2021/11/11 12:43:43 #0: triaging type=7 2021/11/11 12:43:43 triaging input for call #2 writev (new signal=6) [116943ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9930 #0 [116952ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [116953ms] <- syz_open_procfs=0x3 errno=14 cover=4645 #0 [116953ms] -> prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) SIGSEGV on (nil), exiting [ 3022.461312] Bluetooth: hci2: command 0x0401 tx timeout #1 [117954ms] -> writev(0x3, 0x20000340, 0x1) #1 [117955ms] <- writev=0xffffffffffffffff errno=3 cover=181 12:43:45 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/keycreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='L', 0x1}], 0x1) 2021/11/11 12:43:45 result hanged=false: [118077ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9933 #0 [118086ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [118087ms] <- syz_open_procfs=0x3 errno=14 cover=4698 #0 [118088ms] -> prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) SIGSEGV on (nil), exiting [ 3024.509302] Bluetooth: hci2: command 0x0401 tx timeout #1 [119089ms] -> writev(0x3, 0x20000340, 0x1) #1 [119094ms] <- writev=0xffffffffffffffff errno=3 cover=181 12:43:46 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/keycreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='L', 0x1}], 0x1) 2021/11/11 12:43:46 result hanged=false: [119217ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9936 #0 [119226ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [119227ms] <- syz_open_procfs=0x3 errno=14 cover=4703 #0 [119227ms] -> prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) SIGSEGV on (nil), exiting #1 [120228ms] -> writev(0x3, 0x20000340, 0x1) #1 [120228ms] <- writev=0xffffffffffffffff errno=3 cover=181 2021/11/11 12:43:47 result hanged=false: 2021/11/11 12:43:47 added new input for call #2 writev to corpus: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/keycreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='L', 0x1}], 0x1) 12:43:47 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/keycreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='L', 0x1}], 0x1) 2021/11/11 12:43:47 #0: triaging type=7 2021/11/11 12:43:47 triaging input for call #1 prctl$PR_SET_SECCOMP (new signal=2) [120359ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9939 #0 [120368ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [120372ms] <- syz_open_procfs=0x3 errno=14 cover=5693 #0 [120374ms] -> prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) SIGSEGV on (nil), exiting [ 3025.836986] kauditd_printk_skb: 391 callbacks suppressed [ 3025.837001] audit: type=1326 audit(1636634627.363:2639): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=165164 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb070f14b19 code=0x0 [ 3026.557301] Bluetooth: hci2: command 0x0401 tx timeout #1 [121375ms] -> writev(0x3, 0x20000340, 0x1) #1 [121375ms] <- writev=0xffffffffffffffff errno=3 cover=181 12:43:48 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/keycreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='L', 0x1}], 0x1) 2021/11/11 12:43:48 result hanged=false: [121499ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 9942 #0 [121509ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [121511ms] <- syz_open_procfs=0x3 errno=14 cover=4702 #0 [121513ms] -> prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) SIGSEGV on (nil), exiting [ 3026.976971] audit: type=1326 audit(1636634628.503:2640): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=165167 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb070f14b19 code=0x0 VM DIAGNOSIS: 12:43:38 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8226d24c RDI=ffffffff876c9080 RBP=ffffffff876c9040 RSP=ffff888008e178b8 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0ed925b R14=fffffbfff0ed9212 R15=dffffc0000000000 RIP=ffffffff8226d2a0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb07142c004 CR3=0000000027a1a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 696c61766e49002f YMM01=0000000000000000 0000000000000000 000000696e656420 737365636341002f YMM02=0000000000000000 0000000000000000 ffffff0f0e0d0c0b 0a09080706050403 YMM03=0000000000000000 0000000000000000 696e656420737365 636341002f737973 YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 000055c168eb4290 ffffffff00000004 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 49006d756e203c20 69000a313a56000a YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffffed1004e4d000 RBX=ffffed1004e4d001 RCX=ffffffff815df016 RDX=ffffed1004e4d001 RSI=0000000000000008 RDI=ffff888027268000 RBP=ffffed1004e4d000 RSP=ffff888027f57750 R8 =0000000000000000 R9 =ffff888027268007 R10=ffffed1004e4d000 R11=0000000000000001 R12=8000000044855007 R13=ffff8880441f38b0 R14=dffffc0000000000 R15=00007fb06f917000 RIP=ffffffff816a6125 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000003c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f46ad22c990 CR3=0000000027756000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 000000000000ff00 YMM01=0000000000000000 0000000000000000 2525252525252525 2525252525252525 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 000000000000ff00 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000