#1 [8531ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #1 [8531ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5051 #0 [8531ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #2 [8531ms] -> ioctl$sock_SIOCGIFINDEX_802154(0x6, 0x8933, 0x20000640) #2 [8532ms] <- ioctl$sock_SIOCGIFINDEX_802154=0xffffffffffffffff errno=9 cover=46 SYZFAIL: setns(netns) failed 15:14:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x24}}, 0x0) 2021/11/11 15:14:52 result hanged=false: 2021/11/11 15:14:52 #0: triaging type=7 2021/11/11 15:14:52 triaging input for call #5 sendmsg$IEEE802154_LLSEC_SETPARAMS (new signal=6) iptable filter/10: resetting iptable mangle/10: resetting [8549ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 40 #0 [8553ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [8554ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5950 #0 [8554ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [8555ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5123 #0 [8555ms] -> syz_genetlink_get_family_id$ieee802154(0x200002c0, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [8555ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=7009 #0 [8556ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [8556ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5152 #0 [8557ms] -> ioctl$sock_SIOCGIFINDEX_802154(0x6, 0x8933, 0x20000640) #0 [8557ms] <- ioctl$sock_SIOCGIFINDEX_802154=0x0 errno=14 cover=188 #0 [8557ms] -> sendmsg$IEEE802154_LLSEC_SETPARAMS(0x4, 0x20000140, 0x0) #0 [8557ms] <- sendmsg$IEEE802154_LLSEC_SETPARAMS=0x24 errno=14 cover=1687 15:14:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x24}}, 0x0) 2021/11/11 15:14:52 result hanged=false: [8572ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 42 #0 [8579ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [8580ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5937 #0 [8580ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [8581ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5222 #0 [8581ms] -> syz_genetlink_get_family_id$ieee802154(0x200002c0, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [8581ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5202 #0 [8582ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [8582ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5154 #0 [8582ms] -> ioctl$sock_SIOCGIFINDEX_802154(0x6, 0x8933, 0x20000640) #0 [8582ms] <- ioctl$sock_SIOCGIFINDEX_802154=0x0 errno=14 cover=188 #0 [8582ms] -> sendmsg$IEEE802154_LLSEC_SETPARAMS(0x4, 0x20000140, 0x0) #0 [8582ms] <- sendmsg$IEEE802154_LLSEC_SETPARAMS=0x24 errno=14 cover=1690 15:14:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x24}}, 0x0) 2021/11/11 15:14:52 result hanged=false: [8593ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 44 #0 [8598ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [8598ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6004 #0 [8599ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [8599ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5140 #0 [8600ms] -> syz_genetlink_get_family_id$ieee802154(0x200002c0, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [8600ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5212 #0 [8600ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [8601ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5365 #0 [8601ms] -> ioctl$sock_SIOCGIFINDEX_802154(0x6, 0x8933, 0x20000640) #0 [8601ms] <- ioctl$sock_SIOCGIFINDEX_802154=0x0 errno=14 cover=188 #0 [8601ms] -> sendmsg$IEEE802154_LLSEC_SETPARAMS(0x4, 0x20000140, 0x0) #0 [8601ms] <- sendmsg$IEEE802154_LLSEC_SETPARAMS=0x24 errno=14 cover=1701 2021/11/11 15:14:52 result hanged=false: 2021/11/11 15:14:52 added new input for call #5 sendmsg$IEEE802154_LLSEC_SETPARAMS to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x24}}, 0x0) 15:14:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x24}}, 0x0) [8615ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 46 #0 [8620ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [8620ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5914 #0 [8621ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [8621ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5234 #0 [8621ms] -> syz_genetlink_get_family_id$ieee802154(0x200002c0, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [8622ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5244 2021/11/11 15:14:52 #0: triaging type=7 2021/11/11 15:14:52 triaging input for call #2 syz_genetlink_get_family_id$ieee802154 (new signal=2) #0 [8622ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [8622ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5065 #0 [8623ms] -> ioctl$sock_SIOCGIFINDEX_802154(0x6, 0x8933, 0x20000640) #0 [8623ms] <- ioctl$sock_SIOCGIFINDEX_802154=0x0 errno=14 cover=188 #0 [8623ms] -> sendmsg$IEEE802154_LLSEC_SETPARAMS(0x4, 0x20000140, 0x0) #0 [8623ms] <- sendmsg$IEEE802154_LLSEC_SETPARAMS=0x24 errno=14 cover=1690 15:14:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x24}}, 0x0) 2021/11/11 15:14:52 result hanged=false: [8633ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 48 #0 [8638ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [8638ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6037 #0 [8639ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [8639ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5122 #0 [8640ms] -> syz_genetlink_get_family_id$ieee802154(0x200002c0, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [8640ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5270 #0 [8640ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [8641ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5031 #0 [8641ms] -> ioctl$sock_SIOCGIFINDEX_802154(0x6, 0x8933, 0x20000640) #0 [8641ms] <- ioctl$sock_SIOCGIFINDEX_802154=0x0 errno=14 cover=188 #0 [8641ms] -> sendmsg$IEEE802154_LLSEC_SETPARAMS(0x4, 0x20000140, 0x0) #0 [8641ms] <- sendmsg$IEEE802154_LLSEC_SETPARAMS=0x24 errno=14 cover=1700 2021/11/11 15:14:52 result hanged=false: 15:14:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x24}}, 0x0) [8652ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 50 #0 [8656ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [8657ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5898 #0 [8658ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [8658ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5257 #0 [8658ms] -> syz_genetlink_get_family_id$ieee802154(0x200002c0, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [8659ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5252 #0 [8660ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [8660ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5367 #0 [8660ms] -> ioctl$sock_SIOCGIFINDEX_802154(0x6, 0x8933, 0x20000640) #0 [8660ms] <- ioctl$sock_SIOCGIFINDEX_802154=0x0 errno=14 cover=188 #0 [8660ms] -> sendmsg$IEEE802154_LLSEC_SETPARAMS(0x4, 0x20000140, 0x0) #0 [8661ms] <- sendmsg$IEEE802154_LLSEC_SETPARAMS=0x24 errno=14 cover=1679 2021/11/11 15:14:52 result hanged=false: 2021/11/11 15:14:52 added new input for call #2 syz_genetlink_get_family_id$ieee802154 to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x24}}, 0x0) 15:14:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffffffffffcd6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) [8685ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 52 #0 [8692ms] -> syz_mount_image$ext4(0x0, 0x20000000, 0x0, 0xfffffffffffffcd6, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [8693ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12782 #0 [8694ms] -> mount(0x0, 0x200004c0, 0x20000500, 0x0, 0x0) #0 [8697ms] <- mount=0x0 errno=14 cover=45256 #0 [8698ms] -> syz_open_procfs(0x0, 0x20000000) #0 [8698ms] <- syz_open_procfs=0x3 errno=14 cover=2607 #0 [8699ms] -> readv(0x3, 0x20001600, 0x1) #0 [8700ms] <- readv=0x602 errno=14 cover=14890 enabling collider #0 [8701ms] -> syz_mount_image$ext4(0x0, 0x20000000, 0x0, 0xfffffffffffffcd6, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [8701ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1304 #0 [8702ms] -> mount(0x0, 0x200004c0, 0x20000500, 0x0, 0x0) #1 [8704ms] -> syz_open_procfs(0x0, 0x20000000) #1 [8704ms] <- syz_open_procfs=0x3 errno=14 cover=2069 #0 [8704ms] <- mount=0x0 errno=14 cover=24509 #0 [8705ms] -> readv(0x3, 0x20001600, 0x1) #0 [8706ms] <- readv=0xffffffffffffffff errno=9 cover=48 2021/11/11 15:14:52 result hanged=false: 2021/11/11 15:14:52 #0: triaging type=7 umount(./22/file0) 2021/11/11 15:14:52 triaging input for call #3 readv (new signal=5) 15:14:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffffffffffcd6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) umount(./22/file0) iptable filter/10: resetting iptable mangle/10: resetting [8728ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 55 #0 [8733ms] -> syz_mount_image$ext4(0x0, 0x20000000, 0x0, 0xfffffffffffffcd6, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [8735ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=14403 #0 [8736ms] -> mount(0x0, 0x200004c0, 0x20000500, 0x0, 0x0) #0 [8739ms] <- mount=0x0 errno=14 cover=11651 #0 [8741ms] -> syz_open_procfs(0x0, 0x20000000) #0 [8741ms] <- syz_open_procfs=0x3 errno=14 cover=2607 #0 [8742ms] -> readv(0x3, 0x20001600, 0x1) #0 [8742ms] <- readv=0x602 errno=14 cover=11550 15:14:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffffffffffcd6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 2021/11/11 15:14:52 result hanged=false: umount(./23/file0) [8757ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 57 #0 [8762ms] -> syz_mount_image$ext4(0x0, 0x20000000, 0x0, 0xfffffffffffffcd6, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [8765ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13435 #0 [8766ms] -> mount(0x0, 0x200004c0, 0x20000500, 0x0, 0x0) #0 [8767ms] <- mount=0x0 errno=14 cover=10435 #0 [8768ms] -> syz_open_procfs(0x0, 0x20000000) #0 [8769ms] <- syz_open_procfs=0x3 errno=14 cover=2593 #0 [8769ms] -> readv(0x3, 0x20001600, 0x1) #0 [8769ms] <- readv=0x602 errno=14 cover=11507 15:14:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffffffffffcd6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 2021/11/11 15:14:52 result hanged=false: umount(./24/file0) [8783ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 59 #0 [8788ms] -> syz_mount_image$ext4(0x0, 0x20000000, 0x0, 0xfffffffffffffcd6, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [8790ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13205 #0 [8791ms] -> mount(0x0, 0x200004c0, 0x20000500, 0x0, 0x0) #0 [8796ms] <- mount=0x0 errno=14 cover=13812 #0 [8797ms] -> syz_open_procfs(0x0, 0x20000000) #0 [8798ms] <- syz_open_procfs=0x3 errno=14 cover=3787 #0 [8799ms] -> readv(0x3, 0x20001600, 0x1) #0 [8799ms] <- readv=0x602 errno=14 cover=11507 umount(./25/file0) 2021/11/11 15:14:52 result hanged=false: 2021/11/11 15:14:52 added new input for call #3 readv to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffffffffffcd6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 15:14:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffffffffffcd6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) [8818ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 61 2021/11/11 15:14:52 #0: triaging type=7 2021/11/11 15:14:52 triaging input for call #0 syz_mount_image$ext4 (new signal=1) #0 [8823ms] -> syz_mount_image$ext4(0x0, 0x20000000, 0x0, 0xfffffffffffffcd6, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [8827ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=14155 #0 [8830ms] -> mount(0x0, 0x200004c0, 0x20000500, 0x0, 0x0) #0 [8834ms] <- mount=0x0 errno=14 cover=11625 #0 [8835ms] -> syz_open_procfs(0x0, 0x20000000) #0 [8836ms] <- syz_open_procfs=0x3 errno=14 cover=2631 #0 [8837ms] -> readv(0x3, 0x20001600, 0x1) #0 [8839ms] <- readv=0x602 errno=14 cover=11521 2021/11/11 15:14:52 result hanged=false: umount(./26/file0) 15:14:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffffffffffcd6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) iptable filter/10: resetting iptable mangle/10: resetting [8862ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 63 #0 [8872ms] -> syz_mount_image$ext4(0x0, 0x20000000, 0x0, 0xfffffffffffffcd6, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [8873ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=14045 #0 [8877ms] -> mount(0x0, 0x200004c0, 0x20000500, 0x0, 0x0) #0 [8878ms] <- mount=0x0 errno=14 cover=10408 #0 [8880ms] -> syz_open_procfs(0x0, 0x20000000) #0 [8880ms] <- syz_open_procfs=0x3 errno=14 cover=2620 #0 [8883ms] -> readv(0x3, 0x20001600, 0x1) #0 [8883ms] <- readv=0x602 errno=14 cover=11564 2021/11/11 15:14:52 result hanged=false: umount(./27/file0) 15:14:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffffffffffcd6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) [8910ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 65 #0 [8915ms] -> syz_mount_image$ext4(0x0, 0x20000000, 0x0, 0xfffffffffffffcd6, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [8916ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13201 #0 [8917ms] -> mount(0x0, 0x200004c0, 0x20000500, 0x0, 0x0) #0 [8918ms] <- mount=0x0 errno=14 cover=10480 #0 [8919ms] -> syz_open_procfs(0x0, 0x20000000) #0 [8919ms] <- syz_open_procfs=0x3 errno=14 cover=2610 #0 [8919ms] -> readv(0x3, 0x20001600, 0x1) #0 [8919ms] <- readv=0x602 errno=14 cover=12433 umount(./28/file0) 2021/11/11 15:14:52 result hanged=false: 2021/11/11 15:14:52 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffffffffffcd6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 15:14:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x0) [8957ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 67 #0 [8970ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [8971ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5971 #0 [8972ms] -> syz_genetlink_get_family_id$ieee802154(0x20000040, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) #0 [8973ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5257 #0 [8973ms] -> sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0x4, 0x200001c0, 0x0) #0 [8974ms] <- sendmsg$IEEE802154_LLSEC_DEL_DEVKEY=0x2c errno=14 cover=3917 enabling collider #0 [8975ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [8976ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5255 #1 [8977ms] -> sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0x4, 0x200001c0, 0x0) #1 [8977ms] <- sendmsg$IEEE802154_LLSEC_DEL_DEVKEY=0x2c errno=14 cover=1692 #0 [8977ms] -> syz_genetlink_get_family_id$ieee802154(0x20000040, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) netlink_send_ext: short netlink write: -1/40 errno=9 netlink: failed to get family id for 802.15.4 MAC: Bad file descriptor syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [8977ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=9 cover=1123 15:14:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x0) 2021/11/11 15:14:52 result hanged=false: 2021/11/11 15:14:52 #0: triaging type=7 2021/11/11 15:14:52 triaging input for call #2 sendmsg$IEEE802154_LLSEC_DEL_DEVKEY (new signal=11) [9006ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 70 #0 [9015ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [9015ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6349 #0 [9016ms] -> syz_genetlink_get_family_id$ieee802154(0x20000040, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) #0 [9016ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5232 #0 [9017ms] -> sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0x4, 0x200001c0, 0x0) #0 [9017ms] <- sendmsg$IEEE802154_LLSEC_DEL_DEVKEY=0x2c errno=14 cover=1537 15:14:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x0) 2021/11/11 15:14:52 result hanged=false: [9036ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 72 #0 [9042ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [9043ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5870 #0 [9045ms] -> syz_genetlink_get_family_id$ieee802154(0x20000040, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) #0 [9046ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5259 #0 [9046ms] -> sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0x4, 0x200001c0, 0x0) #0 [9047ms] <- sendmsg$IEEE802154_LLSEC_DEL_DEVKEY=0x2c errno=14 cover=1579 2021/11/11 15:14:52 result hanged=false: 15:14:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x0) [9070ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74 #0 [9076ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [9077ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6140 #0 [9078ms] -> syz_genetlink_get_family_id$ieee802154(0x20000040, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) #0 [9079ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5248 #0 [9080ms] -> sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0x4, 0x200001c0, 0x0) #0 [9080ms] <- sendmsg$IEEE802154_LLSEC_DEL_DEVKEY=0x2c errno=14 cover=1582 2021/11/11 15:14:52 result hanged=false: 2021/11/11 15:14:52 added new input for call #2 sendmsg$IEEE802154_LLSEC_DEL_DEVKEY to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x0) 15:14:52 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000002f80), 0x0, 0x0) [9096ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76 #0 [9102ms] -> syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x20002f80, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [9111ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=8636 enabling collider #0 [9117ms] -> syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x20002f80, 0x0, 0x0) #0 [9119ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=16 cover=4111 2021/11/11 15:14:52 result hanged=false: 15:14:52 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@nr_inodes={'nr_inodes', 0x3d, [0x67]}}]}) [9136ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78 #0 [9144ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [9156ms] <- perf_event_open=0x3 errno=14 cover=8827 #0 [9156ms] -> syz_mount_image$tmpfs(0x20000340, 0x20000380, 0x0, 0x0, 0x0, 0x0, 0x20000480) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='nr_inodes=g,' #0 [9168ms] <- syz_mount_image$tmpfs=0x4 errno=0 cover=62880 enabling collider #0 [9181ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [9182ms] <- perf_event_open=0x3 errno=14 cover=7701 #0 [9182ms] -> syz_mount_image$tmpfs(0x20000340, 0x20000380, 0x0, 0x0, 0x0, 0x0, 0x20000480) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='nr_inodes=g,' #0 [9187ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=13473 umount(./34/file0) 2021/11/11 15:14:52 result hanged=false: 2021/11/11 15:14:52 #0: triaging type=7 15:14:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@nr_inodes={'nr_inodes', 0x3d, [0x67]}}]}) umount(./34/file0) 2021/11/11 15:14:53 triaging input for call #1 syz_mount_image$tmpfs (new signal=3) [9225ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80 #0 [9233ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [9234ms] <- perf_event_open=0x3 errno=14 cover=7888 #0 [9235ms] -> syz_mount_image$tmpfs(0x20000340, 0x20000380, 0x0, 0x0, 0x0, 0x0, 0x20000480) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='nr_inodes=g,' #0 [9244ms] <- syz_mount_image$tmpfs=0x4 errno=0 cover=56800 2021/11/11 15:14:53 result hanged=false: 15:14:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@nr_inodes={'nr_inodes', 0x3d, [0x67]}}]}) umount(./35/file0) [9292ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82 #0 [9309ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [9310ms] <- perf_event_open=0x3 errno=14 cover=11594 #0 [9310ms] -> syz_mount_image$tmpfs(0x20000340, 0x20000380, 0x0, 0x0, 0x0, 0x0, 0x20000480) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='nr_inodes=g,' #0 [9312ms] <- syz_mount_image$tmpfs=0x4 errno=0 cover=12982 2021/11/11 15:14:53 result hanged=false: umount(./36/file0) 15:14:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@nr_inodes={'nr_inodes', 0x3d, [0x67]}}]}) [9357ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84 #0 [9372ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [9373ms] <- perf_event_open=0x3 errno=14 cover=9689 #0 [9375ms] -> syz_mount_image$tmpfs(0x20000340, 0x20000380, 0x0, 0x0, 0x0, 0x0, 0x20000480) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='nr_inodes=g,' #0 [9382ms] <- syz_mount_image$tmpfs=0x4 errno=0 cover=56536 2021/11/11 15:14:53 result hanged=false: umount(./37/file0) 2021/11/11 15:14:53 added new input for call #1 syz_mount_image$tmpfs to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@nr_inodes={'nr_inodes', 0x3d, [0x67]}}]}) 15:14:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@nr_inodes={'nr_inodes', 0x3d, [0x67]}}]}) [9426ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86 2021/11/11 15:14:53 #0: triaging type=7 2021/11/11 15:14:53 triaging input for call #0 perf_event_open (new signal=2) #0 [9433ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [9433ms] <- perf_event_open=0x3 errno=14 cover=9264 #0 [9435ms] -> syz_mount_image$tmpfs(0x20000340, 0x20000380, 0x0, 0x0, 0x0, 0x0, 0x20000480) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='nr_inodes=g,' #0 [9438ms] <- syz_mount_image$tmpfs=0x4 errno=0 cover=12827 2021/11/11 15:14:53 result hanged=false: 15:14:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@nr_inodes={'nr_inodes', 0x3d, [0x67]}}]}) umount(./38/file0) [9510ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88 #0 [9522ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [9525ms] <- perf_event_open=0x3 errno=14 cover=7830 #0 [9526ms] -> syz_mount_image$tmpfs(0x20000340, 0x20000380, 0x0, 0x0, 0x0, 0x0, 0x20000480) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='nr_inodes=g,' #0 [9534ms] <- syz_mount_image$tmpfs=0x4 errno=0 cover=56664 15:14:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@nr_inodes={'nr_inodes', 0x3d, [0x67]}}]}) 2021/11/11 15:14:53 result hanged=false: umount(./39/file0) iptable filter/10: resetting iptable mangle/10: resetting [9603ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 90 #0 [9613ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [9616ms] <- perf_event_open=0x3 errno=14 cover=10304 #0 [9618ms] -> syz_mount_image$tmpfs(0x20000340, 0x20000380, 0x0, 0x0, 0x0, 0x0, 0x20000480) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='nr_inodes=g,' #0 [9625ms] <- syz_mount_image$tmpfs=0x4 errno=0 cover=57116 2021/11/11 15:14:53 result hanged=false: 2021/11/11 15:14:53 added new input for call #0 perf_event_open to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@nr_inodes={'nr_inodes', 0x3d, [0x67]}}]}) umount(./40/file0) 15:14:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_GET_PACK_ID(r2, 0x2272, &(0x7f0000001c40)) [9730ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 92 #0 [9739ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [9745ms] <- syz_open_dev$sg=0x3 errno=14 cover=6889 #0 [9745ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [9745ms] <- socket$inet6_udp=0x4 errno=14 cover=1553 #0 [9746ms] -> fcntl$dupfd(0x3, 0x0, 0x4) #0 [9746ms] <- fcntl$dupfd=0x5 errno=14 cover=110 #0 [9746ms] -> ioctl$SG_GET_PACK_ID(0x5, 0x2272, 0x20001c40) #0 [9746ms] <- ioctl$SG_GET_PACK_ID=0x0 errno=14 cover=414 enabling collider #0 [9748ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [9748ms] <- syz_open_dev$sg=0x3 errno=14 cover=3610 #0 [9749ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [9750ms] <- socket$inet6_udp=0x4 errno=14 cover=1624 #1 [9751ms] -> fcntl$dupfd(0x3, 0x0, 0x4) #1 [9751ms] <- fcntl$dupfd=0x5 errno=14 cover=110 15:14:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_GET_PACK_ID(r2, 0x2272, &(0x7f0000001c40)) 2021/11/11 15:14:53 result hanged=false: 2021/11/11 15:14:53 #0: triaging type=7 2021/11/11 15:14:53 triaging input for call #3 ioctl$SG_GET_PACK_ID (new signal=4) iptable filter/10: resetting iptable mangle/10: resetting [9776ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 95 #0 [9788ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [9790ms] <- syz_open_dev$sg=0x3 errno=14 cover=1270 #0 [9791ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [9791ms] <- socket$inet6_udp=0x4 errno=14 cover=1564 #0 [9792ms] -> fcntl$dupfd(0x3, 0x0, 0x4) #0 [9792ms] <- fcntl$dupfd=0x5 errno=14 cover=110 #0 [9792ms] -> ioctl$SG_GET_PACK_ID(0x5, 0x2272, 0x20001c40) #0 [9792ms] <- ioctl$SG_GET_PACK_ID=0x0 errno=14 cover=385 2021/11/11 15:14:53 result hanged=false: 15:14:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_GET_PACK_ID(r2, 0x2272, &(0x7f0000001c40)) [9817ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 97 #0 [9826ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [9828ms] <- syz_open_dev$sg=0x3 errno=14 cover=1326 #0 [9829ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [9830ms] <- socket$inet6_udp=0x4 errno=14 cover=1564 #0 [9832ms] -> fcntl$dupfd(0x3, 0x0, 0x4) #0 [9832ms] <- fcntl$dupfd=0x5 errno=14 cover=110 #0 [9833ms] -> ioctl$SG_GET_PACK_ID(0x5, 0x2272, 0x20001c40) #0 [9833ms] <- ioctl$SG_GET_PACK_ID=0x0 errno=14 cover=439 15:14:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_GET_PACK_ID(r2, 0x2272, &(0x7f0000001c40)) 2021/11/11 15:14:53 result hanged=false: [9852ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 99 #0 [9862ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [9866ms] <- syz_open_dev$sg=0x3 errno=14 cover=1354 #0 [9867ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [9867ms] <- socket$inet6_udp=0x4 errno=14 cover=1607 #0 [9868ms] -> fcntl$dupfd(0x3, 0x0, 0x4) #0 [9868ms] <- fcntl$dupfd=0x5 errno=14 cover=110 #0 [9868ms] -> ioctl$SG_GET_PACK_ID(0x5, 0x2272, 0x20001c40) #0 [9868ms] <- ioctl$SG_GET_PACK_ID=0x0 errno=14 cover=385 2021/11/11 15:14:53 result hanged=false: 2021/11/11 15:14:53 added new input for call #3 ioctl$SG_GET_PACK_ID to corpus: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_GET_PACK_ID(r2, 0x2272, &(0x7f0000001c40)) 15:14:53 executing program 0: migrate_pages(0x0, 0xc8d, &(0x7f00000017c0), &(0x7f0000001800)=0x80000000) 2021/11/11 15:14:53 poll: candidates=8 inputs=0 signal=0 [9896ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101 #0 [9907ms] -> migrate_pages(0x0, 0xc8d, 0x200017c0, 0x20001800) #0 [9909ms] <- migrate_pages=0xffffffffffffffff errno=22 cover=114 enabling collider #0 [9909ms] -> migrate_pages(0x0, 0xc8d, 0x200017c0, 0x20001800) #0 [9910ms] <- migrate_pages=0xffffffffffffffff errno=22 cover=114 15:14:53 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x13, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001cc0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2021/11/11 15:14:53 result hanged=false: [9929ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103 #0 [9938ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [9943ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=20223 #0 [9944ms] -> setsockopt$inet6_int(0x3, 0x29, 0x5, 0x20000040, 0x4) #0 [9944ms] <- setsockopt$inet6_int=0x0 errno=14 cover=151 #0 [9945ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [9945ms] <- socket$inet6_udplite=0x4 errno=14 cover=1699 #0 [9945ms] -> sendmmsg$inet6(0x4, 0x20001cc0, 0x1, 0x0) #0 [9946ms] <- sendmmsg$inet6=0x1 errno=14 cover=4363 #0 [9946ms] -> recvmmsg(0x3, 0x20001100, 0x1, 0x0, 0x0) #0 [9946ms] <- recvmmsg=0x1 errno=14 cover=999 enabling collider #0 [9947ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [9948ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1584 #0 [9948ms] -> setsockopt$inet6_int(0x3, 0x29, 0x5, 0x20000040, 0x4) #0 [9948ms] <- setsockopt$inet6_int=0x0 errno=14 cover=151 #1 [9949ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #1 [9949ms] <- socket$inet6_udplite=0x4 errno=14 cover=1492 #0 [9949ms] -> sendmmsg$inet6(0x4, 0x20001cc0, 0x1, 0x0) #0 [9950ms] <- sendmmsg$inet6=0x1 errno=14 cover=1914 #1 [9950ms] -> recvmmsg(0x3, 0x20001100, 0x1, 0x0, 0x0) #1 [9950ms] <- recvmmsg=0x1 errno=14 cover=544 15:14:53 executing program 0: clone3(0x0, 0x0) 2021/11/11 15:14:53 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [9973ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106 #0 [9985ms] -> clone3(0x0, 0x0) #0 [9987ms] <- clone3=0xffffffffffffffff errno=22 cover=39 enabling collider #0 [9988ms] -> clone3(0x0, 0x0) #0 [9988ms] <- clone3=0xffffffffffffffff errno=22 cover=39 15:14:53 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)='\\\x00') 2021/11/11 15:14:53 result hanged=false: [10009ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108 #0 [10020ms] -> add_key$keyring(0x20000000, 0x20000040, 0x0, 0x0, 0xfffffffffffffffe) #0 [10023ms] <- add_key$keyring=0x3f6b92a5 errno=14 cover=8882 #0 [10024ms] -> keyctl$restrict_keyring(0x1d, 0x3f6b92a5, 0x20000080, 0x200000c0) #0 [10024ms] <- keyctl$restrict_keyring=0xffffffffffffffff errno=1 cover=362 enabling collider #0 [10024ms] -> add_key$keyring(0x20000000, 0x20000040, 0x0, 0x0, 0xfffffffffffffffe) #0 [10024ms] <- add_key$keyring=0xdbe8f3a errno=14 cover=1061 15:14:53 executing program 0: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)) 2021/11/11 15:14:53 result hanged=false: [10044ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110 #0 [10055ms] -> syz_genetlink_get_family_id$ieee802154(0x20000280, 0xffffffffffffffff) syz_genetlink_get_family_id(802.15.4 MAC, -1) netlink: failed to get family id for 802.15.4 MAC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [10060ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=2 cover=8291 #0 [10061ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [10061ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5894 #0 [10062ms] -> socketpair$nbd(0x1, 0x1, 0x0, 0x20000c40) #0 [10062ms] <- socketpair$nbd=0x0 errno=14 cover=2683 enabling collider #0 [10062ms] -> syz_genetlink_get_family_id$ieee802154(0x20000280, 0xffffffffffffffff) syz_genetlink_get_family_id(802.15.4 MAC, -1) netlink: failed to get family id for 802.15.4 MAC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [10063ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=2 cover=5425 #0 [10063ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #1 [10064ms] -> socketpair$nbd(0x1, 0x1, 0x0, 0x20000c40) #1 [10064ms] <- socketpair$nbd=0x0 errno=14 cover=2705 15:14:53 executing program 0: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)) 2021/11/11 15:14:53 result hanged=false: 2021/11/11 15:14:53 #0: triaging type=7 2021/11/11 15:14:53 triaging input for call #0 syz_genetlink_get_family_id$ieee802154 (new signal=2) [10084ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113 #0 [10091ms] -> syz_genetlink_get_family_id$ieee802154(0x20000280, 0xffffffffffffffff) syz_genetlink_get_family_id(802.15.4 MAC, -1) netlink: failed to get family id for 802.15.4 MAC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [10092ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=2 cover=8105 #0 [10094ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [10094ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6039 #0 [10096ms] -> socketpair$nbd(0x1, 0x1, 0x0, 0x20000c40) #0 [10096ms] <- socketpair$nbd=0x0 errno=14 cover=2751 15:14:53 executing program 0: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)) 2021/11/11 15:14:53 result hanged=false: [10117ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115 #0 [10132ms] -> syz_genetlink_get_family_id$ieee802154(0x20000280, 0xffffffffffffffff) syz_genetlink_get_family_id(802.15.4 MAC, -1) netlink: failed to get family id for 802.15.4 MAC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [10133ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=2 cover=9098 #0 [10135ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [10136ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5862 #0 [10138ms] -> socketpair$nbd(0x1, 0x1, 0x0, 0x20000c40) #0 [10139ms] <- socketpair$nbd=0x0 errno=14 cover=2661 15:14:53 executing program 0: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)) 2021/11/11 15:14:53 result hanged=false: [10164ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117 #0 [10179ms] -> syz_genetlink_get_family_id$ieee802154(0x20000280, 0xffffffffffffffff) syz_genetlink_get_family_id(802.15.4 MAC, -1) netlink: failed to get family id for 802.15.4 MAC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [10181ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=2 cover=8224 #0 [10184ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [10185ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5921 #0 [10187ms] -> socketpair$nbd(0x1, 0x1, 0x0, 0x20000c40) #0 [10188ms] <- socketpair$nbd=0x0 errno=14 cover=2697 2021/11/11 15:14:53 result hanged=false: 2021/11/11 15:14:53 added new input for call #0 syz_genetlink_get_family_id$ieee802154 to corpus: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)) 15:14:54 executing program 0: r0 = syz_io_uring_setup(0x2, &(0x7f0000000640)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_setup(0x3de1, &(0x7f0000000200)) r4 = eventfd(0x0) r5 = dup2(r3, r4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r5}, 0x0) r6 = dup2(r0, r5) io_uring_enter(r6, 0x1739, 0x0, 0x0, 0x0, 0x0) [10223ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 119 #0 [10235ms] -> syz_io_uring_setup(0x2, 0x20000640, 0x20ffb000, 0x20ffd000, 0x200005c0, 0x20000140) #0 [10244ms] <- syz_io_uring_setup=0x3 errno=14 cover=12292 #0 [10245ms] -> io_uring_setup(0x3de1, 0x20000200) #0 [10249ms] <- io_uring_setup=0x4 errno=14 cover=3629 #0 [10249ms] -> eventfd(0x0) #0 [10250ms] <- eventfd=0x5 errno=14 cover=1088 #0 [10250ms] -> dup2(0x4, 0x5) #0 [10251ms] <- dup2=0x5 errno=14 cover=1019 #0 [10251ms] -> syz_io_uring_submit(0x20ffb000, 0x20ffd000, 0x200000c0, 0x0) #0 [10252ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [10252ms] -> dup2(0x3, 0x5) #0 [10252ms] <- dup2=0x5 errno=14 cover=79 #0 [10252ms] -> io_uring_enter(0x5, 0x1739, 0x0, 0x0, 0x0, 0x0) #0 [10253ms] <- io_uring_enter=0x1 errno=14 cover=7924 enabling collider #0 [10253ms] -> syz_io_uring_setup(0x2, 0x20000640, 0x20ffb000, 0x20ffd000, 0x200005c0, 0x20000140) #0 [10257ms] <- syz_io_uring_setup=0x3 errno=14 cover=5259 #0 [10258ms] -> io_uring_setup(0x3de1, 0x20000200) #1 [10258ms] -> eventfd(0x0) #1 [10258ms] <- eventfd=0x4 errno=14 cover=535 #1 [10259ms] -> dup2(0x4, 0x4) #1 [10259ms] <- dup2=0x4 errno=14 cover=43 #2 [10260ms] -> syz_io_uring_submit(0x20ffb000, 0x20ffd000, 0x200000c0, 0x0) #2 [10260ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #2 [10260ms] -> io_uring_enter(0x5, 0x1739, 0x0, 0x0, 0x0, 0x0) #2 [10261ms] <- io_uring_enter=0xffffffffffffffff errno=9 cover=50 #1 [10262ms] -> dup2(0x3, 0x4) #1 [10262ms] <- dup2=0xffffffffffffffff errno=9 cover=48 2021/11/11 15:14:54 result hanged=false: 2021/11/11 15:14:54 #0: triaging type=7 2021/11/11 15:14:54 triaging input for call #6 io_uring_enter (new signal=2) 15:14:54 executing program 0: r0 = syz_io_uring_setup(0x2, &(0x7f0000000640)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_setup(0x3de1, &(0x7f0000000200)) r4 = eventfd(0x0) r5 = dup2(r3, r4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r5}, 0x0) r6 = dup2(r0, r5) io_uring_enter(r6, 0x1739, 0x0, 0x0, 0x0, 0x0) [10294ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 123 #0 [10307ms] -> syz_io_uring_setup(0x2, 0x20000640, 0x20ffb000, 0x20ffd000, 0x200005c0, 0x20000140) #0 [10316ms] <- syz_io_uring_setup=0x3 errno=14 cover=7113 #0 [10318ms] -> io_uring_setup(0x3de1, 0x20000200) #0 [10319ms] <- io_uring_setup=0x4 errno=14 cover=3563 #0 [10320ms] -> eventfd(0x0) #0 [10320ms] <- eventfd=0x5 errno=14 cover=479 #0 [10321ms] -> dup2(0x4, 0x5) #0 [10321ms] <- dup2=0x5 errno=14 cover=572 #0 [10323ms] -> syz_io_uring_submit(0x20ffb000, 0x20ffd000, 0x200000c0, 0x0) #0 [10323ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [10323ms] -> dup2(0x3, 0x5) #0 [10323ms] <- dup2=0x5 errno=14 cover=79 #0 [10324ms] -> io_uring_enter(0x5, 0x1739, 0x0, 0x0, 0x0, 0x0) #0 [10324ms] <- io_uring_enter=0x1 errno=14 cover=507 15:14:54 executing program 0: r0 = syz_io_uring_setup(0x2, &(0x7f0000000640)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_setup(0x3de1, &(0x7f0000000200)) r4 = eventfd(0x0) r5 = dup2(r3, r4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r5}, 0x0) r6 = dup2(r0, r5) io_uring_enter(r6, 0x1739, 0x0, 0x0, 0x0, 0x0) [10342ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 15:14:54 result hanged=false: spawned worker pid 125 #0 [10351ms] -> syz_io_uring_setup(0x2, 0x20000640, 0x20ffb000, 0x20ffd000, 0x200005c0, 0x20000140) #0 [10358ms] <- syz_io_uring_setup=0x3 errno=14 cover=7315 #0 [10360ms] -> io_uring_setup(0x3de1, 0x20000200) #0 [10365ms] <- io_uring_setup=0x4 errno=14 cover=3647 #0 [10366ms] -> eventfd(0x0) #0 [10366ms] <- eventfd=0x5 errno=14 cover=479 #0 [10366ms] -> dup2(0x4, 0x5) #0 [10366ms] <- dup2=0x5 errno=14 cover=572 #0 [10366ms] -> syz_io_uring_submit(0x20ffb000, 0x20ffd000, 0x200000c0, 0x0) #0 [10366ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [10366ms] -> dup2(0x3, 0x5) #0 [10366ms] <- dup2=0x5 errno=14 cover=79 #0 [10366ms] -> io_uring_enter(0x5, 0x1739, 0x0, 0x0, 0x0, 0x0) #0 [10367ms] <- io_uring_enter=0x1 errno=14 cover=507 15:14:54 executing program 0: r0 = syz_io_uring_setup(0x2, &(0x7f0000000640)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_setup(0x3de1, &(0x7f0000000200)) r4 = eventfd(0x0) r5 = dup2(r3, r4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r5}, 0x0) r6 = dup2(r0, r5) io_uring_enter(r6, 0x1739, 0x0, 0x0, 0x0, 0x0) 2021/11/11 15:14:54 result hanged=false: [10385ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 127 #0 [10395ms] -> syz_io_uring_setup(0x2, 0x20000640, 0x20ffb000, 0x20ffd000, 0x200005c0, 0x20000140) #0 [10399ms] <- syz_io_uring_setup=0x3 errno=14 cover=7684 #0 [10401ms] -> io_uring_setup(0x3de1, 0x20000200) #0 [10403ms] <- io_uring_setup=0x4 errno=14 cover=3650 #0 [10403ms] -> eventfd(0x0) #0 [10404ms] <- eventfd=0x5 errno=14 cover=523 #0 [10404ms] -> dup2(0x4, 0x5) #0 [10404ms] <- dup2=0x5 errno=14 cover=572 #0 [10405ms] -> syz_io_uring_submit(0x20ffb000, 0x20ffd000, 0x200000c0, 0x0) #0 [10405ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [10406ms] -> dup2(0x3, 0x5) #0 [10406ms] <- dup2=0x5 errno=14 cover=79 #0 [10406ms] -> io_uring_enter(0x5, 0x1739, 0x0, 0x0, 0x0, 0x0) #0 [10406ms] <- io_uring_enter=0x1 errno=14 cover=507 2021/11/11 15:14:54 result hanged=false: 2021/11/11 15:14:54 added new input for call #6 io_uring_enter to corpus: r0 = syz_io_uring_setup(0x2, &(0x7f0000000640)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_setup(0x3de1, &(0x7f0000000200)) r4 = eventfd(0x0) r5 = dup2(r3, r4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r5}, 0x0) r6 = dup2(r0, r5) io_uring_enter(r6, 0x1739, 0x0, 0x0, 0x0, 0x0) 15:14:54 executing program 0: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)) chmod(&(0x7f0000000640)='./file0\x00', 0x0) iptable filter/10: resetting iptable mangle/10: resetting [10459ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 129 #0 [10473ms] -> syz_mount_image$iso9660(0x200000c0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x20000180) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='iso9660' flags=1 opts='' syz_mount_image > mount error: 22 #0 [10474ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=22 cover=2228 #0 [10474ms] -> chmod(0x20000640, 0x0) #0 [10474ms] <- chmod=0x0 errno=14 cover=1322 enabling collider #0 [10475ms] -> syz_mount_image$iso9660(0x200000c0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x20000180) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='iso9660' flags=1 opts='' syz_mount_image > mount error: 22 #0 [10475ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=22 cover=2257 15:14:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nf_conntrack\x00') pread64(r0, &(0x7f0000000280)=""/233, 0xe9, 0x0) 2021/11/11 15:14:54 result hanged=false: [10495ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 131 #0 [10500ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [10649ms] <- perf_event_open=0x3 errno=14 cover=12314 #0 [10649ms] -> ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) #0 [10649ms] <- ioctl$SECCOMP_IOCTL_NOTIF_RECV=0xffffffffffffffff errno=9 cover=45 #0 [10649ms] -> syz_open_procfs(0x0, 0x20000080) #0 [10650ms] <- syz_open_procfs=0x4 errno=13 cover=7748 #0 [10650ms] -> pread64(0x4, 0x20000280, 0xe9, 0x0) #0 [10651ms] <- pread64=0x0 errno=14 cover=51800 enabling collider #0 [10907ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [10908ms] <- perf_event_open=0x3 errno=14 cover=10598 #0 [10909ms] -> ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) #0 [10909ms] <- ioctl$SECCOMP_IOCTL_NOTIF_RECV=0xffffffffffffffff errno=9 cover=45 #1 [10909ms] -> syz_open_procfs(0x0, 0x20000080) #1 [10910ms] <- syz_open_procfs=0x4 errno=13 cover=6399 #0 [10910ms] -> pread64(0x4, 0x20000280, 0xe9, 0x0) #0 [10912ms] <- pread64=0x0 errno=14 cover=49523 15:14:54 executing program 0: syz_open_dev$hiddev(0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000001580)) 2021/11/11 15:14:54 result hanged=false: [10939ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 134 #0 [10945ms] -> syz_open_dev$hiddev(0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [10946ms] <- syz_open_dev$hiddev=0xffffffffffffffff errno=14 cover=1104 #0 [10946ms] -> getrusage(0x0, 0x20001580) #0 [10946ms] <- getrusage=0x0 errno=14 cover=735 enabling collider #0 [10946ms] -> syz_open_dev$hiddev(0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [10946ms] <- syz_open_dev$hiddev=0xffffffffffffffff errno=14 cover=757 2021/11/11 15:14:54 poll: candidates=8 inputs=0 signal=0 15:14:54 executing program 0: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x719, &(0x7f0000000380), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 2021/11/11 15:14:54 result hanged=false: [10959ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 136 #0 [10964ms] -> pkey_mprotect(0x20ffc000, 0x3000, 0x0, 0xffffffffffffffff) #0 [10964ms] <- pkey_mprotect=0x0 errno=14 cover=526 #0 [10965ms] -> syz_io_uring_setup(0x719, 0x20000380, 0x20ffd000, 0x20ffd000, 0x20000400, 0x20000440) #0 [10968ms] <- syz_io_uring_setup=0x3 errno=14 cover=7940 enabling collider #0 [10968ms] -> pkey_mprotect(0x20ffc000, 0x3000, 0x0, 0xffffffffffffffff) #0 [10968ms] <- pkey_mprotect=0x0 errno=14 cover=488 15:14:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 2021/11/11 15:14:54 result hanged=false: [10981ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 138 #0 [10988ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [10991ms] <- perf_event_open=0x3 errno=14 cover=12328 #0 [10991ms] -> pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [10991ms] <- pread64=0xffffffffffffffff errno=9 cover=75 enabling collider #0 [11000ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [11001ms] <- perf_event_open=0x3 errno=14 cover=10877 #0 [11001ms] -> pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [11001ms] <- pread64=0xffffffffffffffff errno=9 cover=46 15:14:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000002c0)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@local, 0x0, 0x33}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}]}, 0x13c}}, 0x0) 2021/11/11 15:14:54 result hanged=false: [11026ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 140 #0 [11032ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [11033ms] <- perf_event_open=0x3 errno=14 cover=10711 #0 [11033ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [11034ms] <- socket$nl_xfrm=0x4 errno=14 cover=19333 #0 [11034ms] -> sendmsg$nl_xfrm(0x4, 0x20002e00, 0x0) #0 [11087ms] <- sendmsg$nl_xfrm=0x13c errno=14 cover=51156 enabling collider #0 [11098ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [11100ms] <- perf_event_open=0x3 errno=14 cover=10433 #0 [11101ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [11102ms] <- socket$nl_xfrm=0x4 errno=14 cover=4229 #1 [11101ms] -> sendmsg$nl_xfrm(0x4, 0x20002e00, 0x0) #1 [11104ms] <- sendmsg$nl_xfrm=0x13c errno=14 cover=2503 15:14:54 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="f000000019000100000000000000000000000000280000000000000000000000ffffffff000000000000000000000000000000000000020002"], 0xf0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000002c0)={{0x0, 0x9, 0x5, 0xa655, 0x8000, 0x6, 0x1f94276, 0x5, 0xa27a, 0xfffffc01, 0x4, 0x6, 0x7f, 0x8000, 0x200}, 0x10, [0x0, 0x0]}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) 2021/11/11 15:14:54 result hanged=false: [11134ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 143 #0 [11144ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [11148ms] <- syz_init_net_socket$bt_sco=0x4 errno=14 cover=8390 #0 [11149ms] -> getsockopt$IP_VS_SO_GET_DAEMON(0x4, 0x0, 0x487, 0x0, 0x20000080) #0 [11150ms] <- getsockopt$IP_VS_SO_GET_DAEMON=0xffffffffffffffff errno=92 cover=2168 #0 [11150ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [11150ms] <- perf_event_open=0x3 errno=14 cover=10161 #0 [11151ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [11152ms] <- socket$nl_xfrm=0x5 errno=14 cover=4349 #0 [11152ms] -> sendmsg$nl_xfrm(0x5, 0x20000000, 0x0) #0 [11154ms] <- sendmsg$nl_xfrm=0xf0 errno=14 cover=24744 #0 [11155ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [11156ms] <- socket$nl_netfilter=0x6 errno=14 cover=22513 #0 [11156ms] -> sendmsg$IPCTNL_MSG_EXP_GET(0x6, 0x200000c0, 0x0) #0 [11157ms] <- sendmsg$IPCTNL_MSG_EXP_GET=0x50 errno=14 cover=4490 #0 [11157ms] -> ioctl$BTRFS_IOC_TREE_SEARCH_V2(0x6, 0xc0709411, 0x200002c0) #0 [11157ms] <- ioctl$BTRFS_IOC_TREE_SEARCH_V2=0xffffffffffffffff errno=25 cover=166 #0 [11157ms] -> sendmsg$nl_xfrm(0x5, 0x20000180, 0x0) #0 [11158ms] <- sendmsg$nl_xfrm=0x10 errno=14 cover=13316 #0 [11158ms] -> syz_io_uring_setup(0x1, 0x20000080, 0x20ffd000, 0x20ffc000, 0x200001c0, 0x20000140) #0 [11159ms] <- syz_io_uring_setup=0x7 errno=14 cover=21711 #0 [11159ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [11160ms] <- socket$nl_netfilter=0x8 errno=14 cover=4146 #0 [11160ms] -> sendmsg$IPCTNL_MSG_EXP_GET(0x8, 0x200000c0, 0x0) #0 [11160ms] <- sendmsg$IPCTNL_MSG_EXP_GET=0x50 errno=14 cover=4360 enabling collider #0 [11171ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [11172ms] <- syz_init_net_socket$bt_sco=0x4 errno=14 cover=5146 #0 [11172ms] -> getsockopt$IP_VS_SO_GET_DAEMON(0x4, 0x0, 0x487, 0x0, 0x20000080) #1 [11172ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [11172ms] <- getsockopt$IP_VS_SO_GET_DAEMON=0xffffffffffffffff errno=92 cover=114 #1 [11173ms] <- perf_event_open=0x3 errno=14 cover=10526 #1 [11174ms] -> sendmsg$nl_xfrm(0x5, 0x20000000, 0x0) #1 [11174ms] <- sendmsg$nl_xfrm=0xffffffffffffffff errno=9 cover=82 #0 [11175ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [11175ms] <- socket$nl_xfrm=0x5 errno=14 cover=1304 #1 [11175ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #2 [11176ms] -> sendmsg$IPCTNL_MSG_EXP_GET(0x6, 0x200000c0, 0x0) #2 [11178ms] <- sendmsg$IPCTNL_MSG_EXP_GET=0xffffffffffffffff errno=9 cover=53 #0 [11179ms] -> ioctl$BTRFS_IOC_TREE_SEARCH_V2(0x6, 0xc0709411, 0x200002c0) #0 [11179ms] <- ioctl$BTRFS_IOC_TREE_SEARCH_V2=0xffffffffffffffff errno=9 cover=46 #2 [11179ms] -> sendmsg$nl_xfrm(0x5, 0x20000180, 0x0) #1 [11179ms] <- socket$nl_netfilter=0x6 errno=14 cover=21231 #2 [11179ms] <- sendmsg$nl_xfrm=0x10 errno=14 cover=1154 #1 [11179ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #1 [11180ms] <- socket$nl_netfilter=0x7 errno=14 cover=4294 #0 [11181ms] -> syz_io_uring_setup(0x1, 0x20000080, 0x20ffd000, 0x20ffc000, 0x200001c0, 0x20000140) #1 [11181ms] -> sendmsg$IPCTNL_MSG_EXP_GET(0x7, 0x200000c0, 0x0) #1 [11182ms] <- sendmsg$IPCTNL_MSG_EXP_GET=0x50 errno=14 cover=1491 #0 [11182ms] <- syz_io_uring_setup=0x3 errno=14 cover=5310 2021/11/11 15:14:54 result hanged=false: 2021/11/11 15:14:54 #0: triaging type=7 2021/11/11 15:14:54 triaging input for call #11 sendmsg$IPCTNL_MSG_EXP_GET (new signal=2) 15:14:54 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="f000000019000100000000000000000000000000280000000000000000000000ffffffff000000000000000000000000000000000000020002"], 0xf0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000002c0)={{0x0, 0x9, 0x5, 0xa655, 0x8000, 0x6, 0x1f94276, 0x5, 0xa27a, 0xfffffc01, 0x4, 0x6, 0x7f, 0x8000, 0x200}, 0x10, [0x0, 0x0]}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) [11214ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 147 #0 [11224ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [11226ms] <- syz_init_net_socket$bt_sco=0x4 errno=14 cover=6020 #0 [11227ms] -> getsockopt$IP_VS_SO_GET_DAEMON(0x4, 0x0, 0x487, 0x0, 0x20000080) #0 [11227ms] <- getsockopt$IP_VS_SO_GET_DAEMON=0xffffffffffffffff errno=92 cover=114 #0 [11227ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [11228ms] <- perf_event_open=0x3 errno=14 cover=10248 #0 [11229ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [11231ms] <- socket$nl_xfrm=0x5 errno=14 cover=4313 #0 [11231ms] -> sendmsg$nl_xfrm(0x5, 0x20000000, 0x0) #0 [11235ms] <- sendmsg$nl_xfrm=0xf0 errno=14 cover=7984 #0 [11236ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [11236ms] <- socket$nl_netfilter=0x6 errno=14 cover=4935 #0 [11237ms] -> sendmsg$IPCTNL_MSG_EXP_GET(0x6, 0x200000c0, 0x0) #0 [11237ms] <- sendmsg$IPCTNL_MSG_EXP_GET=0x50 errno=14 cover=4464 #0 [11238ms] -> ioctl$BTRFS_IOC_TREE_SEARCH_V2(0x6, 0xc0709411, 0x200002c0) #0 [11238ms] <- ioctl$BTRFS_IOC_TREE_SEARCH_V2=0xffffffffffffffff errno=25 cover=166 #0 [11238ms] -> sendmsg$nl_xfrm(0x5, 0x20000180, 0x0) #0 [11240ms] <- sendmsg$nl_xfrm=0x10 errno=14 cover=4946 #0 [11241ms] -> syz_io_uring_setup(0x1, 0x20000080, 0x20ffd000, 0x20ffc000, 0x200001c0, 0x20000140) #0 [11244ms] <- syz_io_uring_setup=0x7 errno=14 cover=22253 #0 [11246ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [11248ms] <- socket$nl_netfilter=0x8 errno=14 cover=4393 #0 [11248ms] -> sendmsg$IPCTNL_MSG_EXP_GET(0x8, 0x200000c0, 0x0) #0 [11250ms] <- sendmsg$IPCTNL_MSG_EXP_GET=0x50 errno=14 cover=4450 15:14:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="f000000019000100000000000000000000000000280000000000000000000000ffffffff000000000000000000000000000000000000020002"], 0xf0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000002c0)={{0x0, 0x9, 0x5, 0xa655, 0x8000, 0x6, 0x1f94276, 0x5, 0xa27a, 0xfffffc01, 0x4, 0x6, 0x7f, 0x8000, 0x200}, 0x10, [0x0, 0x0]}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) 2021/11/11 15:14:55 result hanged=false: [11279ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 149 #0 [11290ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [11294ms] <- syz_init_net_socket$bt_sco=0x4 errno=14 cover=5910 #0 [11295ms] -> getsockopt$IP_VS_SO_GET_DAEMON(0x4, 0x0, 0x487, 0x0, 0x20000080) #0 [11296ms] <- getsockopt$IP_VS_SO_GET_DAEMON=0xffffffffffffffff errno=92 cover=114 #0 [11296ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [11297ms] <- perf_event_open=0x3 errno=14 cover=10334 #0 [11298ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [11299ms] <- socket$nl_xfrm=0x5 errno=14 cover=4099 #0 [11300ms] -> sendmsg$nl_xfrm(0x5, 0x20000000, 0x0) #0 [11303ms] <- sendmsg$nl_xfrm=0xf0 errno=14 cover=7941 #0 [11304ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [11305ms] <- socket$nl_netfilter=0x6 errno=14 cover=4309 #0 [11305ms] -> sendmsg$IPCTNL_MSG_EXP_GET(0x6, 0x200000c0, 0x0) #0 [11306ms] <- sendmsg$IPCTNL_MSG_EXP_GET=0x50 errno=14 cover=4250 #0 [11306ms] -> ioctl$BTRFS_IOC_TREE_SEARCH_V2(0x6, 0xc0709411, 0x200002c0) #0 [11306ms] <- ioctl$BTRFS_IOC_TREE_SEARCH_V2=0xffffffffffffffff errno=25 cover=166 #0 [11307ms] -> sendmsg$nl_xfrm(0x5, 0x20000180, 0x0) #0 [11307ms] <- sendmsg$nl_xfrm=0x10 errno=14 cover=4869 #0 [11308ms] -> syz_io_uring_setup(0x1, 0x20000080, 0x20ffd000, 0x20ffc000, 0x200001c0, 0x20000140) #0 [11310ms] <- syz_io_uring_setup=0x7 errno=14 cover=21416 #0 [11312ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [11313ms] <- socket$nl_netfilter=0x8 errno=14 cover=4208 #0 [11313ms] -> sendmsg$IPCTNL_MSG_EXP_GET(0x8, 0x200000c0, 0x0) #0 [11313ms] <- sendmsg$IPCTNL_MSG_EXP_GET=0x50 errno=14 cover=4356 2021/11/11 15:14:55 result hanged=false: 15:14:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="f000000019000100000000000000000000000000280000000000000000000000ffffffff000000000000000000000000000000000000020002"], 0xf0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000002c0)={{0x0, 0x9, 0x5, 0xa655, 0x8000, 0x6, 0x1f94276, 0x5, 0xa27a, 0xfffffc01, 0x4, 0x6, 0x7f, 0x8000, 0x200}, 0x10, [0x0, 0x0]}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) [11345ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 151 #0 [11357ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [11358ms] <- syz_init_net_socket$bt_sco=0x4 errno=14 cover=5935 #0 [11359ms] -> getsockopt$IP_VS_SO_GET_DAEMON(0x4, 0x0, 0x487, 0x0, 0x20000080) #0 [11359ms] <- getsockopt$IP_VS_SO_GET_DAEMON=0xffffffffffffffff errno=92 cover=114 #0 [11359ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [11360ms] <- perf_event_open=0x3 errno=14 cover=10367 #0 [11362ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [11362ms] <- socket$nl_xfrm=0x5 errno=14 cover=4102 #0 [11363ms] -> sendmsg$nl_xfrm(0x5, 0x20000000, 0x0) #0 [11366ms] <- sendmsg$nl_xfrm=0xf0 errno=14 cover=7944 #0 [11368ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [11368ms] <- socket$nl_netfilter=0x6 errno=14 cover=4309 #0 [11369ms] -> sendmsg$IPCTNL_MSG_EXP_GET(0x6, 0x200000c0, 0x0) #0 [11370ms] <- sendmsg$IPCTNL_MSG_EXP_GET=0x50 errno=14 cover=4212 #0 [11371ms] -> ioctl$BTRFS_IOC_TREE_SEARCH_V2(0x6, 0xc0709411, 0x200002c0) #0 [11371ms] <- ioctl$BTRFS_IOC_TREE_SEARCH_V2=0xffffffffffffffff errno=25 cover=166 #0 [11371ms] -> sendmsg$nl_xfrm(0x5, 0x20000180, 0x0) #0 [11372ms] <- sendmsg$nl_xfrm=0x10 errno=14 cover=4857 #0 [11373ms] -> syz_io_uring_setup(0x1, 0x20000080, 0x20ffd000, 0x20ffc000, 0x200001c0, 0x20000140) #0 [11375ms] <- syz_io_uring_setup=0x7 errno=14 cover=21604 #0 [11377ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [11377ms] <- socket$nl_netfilter=0x8 errno=14 cover=4798 #0 [11378ms] -> sendmsg$IPCTNL_MSG_EXP_GET(0x8, 0x200000c0, 0x0) #0 [11379ms] <- sendmsg$IPCTNL_MSG_EXP_GET=0x50 errno=14 cover=4419 2021/11/11 15:14:55 result hanged=false: 2021/11/11 15:14:55 added new input for call #11 sendmsg$IPCTNL_MSG_EXP_GET to corpus: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="f000000019000100000000000000000000000000280000000000000000000000ffffffff000000000000000000000000000000000000020002"], 0xf0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000002c0)={{0x0, 0x9, 0x5, 0xa655, 0x8000, 0x6, 0x1f94276, 0x5, 0xa27a, 0xfffffc01, 0x4, 0x6, 0x7f, 0x8000, 0x200}, 0x10, [0x0, 0x0]}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) 15:14:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="f000000019000100000000000000000000000000280000000000000000000000ffffffff000000000000000000000000000000000000020002"], 0xf0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000002c0)={{0x0, 0x9, 0x5, 0xa655, 0x8000, 0x6, 0x1f94276, 0x5, 0xa27a, 0xfffffc01, 0x4, 0x6, 0x7f, 0x8000, 0x200}, 0x10, [0x0, 0x0]}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) [11419ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 15:14:55 #0: triaging type=7 2021/11/11 15:14:55 triaging input for call #8 sendmsg$nl_xfrm (new signal=1) spawned worker pid 153 #0 [11428ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [11430ms] <- syz_init_net_socket$bt_sco=0x4 errno=14 cover=5867 #0 [11433ms] -> getsockopt$IP_VS_SO_GET_DAEMON(0x4, 0x0, 0x487, 0x0, 0x20000080) #0 [11433ms] <- getsockopt$IP_VS_SO_GET_DAEMON=0xffffffffffffffff errno=92 cover=114 #0 [11434ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [11435ms] <- perf_event_open=0x3 errno=14 cover=10848 #0 [11437ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [11437ms] <- socket$nl_xfrm=0x5 errno=14 cover=5657 #0 [11439ms] -> sendmsg$nl_xfrm(0x5, 0x20000000, 0x0) #0 [11441ms] <- sendmsg$nl_xfrm=0xf0 errno=14 cover=7918 #0 [11443ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [11443ms] <- socket$nl_netfilter=0x6 errno=14 cover=4541 #0 [11445ms] -> sendmsg$IPCTNL_MSG_EXP_GET(0x6, 0x200000c0, 0x0) #0 [11445ms] <- sendmsg$IPCTNL_MSG_EXP_GET=0x50 errno=14 cover=4242 #0 [11446ms] -> ioctl$BTRFS_IOC_TREE_SEARCH_V2(0x6, 0xc0709411, 0x200002c0) #0 [11446ms] <- ioctl$BTRFS_IOC_TREE_SEARCH_V2=0xffffffffffffffff errno=25 cover=166 #0 [11447ms] -> sendmsg$nl_xfrm(0x5, 0x20000180, 0x0) #0 [11447ms] <- sendmsg$nl_xfrm=0x10 errno=14 cover=4860 #0 [11448ms] -> syz_io_uring_setup(0x1, 0x20000080, 0x20ffd000, 0x20ffc000, 0x200001c0, 0x20000140) #0 [11450ms] <- syz_io_uring_setup=0x7 errno=14 cover=24453 #0 [11453ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [11453ms] <- socket$nl_netfilter=0x8 errno=14 cover=4327 #0 [11455ms] -> sendmsg$IPCTNL_MSG_EXP_GET(0x8, 0x200000c0, 0x0) #0 [11455ms] <- sendmsg$IPCTNL_MSG_EXP_GET=0x50 errno=14 cover=4361 2021/11/11 15:14:55 result hanged=false: 15:14:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="f000000019000100000000000000000000000000280000000000000000000000ffffffff000000000000000000000000000000000000020002"], 0xf0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000002c0)={{0x0, 0x9, 0x5, 0xa655, 0x8000, 0x6, 0x1f94276, 0x5, 0xa27a, 0xfffffc01, 0x4, 0x6, 0x7f, 0x8000, 0x200}, 0x10, [0x0, 0x0]}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) [11487ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 155 #0 [11494ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [11496ms] <- syz_init_net_socket$bt_sco=0x4 errno=14 cover=5919 #0 [11503ms] -> getsockopt$IP_VS_SO_GET_DAEMON(0x4, 0x0, 0x487, 0x0, 0x20000080) #0 [11504ms] <- getsockopt$IP_VS_SO_GET_DAEMON=0xffffffffffffffff errno=92 cover=114 #0 [11504ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [11506ms] <- perf_event_open=0x3 errno=14 cover=10276 #0 [11507ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [11509ms] <- socket$nl_xfrm=0x5 errno=14 cover=27968 #0 [11511ms] -> sendmsg$nl_xfrm(0x5, 0x20000000, 0x0) #0 [11514ms] <- sendmsg$nl_xfrm=0xf0 errno=14 cover=7999 #0 [11516ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [11517ms] <- socket$nl_netfilter=0x6 errno=14 cover=4525 #0 [11518ms] -> sendmsg$IPCTNL_MSG_EXP_GET(0x6, 0x200000c0, 0x0) #0 [11519ms] <- sendmsg$IPCTNL_MSG_EXP_GET=0x50 errno=14 cover=4295 #0 [11520ms] -> ioctl$BTRFS_IOC_TREE_SEARCH_V2(0x6, 0xc0709411, 0x200002c0) #0 [11520ms] <- ioctl$BTRFS_IOC_TREE_SEARCH_V2=0xffffffffffffffff errno=25 cover=166 #0 [11520ms] -> sendmsg$nl_xfrm(0x5, 0x20000180, 0x0) #0 [11522ms] <- sendmsg$nl_xfrm=0x10 errno=14 cover=4888 #0 [11523ms] -> syz_io_uring_setup(0x1, 0x20000080, 0x20ffd000, 0x20ffc000, 0x200001c0, 0x20000140) #0 [11526ms] <- syz_io_uring_setup=0x7 errno=14 cover=22576 #0 [11528ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [11529ms] <- socket$nl_netfilter=0x8 errno=14 cover=4157 #0 [11530ms] -> sendmsg$IPCTNL_MSG_EXP_GET(0x8, 0x200000c0, 0x0) #0 [11531ms] <- sendmsg$IPCTNL_MSG_EXP_GET=0x50 errno=14 cover=4351 2021/11/11 15:14:55 result hanged=false: 15:14:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="f000000019000100000000000000000000000000280000000000000000000000ffffffff000000000000000000000000000000000000020002"], 0xf0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000002c0)={{0x0, 0x9, 0x5, 0xa655, 0x8000, 0x6, 0x1f94276, 0x5, 0xa27a, 0xfffffc01, 0x4, 0x6, 0x7f, 0x8000, 0x200}, 0x10, [0x0, 0x0]}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) [11565ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 157 #0 [11574ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [11575ms] <- syz_init_net_socket$bt_sco=0x4 errno=14 cover=5919 #0 [11577ms] -> getsockopt$IP_VS_SO_GET_DAEMON(0x4, 0x0, 0x487, 0x0, 0x20000080) #0 [11577ms] <- getsockopt$IP_VS_SO_GET_DAEMON=0xffffffffffffffff errno=92 cover=114 #0 [11577ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [11578ms] <- perf_event_open=0x3 errno=14 cover=10294 #0 [11580ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [11581ms] <- socket$nl_xfrm=0x5 errno=14 cover=4211 #0 [11581ms] -> sendmsg$nl_xfrm(0x5, 0x20000000, 0x0) #0 [11585ms] <- sendmsg$nl_xfrm=0xf0 errno=14 cover=8408 #0 [11585ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [11586ms] <- socket$nl_netfilter=0x6 errno=14 cover=4221 #0 [11586ms] -> sendmsg$IPCTNL_MSG_EXP_GET(0x6, 0x200000c0, 0x0) #0 [11587ms] <- sendmsg$IPCTNL_MSG_EXP_GET=0x50 errno=14 cover=4369 #0 [11588ms] -> ioctl$BTRFS_IOC_TREE_SEARCH_V2(0x6, 0xc0709411, 0x200002c0) #0 [11588ms] <- ioctl$BTRFS_IOC_TREE_SEARCH_V2=0xffffffffffffffff errno=25 cover=166 #0 [11588ms] -> sendmsg$nl_xfrm(0x5, 0x20000180, 0x0) #0 [11590ms] <- sendmsg$nl_xfrm=0x10 errno=14 cover=5449 #0 [11591ms] -> syz_io_uring_setup(0x1, 0x20000080, 0x20ffd000, 0x20ffc000, 0x200001c0, 0x20000140) #0 [11598ms] <- syz_io_uring_setup=0x7 errno=14 cover=23283 #0 [11600ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [11601ms] <- socket$nl_netfilter=0x8 errno=14 cover=4379 #0 [11602ms] -> sendmsg$IPCTNL_MSG_EXP_GET(0x8, 0x200000c0, 0x0) #0 [11603ms] <- sendmsg$IPCTNL_MSG_EXP_GET=0x50 errno=14 cover=4499 2021/11/11 15:14:55 result hanged=false: 2021/11/11 15:14:55 added new input for call #8 sendmsg$nl_xfrm to corpus: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="f000000019000100000000000000000000000000280000000000000000000000ffffffff000000000000000000000000000000000000020002"], 0xf0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000002c0)={{0x0, 0x9, 0x5, 0xa655, 0x8000, 0x6, 0x1f94276, 0x5, 0xa27a, 0xfffffc01, 0x4, 0x6, 0x7f, 0x8000, 0x200}, 0x10, [0x0, 0x0]}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) 15:14:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="f000000019000100000000000000000000000000280000000000000000000000ffffffff000000000000000000000000000000000000020002"], 0xf0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000002c0)={{0x0, 0x9, 0x5, 0xa655, 0x8000, 0x6, 0x1f94276, 0x5, 0xa27a, 0xfffffc01, 0x4, 0x6, 0x7f, 0x8000, 0x200}, 0x10, [0x0, 0x0]}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) [11637ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 15:14:55 #0: triaging type=7 2021/11/11 15:14:55 triaging input for call #1 getsockopt$IP_VS_SO_GET_DAEMON (new signal=1) spawned worker pid 159 #0 [11645ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [11646ms] <- syz_init_net_socket$bt_sco=0x4 errno=14 cover=5885 #0 [11647ms] -> getsockopt$IP_VS_SO_GET_DAEMON(0x4, 0x0, 0x487, 0x0, 0x20000080) #0 [11647ms] <- getsockopt$IP_VS_SO_GET_DAEMON=0xffffffffffffffff errno=92 cover=114 #0 [11647ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [11648ms] <- perf_event_open=0x3 errno=14 cover=10498 #0 [11649ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [11649ms] <- socket$nl_xfrm=0x5 errno=14 cover=4200 #0 [11649ms] -> sendmsg$nl_xfrm(0x5, 0x20000000, 0x0) #0 [11653ms] <- sendmsg$nl_xfrm=0xf0 errno=14 cover=8043 #0 [11653ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [11654ms] <- socket$nl_netfilter=0x6 errno=14 cover=4962 #0 [11654ms] -> sendmsg$IPCTNL_MSG_EXP_GET(0x6, 0x200000c0, 0x0) #0 [11654ms] <- sendmsg$IPCTNL_MSG_EXP_GET=0x50 errno=14 cover=4261 #0 [11655ms] -> ioctl$BTRFS_IOC_TREE_SEARCH_V2(0x6, 0xc0709411, 0x200002c0) #0 [11655ms] <- ioctl$BTRFS_IOC_TREE_SEARCH_V2=0xffffffffffffffff errno=25 cover=166 #0 [11655ms] -> sendmsg$nl_xfrm(0x5, 0x20000180, 0x0) #0 [11655ms] <- sendmsg$nl_xfrm=0x10 errno=14 cover=4956 #0 [11656ms] -> syz_io_uring_setup(0x1, 0x20000080, 0x20ffd000, 0x20ffc000, 0x200001c0, 0x20000140) #0 [11663ms] <- syz_io_uring_setup=0x7 errno=14 cover=23176 #0 [11665ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [11665ms] <- socket$nl_netfilter=0x8 errno=14 cover=4077 #0 [11666ms] -> sendmsg$IPCTNL_MSG_EXP_GET(0x8, 0x200000c0, 0x0) #0 [11666ms] <- sendmsg$IPCTNL_MSG_EXP_GET=0x50 errno=14 cover=4319 15:14:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="f000000019000100000000000000000000000000280000000000000000000000ffffffff000000000000000000000000000000000000020002"], 0xf0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000002c0)={{0x0, 0x9, 0x5, 0xa655, 0x8000, 0x6, 0x1f94276, 0x5, 0xa27a, 0xfffffc01, 0x4, 0x6, 0x7f, 0x8000, 0x200}, 0x10, [0x0, 0x0]}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) 2021/11/11 15:14:55 result hanged=false: [11693ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 161 #0 [11702ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [11705ms] <- syz_init_net_socket$bt_sco=0x4 errno=14 cover=5902 #0 [11706ms] -> getsockopt$IP_VS_SO_GET_DAEMON(0x4, 0x0, 0x487, 0x0, 0x20000080) #0 [11706ms] <- getsockopt$IP_VS_SO_GET_DAEMON=0xffffffffffffffff errno=92 cover=114 #0 [11706ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [11708ms] <- perf_event_open=0x3 errno=14 cover=10414 #0 [11710ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [11710ms] <- socket$nl_xfrm=0x5 errno=14 cover=4186 #0 [11711ms] -> sendmsg$nl_xfrm(0x5, 0x20000000, 0x0) #0 [11714ms] <- sendmsg$nl_xfrm=0xf0 errno=14 cover=7909 #0 [11715ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [11716ms] <- socket$nl_netfilter=0x6 errno=14 cover=4790 #0 [11717ms] -> sendmsg$IPCTNL_MSG_EXP_GET(0x6, 0x200000c0, 0x0) #0 [11718ms] <- sendmsg$IPCTNL_MSG_EXP_GET=0x50 errno=14 cover=4399 #0 [11719ms] -> ioctl$BTRFS_IOC_TREE_SEARCH_V2(0x6, 0xc0709411, 0x200002c0) #0 [11719ms] <- ioctl$BTRFS_IOC_TREE_SEARCH_V2=0xffffffffffffffff errno=25 cover=166 #0 [11719ms] -> sendmsg$nl_xfrm(0x5, 0x20000180, 0x0) #0 [11720ms] <- sendmsg$nl_xfrm=0x10 errno=14 cover=4771 #0 [11720ms] -> syz_io_uring_setup(0x1, 0x20000080, 0x20ffd000, 0x20ffc000, 0x200001c0, 0x20000140) #0 [11728ms] <- syz_io_uring_setup=0x7 errno=14 cover=23938 #0 [11730ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [11731ms] <- socket$nl_netfilter=0x8 errno=14 cover=4113 #0 [11732ms] -> sendmsg$IPCTNL_MSG_EXP_GET(0x8, 0x200000c0, 0x0) #0 [11733ms] <- sendmsg$IPCTNL_MSG_EXP_GET=0x50 errno=14 cover=4340 15:14:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="f000000019000100000000000000000000000000280000000000000000000000ffffffff000000000000000000000000000000000000020002"], 0xf0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000002c0)={{0x0, 0x9, 0x5, 0xa655, 0x8000, 0x6, 0x1f94276, 0x5, 0xa27a, 0xfffffc01, 0x4, 0x6, 0x7f, 0x8000, 0x200}, 0x10, [0x0, 0x0]}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) 2021/11/11 15:14:55 result hanged=false: [11766ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 163 #0 [11773ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [11775ms] <- syz_init_net_socket$bt_sco=0x4 errno=14 cover=5953 #0 [11776ms] -> getsockopt$IP_VS_SO_GET_DAEMON(0x4, 0x0, 0x487, 0x0, 0x20000080) #0 [11776ms] <- getsockopt$IP_VS_SO_GET_DAEMON=0xffffffffffffffff errno=92 cover=114 #0 [11777ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [11777ms] <- perf_event_open=0x3 errno=14 cover=10736 #0 [11778ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [11778ms] <- socket$nl_xfrm=0x5 errno=14 cover=4259 #0 [11779ms] -> sendmsg$nl_xfrm(0x5, 0x20000000, 0x0) #0 [11782ms] <- sendmsg$nl_xfrm=0xf0 errno=14 cover=7924 #0 [11783ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [11784ms] <- socket$nl_netfilter=0x6 errno=14 cover=4910 #0 [11784ms] -> sendmsg$IPCTNL_MSG_EXP_GET(0x6, 0x200000c0, 0x0) #0 [11784ms] <- sendmsg$IPCTNL_MSG_EXP_GET=0x50 errno=14 cover=4257 #0 [11785ms] -> ioctl$BTRFS_IOC_TREE_SEARCH_V2(0x6, 0xc0709411, 0x200002c0) #0 [11785ms] <- ioctl$BTRFS_IOC_TREE_SEARCH_V2=0xffffffffffffffff errno=25 cover=166 #0 [11785ms] -> sendmsg$nl_xfrm(0x5, 0x20000180, 0x0) #0 [11785ms] <- sendmsg$nl_xfrm=0x10 errno=14 cover=4771 #0 [11786ms] -> syz_io_uring_setup(0x1, 0x20000080, 0x20ffd000, 0x20ffc000, 0x200001c0, 0x20000140) #0 [11796ms] <- syz_io_uring_setup=0x7 errno=14 cover=23462 #0 [11797ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [11798ms] <- socket$nl_netfilter=0x8 errno=14 cover=4871 #0 [11798ms] -> sendmsg$IPCTNL_MSG_EXP_GET(0x8, 0x200000c0, 0x0) #0 [11799ms] <- sendmsg$IPCTNL_MSG_EXP_GET=0x50 errno=14 cover=4298 2021/11/11 15:14:55 result hanged=false: 2021/11/11 15:14:55 added new input for call #1 getsockopt$IP_VS_SO_GET_DAEMON to corpus: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="f000000019000100000000000000000000000000280000000000000000000000ffffffff000000000000000000000000000000000000020002"], 0xf0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000002c0)={{0x0, 0x9, 0x5, 0xa655, 0x8000, 0x6, 0x1f94276, 0x5, 0xa27a, 0xfffffc01, 0x4, 0x6, 0x7f, 0x8000, 0x200}, 0x10, [0x0, 0x0]}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001802c00018014000300fc020000be544d31000000000000000000000000141c000000000000000000000c000280050001"], 0x50}}, 0x0) 15:14:55 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x40, 0x4) [11833ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 165 #0 [11842ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) #0 [11844ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=8686 #0 [11845ms] -> setsockopt$bt_l2cap_L2CAP_LM(0x4, 0x6, 0x3, 0x20000040, 0x4) #0 [11846ms] <- setsockopt$bt_l2cap_L2CAP_LM=0xffffffffffffffff errno=22 cover=3369 enabling collider #0 [11847ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) #0 [11848ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=7616 2021/11/11 15:14:55 result hanged=false: 2021/11/11 15:14:55 #0: triaging type=7 2021/11/11 15:14:55 triaging input for call #1 setsockopt$bt_l2cap_L2CAP_LM (new signal=1) 15:14:55 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x40, 0x4) [11866ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 167 #0 [11876ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) #0 [11879ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6011 #0 [11881ms] -> setsockopt$bt_l2cap_L2CAP_LM(0x4, 0x6, 0x3, 0x20000040, 0x4) #0 [11882ms] <- setsockopt$bt_l2cap_L2CAP_LM=0xffffffffffffffff errno=22 cover=133 15:14:55 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x40, 0x4) 2021/11/11 15:14:55 result hanged=false: [11903ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 169 #0 [11911ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) #0 [11911ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6019 #0 [11913ms] -> setsockopt$bt_l2cap_L2CAP_LM(0x4, 0x6, 0x3, 0x20000040, 0x4) #0 [11913ms] <- setsockopt$bt_l2cap_L2CAP_LM=0xffffffffffffffff errno=22 cover=133 15:14:55 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x40, 0x4) 2021/11/11 15:14:55 result hanged=false: [11935ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 171 #0 [11943ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) #0 [11946ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6059 #0 [11947ms] -> setsockopt$bt_l2cap_L2CAP_LM(0x4, 0x6, 0x3, 0x20000040, 0x4) #0 [11947ms] <- setsockopt$bt_l2cap_L2CAP_LM=0xffffffffffffffff errno=22 cover=133 2021/11/11 15:14:55 result hanged=false: 2021/11/11 15:14:55 added new input for call #1 setsockopt$bt_l2cap_L2CAP_LM to corpus: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x40, 0x4) 15:14:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/mdstat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [11969ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 173 #0 [11976ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [11978ms] <- perf_event_open=0x3 errno=14 cover=10427 #0 [11980ms] -> openat$procfs(0xffffffffffffff9c, 0x20001280, 0x0, 0x0) #0 [11981ms] <- openat$procfs=0x4 errno=14 cover=10208 #0 [11982ms] -> pread64(0x4, 0x20000040, 0x101e, 0x0) #0 [11983ms] <- pread64=0x28 errno=14 cover=5476 enabling collider #0 [12000ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [12001ms] <- perf_event_open=0x3 errno=14 cover=10358 #1 [12001ms] -> pread64(0x4, 0x20000040, 0x101e, 0x0) #1 [12001ms] <- pread64=0xffffffffffffffff errno=9 cover=47 #0 [12001ms] -> openat$procfs(0xffffffffffffff9c, 0x20001280, 0x0, 0x0) #0 [12002ms] <- openat$procfs=0x3 errno=14 cover=1203 2021/11/11 15:14:55 result hanged=false: 2021/11/11 15:14:55 #0: triaging type=7 2021/11/11 15:14:55 triaging input for call #2 pread64 (new signal=2) 15:14:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/mdstat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [12035ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 176 #0 [12045ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [12045ms] <- perf_event_open=0x3 errno=14 cover=10345 #0 [12048ms] -> openat$procfs(0xffffffffffffff9c, 0x20001280, 0x0, 0x0) #0 [12048ms] <- openat$procfs=0x4 errno=14 cover=1323 #0 [12051ms] -> pread64(0x4, 0x20000040, 0x101e, 0x0) #0 [12051ms] <- pread64=0x28 errno=14 cover=896 2021/11/11 15:14:55 result hanged=false: 15:14:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/mdstat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [12086ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 178 #0 [12097ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [12098ms] <- perf_event_open=0x3 errno=14 cover=10469 #0 [12100ms] -> openat$procfs(0xffffffffffffff9c, 0x20001280, 0x0, 0x0) #0 [12101ms] <- openat$procfs=0x4 errno=14 cover=3801 #0 [12102ms] -> pread64(0x4, 0x20000040, 0x101e, 0x0) #0 [12102ms] <- pread64=0x28 errno=14 cover=1915 15:14:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/mdstat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 2021/11/11 15:14:55 result hanged=false: [12130ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 180 #0 [12139ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [12140ms] <- perf_event_open=0x3 errno=14 cover=10324 #0 [12142ms] -> openat$procfs(0xffffffffffffff9c, 0x20001280, 0x0, 0x0) #0 [12142ms] <- openat$procfs=0x4 errno=14 cover=4749 #0 [12143ms] -> pread64(0x4, 0x20000040, 0x101e, 0x0) #0 [12143ms] <- pread64=0x28 errno=14 cover=1933 2021/11/11 15:14:55 result hanged=false: 2021/11/11 15:14:55 added new input for call #2 pread64 to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/mdstat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 15:14:55 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x14, 0xfffffffffffffffc}) [12180ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 182 #0 [12189ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x200000c0) #0 [12190ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0xffffffffffffffff errno=14 cover=3158 enabling collider #0 [12194ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x200000c0) #0 [12194ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0xffffffffffffffff errno=14 cover=3139 15:14:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_SETMODE(r0, 0x560f, 0x0) 2021/11/11 15:14:56 result hanged=false: 2021/11/11 15:14:56 poll: candidates=8 inputs=0 signal=0 [12218ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 184 #0 [12227ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [12238ms] <- syz_open_dev$tty20=0x3 errno=14 cover=22197 #0 [12239ms] -> ioctl$VT_SETMODE(0x3, 0x560f, 0x0) #0 [12239ms] <- ioctl$VT_SETMODE=0xffffffffffffffff errno=14 cover=526 enabling collider #0 [12242ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [12243ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3362 #0 [12243ms] -> ioctl$VT_SETMODE(0x3, 0x560f, 0x0) #0 [12243ms] <- ioctl$VT_SETMODE=0xffffffffffffffff errno=9 cover=46 15:14:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_SETMODE(r0, 0x560f, 0x0) 2021/11/11 15:14:56 result hanged=false: 2021/11/11 15:14:56 #0: triaging type=7 2021/11/11 15:14:56 triaging input for call #1 ioctl$VT_SETMODE (new signal=4) [12268ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 186 #0 [12277ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [12278ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3257 #0 [12280ms] -> ioctl$VT_SETMODE(0x3, 0x560f, 0x0) #0 [12282ms] <- ioctl$VT_SETMODE=0xffffffffffffffff errno=14 cover=526 15:14:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_SETMODE(r0, 0x560f, 0x0) 2021/11/11 15:14:56 result hanged=false: [12309ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 188 #0 [12318ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [12318ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3275 #0 [12319ms] -> ioctl$VT_SETMODE(0x3, 0x560f, 0x0) #0 [12319ms] <- ioctl$VT_SETMODE=0xffffffffffffffff errno=14 cover=526 15:14:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_SETMODE(r0, 0x560f, 0x0) 2021/11/11 15:14:56 result hanged=false: [12338ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 190 #0 [12347ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [12348ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3267 #0 [12349ms] -> ioctl$VT_SETMODE(0x3, 0x560f, 0x0) #0 [12349ms] <- ioctl$VT_SETMODE=0xffffffffffffffff errno=14 cover=526 2021/11/11 15:14:56 result hanged=false: 2021/11/11 15:14:56 added new input for call #1 ioctl$VT_SETMODE to corpus: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_SETMODE(r0, 0x560f, 0x0) 2021/11/11 15:14:56 #0: triaging type=7 15:14:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_SETMODE(r0, 0x560f, 0x0) [12373ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 192 2021/11/11 15:14:56 triaging input for call #0 syz_open_dev$tty20 (new signal=2) #0 [12381ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [12382ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3377 #0 [12383ms] -> ioctl$VT_SETMODE(0x3, 0x560f, 0x0) #0 [12383ms] <- ioctl$VT_SETMODE=0xffffffffffffffff errno=14 cover=526 15:14:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_SETMODE(r0, 0x560f, 0x0) 2021/11/11 15:14:56 result hanged=false: [12404ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 194 #0 [12413ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [12414ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3245 #0 [12414ms] -> ioctl$VT_SETMODE(0x3, 0x560f, 0x0) #0 [12415ms] <- ioctl$VT_SETMODE=0xffffffffffffffff errno=14 cover=526 15:14:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_SETMODE(r0, 0x560f, 0x0) [12436ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 15:14:56 result hanged=false: spawned worker pid 196 #0 [12446ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [12447ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3232 #0 [12448ms] -> ioctl$VT_SETMODE(0x3, 0x560f, 0x0) #0 [12448ms] <- ioctl$VT_SETMODE=0xffffffffffffffff errno=14 cover=526 2021/11/11 15:14:56 result hanged=false: 2021/11/11 15:14:56 added new input for call #0 syz_open_dev$tty20 to corpus: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_SETMODE(r0, 0x560f, 0x0) 15:14:56 executing program 0: syz_genetlink_get_family_id$SEG6(&(0x7f0000001140), 0xffffffffffffffff) [12477ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 198 #0 [12486ms] -> syz_genetlink_get_family_id$SEG6(0x20001140, 0xffffffffffffffff) syz_genetlink_get_family_id(SEG6, -1) #0 [12487ms] <- syz_genetlink_get_family_id$SEG6=0x1f errno=14 cover=7819 enabling collider #0 [12493ms] -> syz_genetlink_get_family_id$SEG6(0x20001140, 0xffffffffffffffff) syz_genetlink_get_family_id(SEG6, -1) #0 [12494ms] <- syz_genetlink_get_family_id$SEG6=0x1f errno=14 cover=6299 15:14:56 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x3ff, 0x4) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x1b) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 2021/11/11 15:14:56 result hanged=false: [12515ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 200 #0 [12524ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [12525ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1748 #0 [12526ms] -> setsockopt$inet6_int(0x3, 0x29, 0x8, 0x20000000, 0x4) #0 [12526ms] <- setsockopt$inet6_int=0x0 errno=14 cover=151 #0 [12526ms] -> sendto(0x3, 0x20000040, 0x4, 0x0, 0x200000c0, 0x1b) #0 [12528ms] <- sendto=0x4 errno=14 cover=7763 #0 [12532ms] -> recvmmsg(0x3, 0x20001a00, 0x300, 0x10062, 0x0) #0 [12536ms] <- recvmmsg=0x300 errno=14 cover=155901 enabling collider #0 [12539ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [12540ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1588 #0 [12541ms] -> setsockopt$inet6_int(0x3, 0x29, 0x8, 0x20000000, 0x4) #0 [12541ms] <- setsockopt$inet6_int=0x0 errno=14 cover=151 #1 [12542ms] -> sendto(0x3, 0x20000040, 0x4, 0x0, 0x200000c0, 0x1b) #1 [12542ms] <- sendto=0x4 errno=14 cover=1968 #0 [12543ms] -> recvmmsg(15:14:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x2000000000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x382, r1}) 2021/11/11 15:14:56 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [12564ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 203 #0 [12572ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [12574ms] <- openat=0x3 errno=14 cover=6803 #0 [12577ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [12578ms] <- open=0x4 errno=14 cover=7369 #0 [12579ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [12579ms] <- openat=0x5 errno=14 cover=1171 #0 [12580ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [12581ms] <- openat=0x6 errno=14 cover=2593 #0 [12582ms] -> copy_file_range(0x6, 0x0, 0x5, 0x0, 0x200f5ef, 0x2000000000000) #0 [12692ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [12695ms] -> openat(0xffffffffffffff9c, 0x20000140, 0x105142, 0x0) #0 [12696ms] <- openat=0x7 errno=14 cover=1156 #0 [12696ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [12696ms] <- openat=0x8 errno=14 cover=2111 #0 [12696ms] -> copy_file_range(0x8, 0x0, 0x7, 0x0, 0x200f5ef, 0x0) #0 [12801ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [12804ms] -> ioctl$EXT4_IOC_MOVE_EXT(0x3, 0xc028660f, 0x20000040) #0 [13452ms] <- ioctl$EXT4_IOC_MOVE_EXT=0x0 errno=14 cover=262143 enabling collider #0 [13458ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [13458ms] <- openat=0xffffffffffffffff errno=17 cover=961 #0 [13459ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [13461ms] <- open=0xffffffffffffffff errno=17 cover=1026 #1 [13460ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #1 [13463ms] <- openat=0x3 errno=14 cover=1103 #1 [13464ms] -> copy_file_range(0x6, 0x0, 0x3, 0x0, 0x200f5ef, 0x2000000000000) #1 [13464ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=47 #0 [13465ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #1 [13465ms] -> openat(0xffffffffffffff9c, 0x20000140, 0x105142, 0x0) #1 [13465ms] <- openat=0x5 errno=14 cover=1069 #2 [13465ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [13465ms] <- openat=0x4 errno=14 cover=2054 #2 [13467ms] <- openat=0x6 errno=14 cover=2052 #1 [13467ms] -> ioctl$EXT4_IOC_MOVE_EXT(0x3, 0xc028660f, 0x20000040) #1 [13467ms] <- ioctl$EXT4_IOC_MOVE_EXT=0xffffffffffffffff errno=9 cover=148 #0 [13468ms] -> copy_file_range(0x6, 0x0, 0x5, 0x0, 0x200f5ef, 0x0) #0 [13468ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=47 15:14:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x2000000000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x382, r1}) 2021/11/11 15:14:57 result hanged=false: 2021/11/11 15:14:57 #0: triaging type=7 2021/11/11 15:14:57 triaging input for call #8 ioctl$EXT4_IOC_MOVE_EXT (new signal=4) iptable filter/10: resetting iptable mangle/10: resetting [13510ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 207 #0 [13520ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [13524ms] <- openat=0x3 errno=14 cover=6522 #0 [13526ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [13527ms] <- open=0x4 errno=14 cover=6565 #0 [13528ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [13528ms] <- openat=0x5 errno=14 cover=1069 #0 [13529ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [13529ms] <- openat=0x6 errno=14 cover=2603 #0 [13530ms] -> copy_file_range(0x6, 0x0, 0x5, 0x0, 0x200f5ef, 0x2000000000000) #0 [13634ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [13654ms] -> openat(0xffffffffffffff9c, 0x20000140, 0x105142, 0x0) #0 [13654ms] <- openat=0x7 errno=14 cover=1145 #0 [13655ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [13656ms] <- openat=0x8 errno=14 cover=2156 #0 [13657ms] -> copy_file_range(0x8, 0x0, 0x7, 0x0, 0x200f5ef, 0x0) #0 [13752ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [13773ms] -> ioctl$EXT4_IOC_MOVE_EXT(0x3, 0xc028660f, 0x20000040) #0 [14408ms] <- ioctl$EXT4_IOC_MOVE_EXT=0x0 errno=14 cover=262143 2021/11/11 15:14:58 result hanged=false: 15:14:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x2000000000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x382, r1}) iptable filter/10: resetting iptable mangle/10: resetting [14465ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 209 #0 [14476ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [14478ms] <- openat=0x3 errno=14 cover=6590 #0 [14479ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [14480ms] <- open=0x4 errno=14 cover=6639 #0 [14481ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [14481ms] <- openat=0x5 errno=14 cover=1081 #0 [14482ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [14483ms] <- openat=0x6 errno=14 cover=2592 #0 [14484ms] -> copy_file_range(0x6, 0x0, 0x5, 0x0, 0x200f5ef, 0x2000000000000) #0 [14591ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [14613ms] -> openat(0xffffffffffffff9c, 0x20000140, 0x105142, 0x0) #0 [14616ms] <- openat=0x7 errno=14 cover=1159 #0 [14616ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [14617ms] <- openat=0x8 errno=14 cover=2110 #0 [14618ms] -> copy_file_range(0x8, 0x0, 0x7, 0x0, 0x200f5ef, 0x0) #0 [14718ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [14737ms] -> ioctl$EXT4_IOC_MOVE_EXT(0x3, 0xc028660f, 0x20000040) 2021/11/11 15:14:58 poll: candidates=0 inputs=0 signal=0 #0 [15357ms] <- ioctl$EXT4_IOC_MOVE_EXT=0x0 errno=14 cover=262143 2021/11/11 15:14:59 result hanged=false: 15:14:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x2000000000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x382, r1}) iptable filter/10: resetting iptable mangle/10: resetting [15413ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 211 #0 [15422ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [15427ms] <- openat=0x3 errno=14 cover=7045 #0 [15430ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [15432ms] <- open=0x4 errno=14 cover=11495 #0 [15434ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [15434ms] <- openat=0x5 errno=14 cover=1081 #0 [15434ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [15435ms] <- openat=0x6 errno=14 cover=2516 #0 [15435ms] -> copy_file_range(0x6, 0x0, 0x5, 0x0, 0x200f5ef, 0x2000000000000) #0 [15541ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [15561ms] -> openat(0xffffffffffffff9c, 0x20000140, 0x105142, 0x0) #0 [15562ms] <- openat=0x7 errno=14 cover=1146 #0 [15563ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [15563ms] <- openat=0x8 errno=14 cover=2103 #0 [15563ms] -> copy_file_range(0x8, 0x0, 0x7, 0x0, 0x200f5ef, 0x0) #0 [15659ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [15679ms] -> ioctl$EXT4_IOC_MOVE_EXT(0x3, 0xc028660f, 0x20000040) #0 [16298ms] <- ioctl$EXT4_IOC_MOVE_EXT=0x0 errno=14 cover=262143 2021/11/11 15:15:00 result hanged=false: 2021/11/11 15:15:00 added new input for call #8 ioctl$EXT4_IOC_MOVE_EXT to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x2000000000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x382, r1}) 15:15:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x2000000000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x382, r1}) 2021/11/11 15:15:00 #0: triaging type=7 2021/11/11 15:15:00 triaging input for call #7 copy_file_range (new signal=2) [16357ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 213 #0 [16366ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [16367ms] <- openat=0x3 errno=14 cover=6643 #0 [16368ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [16369ms] <- open=0x4 errno=14 cover=6591 #0 [16369ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [16369ms] <- openat=0x5 errno=14 cover=1147 #0 [16370ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [16370ms] <- openat=0x6 errno=14 cover=2553 #0 [16371ms] -> copy_file_range(0x6, 0x0, 0x5, 0x0, 0x200f5ef, 0x2000000000000) #0 [16476ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [16496ms] -> openat(0xffffffffffffff9c, 0x20000140, 0x105142, 0x0) #0 [16501ms] <- openat=0x7 errno=14 cover=1156 #0 [16501ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [16501ms] <- openat=0x8 errno=14 cover=2067 #0 [16501ms] -> copy_file_range(0x8, 0x0, 0x7, 0x0, 0x200f5ef, 0x0) #0 [16597ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [16619ms] -> ioctl$EXT4_IOC_MOVE_EXT(0x3, 0xc028660f, 0x20000040) #0 [17242ms] <- ioctl$EXT4_IOC_MOVE_EXT=0x0 errno=14 cover=262143 15:15:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x2000000000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x382, r1}) 2021/11/11 15:15:01 result hanged=false: [17294ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 215 #0 [17303ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [17307ms] <- openat=0x3 errno=14 cover=6692 #0 [17308ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [17309ms] <- open=0x4 errno=14 cover=6565 #0 [17309ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [17309ms] <- openat=0x5 errno=14 cover=1080 #0 [17310ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [17310ms] <- openat=0x6 errno=14 cover=2588 #0 [17310ms] -> copy_file_range(0x6, 0x0, 0x5, 0x0, 0x200f5ef, 0x2000000000000) #0 [17421ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [17442ms] -> openat(0xffffffffffffff9c, 0x20000140, 0x105142, 0x0) #0 [17444ms] <- openat=0x7 errno=14 cover=1145 #0 [17444ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [17444ms] <- openat=0x8 errno=14 cover=2102 #0 [17445ms] -> copy_file_range(0x8, 0x0, 0x7, 0x0, 0x200f5ef, 0x0) #0 [17541ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [17562ms] -> ioctl$EXT4_IOC_MOVE_EXT(0x3, 0xc028660f, 0x20000040) #0 [18180ms] <- ioctl$EXT4_IOC_MOVE_EXT=0x0 errno=14 cover=262143 15:15:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x2000000000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x382, r1}) 2021/11/11 15:15:02 result hanged=false: [18231ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 217 #0 [18240ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [18244ms] <- openat=0x3 errno=14 cover=6536 #0 [18246ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [18250ms] <- open=0x4 errno=14 cover=11501 #0 [18252ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [18252ms] <- openat=0x5 errno=14 cover=1167 #0 [18252ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [18253ms] <- openat=0x6 errno=14 cover=2680 #0 [18254ms] -> copy_file_range(0x6, 0x0, 0x5, 0x0, 0x200f5ef, 0x2000000000000) #0 [18364ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [18385ms] -> openat(0xffffffffffffff9c, 0x20000140, 0x105142, 0x0) #0 [18386ms] <- openat=0x7 errno=14 cover=1184 #0 [18386ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [18386ms] <- openat=0x8 errno=14 cover=2012 #0 [18387ms] -> copy_file_range(0x8, 0x0, 0x7, 0x0, 0x200f5ef, 0x0) #0 [18486ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [18504ms] -> ioctl$EXT4_IOC_MOVE_EXT(0x3, 0xc028660f, 0x20000040)