ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d4f4655fd4f4655fd4f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012500)="ed41000000100000d4f4655fd4f4655fd4f4655f00000000000004000800000000000000050000000600"/64, 0x40, 0x4100}, {&(0x7f0000012600)="20000000e0915eece0915eec00000000d4f4655f00"/32, 0x20, 0x4180}, {&(0x7f0000012700)="c041000000300000d4f4655fd4f4655fd4f4655f000000000000020018000000000000000000000007000000080000000900"/64, 0x40, 0x4a00}, {&(0x7f0000012800)="20000000000000000000000000000000d4f4655f000000000000000000000000000002ea00"/64, 0x40, 0x4a80}, {&(0x7f0000012900)="ed4100003c000000d4f4655fd4f4655fd4f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000f3a2da0a00000000000000000000000000000000000000000000000020000000e0915eece0915eece0915eecd4f4655fe0915eec0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4b00}, {&(0x7f0000012a00)="ed8100001a040000d4f4655fd4f4655fd4f4655f00000000000001000800000000000000010000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000469bf71b00000000000000000000000000000000000000000000000020000000e0915eece0915eece0915eecd4f4655fe0915eec0000000000000000", 0xa0, 0x4c00}, {&(0x7f0000012b00)="ffa1000026000000d4f4655fd4f4655fd4f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3138343837333232382f66696c65302f66696c6530000000000000000000000000000000000000000000001f2a39ea00000000000000000000000000000000000000000000000020000000e0915eece0915eece0915eecd4f4655fe0915eec0000000000000000", 0xa0, 0x4d00}, {&(0x7f0000012c00)="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", 0x1a0, 0x4e00}, {&(0x7f0000012e00)="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", 0x100, 0x5000}, {&(0x7f0000012f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x6000}, {&(0x7f0000013000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x7000}, {&(0x7f0000013100)="00000000001000"/32, 0x20, 0x8000}, {&(0x7f0000013200)="00000000001000"/32, 0x20, 0x9000}, {&(0x7f0000013300)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xa000}], 0x0, &(0x7f0000013800)) umount(./1809/file0) [235244ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27140 #0 [235254ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x13, 0x20000200, 0x0, 0x20013800) syz_mount_image: size=262144 segs=19 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 305.188247] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [235278ms] <- syz_mount_image$ext4=0x5 errno=0 cover=52162 2021/11/11 15:08:50 result hanged=false: 15:08:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x13, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000001000028020000028400001b8000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31383438373332323800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000b24d313c8dc84f41bc0e395b508fe8cb010000000c00000000000000d4f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003500000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000010400)="ff3f000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d4f4655fd4f4655fd4f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012500)="ed41000000100000d4f4655fd4f4655fd4f4655f00000000000004000800000000000000050000000600"/64, 0x40, 0x4100}, {&(0x7f0000012600)="20000000e0915eece0915eec00000000d4f4655f00"/32, 0x20, 0x4180}, {&(0x7f0000012700)="c041000000300000d4f4655fd4f4655fd4f4655f000000000000020018000000000000000000000007000000080000000900"/64, 0x40, 0x4a00}, {&(0x7f0000012800)="20000000000000000000000000000000d4f4655f000000000000000000000000000002ea00"/64, 0x40, 0x4a80}, {&(0x7f0000012900)="ed4100003c000000d4f4655fd4f4655fd4f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000f3a2da0a00000000000000000000000000000000000000000000000020000000e0915eece0915eece0915eecd4f4655fe0915eec0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4b00}, {&(0x7f0000012a00)="ed8100001a040000d4f4655fd4f4655fd4f4655f00000000000001000800000000000000010000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000469bf71b00000000000000000000000000000000000000000000000020000000e0915eece0915eece0915eecd4f4655fe0915eec0000000000000000", 0xa0, 0x4c00}, {&(0x7f0000012b00)="ffa1000026000000d4f4655fd4f4655fd4f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3138343837333232382f66696c65302f66696c6530000000000000000000000000000000000000000000001f2a39ea00000000000000000000000000000000000000000000000020000000e0915eece0915eece0915eecd4f4655fe0915eec0000000000000000", 0xa0, 0x4d00}, {&(0x7f0000012c00)="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", 0x1a0, 0x4e00}, {&(0x7f0000012e00)="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", 0x100, 0x5000}, {&(0x7f0000012f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x6000}, {&(0x7f0000013000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x7000}, {&(0x7f0000013100)="00000000001000"/32, 0x20, 0x8000}, {&(0x7f0000013200)="00000000001000"/32, 0x20, 0x9000}, {&(0x7f0000013300)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xa000}], 0x0, &(0x7f0000013800)) umount(./1810/file0) [235329ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27142 #0 [235341ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x13, 0x20000200, 0x0, 0x20013800) syz_mount_image: size=262144 segs=19 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 305.275989] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [235365ms] <- syz_mount_image$ext4=0x5 errno=0 cover=60365 2021/11/11 15:08:50 result hanged=false: 15:08:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x13, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000001000028020000028400001b8000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31383438373332323800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000b24d313c8dc84f41bc0e395b508fe8cb010000000c00000000000000d4f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003500000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000010400)="ff3f000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d4f4655fd4f4655fd4f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012500)="ed41000000100000d4f4655fd4f4655fd4f4655f00000000000004000800000000000000050000000600"/64, 0x40, 0x4100}, {&(0x7f0000012600)="20000000e0915eece0915eec00000000d4f4655f00"/32, 0x20, 0x4180}, {&(0x7f0000012700)="c041000000300000d4f4655fd4f4655fd4f4655f000000000000020018000000000000000000000007000000080000000900"/64, 0x40, 0x4a00}, {&(0x7f0000012800)="20000000000000000000000000000000d4f4655f000000000000000000000000000002ea00"/64, 0x40, 0x4a80}, {&(0x7f0000012900)="ed4100003c000000d4f4655fd4f4655fd4f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000f3a2da0a00000000000000000000000000000000000000000000000020000000e0915eece0915eece0915eecd4f4655fe0915eec0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4b00}, {&(0x7f0000012a00)="ed8100001a040000d4f4655fd4f4655fd4f4655f00000000000001000800000000000000010000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000469bf71b00000000000000000000000000000000000000000000000020000000e0915eece0915eece0915eecd4f4655fe0915eec0000000000000000", 0xa0, 0x4c00}, {&(0x7f0000012b00)="ffa1000026000000d4f4655fd4f4655fd4f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3138343837333232382f66696c65302f66696c6530000000000000000000000000000000000000000000001f2a39ea00000000000000000000000000000000000000000000000020000000e0915eece0915eece0915eecd4f4655fe0915eec0000000000000000", 0xa0, 0x4d00}, {&(0x7f0000012c00)="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", 0x1a0, 0x4e00}, {&(0x7f0000012e00)="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", 0x100, 0x5000}, {&(0x7f0000012f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x6000}, {&(0x7f0000013000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x7000}, {&(0x7f0000013100)="00000000001000"/32, 0x20, 0x8000}, {&(0x7f0000013200)="00000000001000"/32, 0x20, 0x9000}, {&(0x7f0000013300)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xa000}], 0x0, &(0x7f0000013800)) umount(./1811/file0) [235413ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27144 #0 [235424ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x13, 0x20000200, 0x0, 0x20013800) syz_mount_image: size=262144 segs=19 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 305.357192] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [235447ms] <- syz_mount_image$ext4=0x5 errno=0 cover=60793 2021/11/11 15:08:50 result hanged=false: 2021/11/11 15:08:50 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x13, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000001000028020000028400001b8000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31383438373332323800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000b24d313c8dc84f41bc0e395b508fe8cb010000000c00000000000000d4f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003500000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000010400)="ff3f000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d4f4655fd4f4655fd4f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012500)="ed41000000100000d4f4655fd4f4655fd4f4655f00000000000004000800000000000000050000000600"/64, 0x40, 0x4100}, {&(0x7f0000012600)="20000000e0915eece0915eec00000000d4f4655f00"/32, 0x20, 0x4180}, {&(0x7f0000012700)="c041000000300000d4f4655fd4f4655fd4f4655f000000000000020018000000000000000000000007000000080000000900"/64, 0x40, 0x4a00}, {&(0x7f0000012800)="20000000000000000000000000000000d4f4655f000000000000000000000000000002ea00"/64, 0x40, 0x4a80}, {&(0x7f0000012900)="ed4100003c000000d4f4655fd4f4655fd4f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000f3a2da0a00000000000000000000000000000000000000000000000020000000e0915eece0915eece0915eecd4f4655fe0915eec0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4b00}, {&(0x7f0000012a00)="ed8100001a040000d4f4655fd4f4655fd4f4655f00000000000001000800000000000000010000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000469bf71b00000000000000000000000000000000000000000000000020000000e0915eece0915eece0915eecd4f4655fe0915eec0000000000000000", 0xa0, 0x4c00}, {&(0x7f0000012b00)="ffa1000026000000d4f4655fd4f4655fd4f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3138343837333232382f66696c65302f66696c6530000000000000000000000000000000000000000000001f2a39ea00000000000000000000000000000000000000000000000020000000e0915eece0915eece0915eecd4f4655fe0915eec0000000000000000", 0xa0, 0x4d00}, {&(0x7f0000012c00)="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", 0x1a0, 0x4e00}, {&(0x7f0000012e00)="ed81000064000000d4f4655fd4f4655fd4f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6ffb18ce00000000000000000000000000000000000000000000000020000000e0915eece0915eece0915eecd4f4655fe0915eec0000000000000000000002ea040734000000000028000000000000006461746100000000000000000000000000000000000000000000000000000000000000006c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273", 0x100, 0x5000}, {&(0x7f0000012f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x6000}, {&(0x7f0000013000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x7000}, {&(0x7f0000013100)="00000000001000"/32, 0x20, 0x8000}, {&(0x7f0000013200)="00000000001000"/32, 0x20, 0x9000}, {&(0x7f0000013300)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xa000}], 0x0, &(0x7f0000013800)) umount(./1812/file0) 15:08:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084502, 0x0) [235517ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27146 #0 [235525ms] -> syz_open_dev$evdev(0x20000040, 0x0, 0x0) #0 [235526ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1334 #0 [235526ms] -> ioctl$EVIOCSKEYCODE(0x3, 0x40084502, 0x0) #0 [235526ms] <- ioctl$EVIOCSKEYCODE=0xffffffffffffffff errno=22 cover=120 enabling collider #0 [235534ms] -> syz_open_dev$evdev(0x20000040, 0x0, 0x0) #0 [235534ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1344 #0 [235534ms] -> ioctl$EVIOCSKEYCODE(0x3, 0x40084502, 0x0) #0 [235534ms] <- ioctl$EVIOCSKEYCODE=0xffffffffffffffff errno=9 cover=46 2021/11/11 15:08:50 result hanged=false: 2021/11/11 15:08:50 #0: triaging type=7 15:08:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084502, 0x0) 2021/11/11 15:08:50 triaging input for call #1 ioctl$EVIOCSKEYCODE (new signal=1) [235565ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27148 #0 [235575ms] -> syz_open_dev$evdev(0x20000040, 0x0, 0x0) #0 [235576ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1313 #0 [235577ms] -> ioctl$EVIOCSKEYCODE(0x3, 0x40084502, 0x0) #0 [235577ms] <- ioctl$EVIOCSKEYCODE=0xffffffffffffffff errno=22 cover=120 15:08:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084502, 0x0) 2021/11/11 15:08:50 result hanged=false: [235614ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27150 #0 [235624ms] -> syz_open_dev$evdev(0x20000040, 0x0, 0x0) #0 [235624ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1290 #0 [235625ms] -> ioctl$EVIOCSKEYCODE(0x3, 0x40084502, 0x0) #0 [235625ms] <- ioctl$EVIOCSKEYCODE=0xffffffffffffffff errno=22 cover=120 15:08:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084502, 0x0) 2021/11/11 15:08:50 result hanged=false: [235657ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27152 #0 [235668ms] -> syz_open_dev$evdev(0x20000040, 0x0, 0x0) #0 [235670ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1291 #0 [235671ms] -> ioctl$EVIOCSKEYCODE(0x3, 0x40084502, 0x0) #0 [235671ms] <- ioctl$EVIOCSKEYCODE=0xffffffffffffffff errno=22 cover=120 2021/11/11 15:08:51 result hanged=false: 2021/11/11 15:08:51 added new input for call #1 ioctl$EVIOCSKEYCODE to corpus: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084502, 0x0) 15:08:51 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, "0000000000000000f100"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r1, r0, 0x0) [235711ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27154 #0 [235720ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [235720ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [235722ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [235725ms] <- openat$tun=0x3 errno=14 cover=1461 #0 [235725ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [235733ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=43687 #0 [235734ms] -> ioctl$TUNSETLINK(0x3, 0x400454cd, 0x30a) #0 [235734ms] <- ioctl$TUNSETLINK=0x0 errno=14 cover=132 #0 [235734ms] -> creat(0x20000040, 0x0) #0 [235735ms] <- creat=0x4 errno=14 cover=6819 #0 [235735ms] -> dup3(0x4, 0x3, 0x0) #0 [235746ms] <- dup3=0x3 errno=14 cover=45746 enabling collider #0 [235749ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [235749ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [235750ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [235751ms] <- openat$tun=0x3 errno=14 cover=1478 pthread_create failed (errno 11) 15:08:51 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, "0000000000000000f100"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r1, r0, 0x0) 2021/11/11 15:08:51 result hanged=false: 2021/11/11 15:08:51 #0: triaging type=7 2021/11/11 15:08:51 triaging input for call #5 dup3 (new signal=3) [235812ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27256 #0 [235823ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [235823ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [235823ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [235824ms] <- openat$tun=0x3 errno=14 cover=1407 #0 [235824ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [235830ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=44047 #0 [235833ms] -> ioctl$TUNSETLINK(0x3, 0x400454cd, 0x30a) #0 [235833ms] <- ioctl$TUNSETLINK=0x0 errno=14 cover=132 #0 [235833ms] -> creat(0x20000040, 0x0) #0 [235834ms] <- creat=0x4 errno=14 cover=6742 #0 [235834ms] -> dup3(0x4, 0x3, 0x0) #0 [235848ms] <- dup3=0x3 errno=14 cover=47470 15:08:51 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, "0000000000000000f100"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r1, r0, 0x0) 2021/11/11 15:08:51 result hanged=false: [235875ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27258 #0 [235886ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [235886ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [235887ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [235887ms] <- openat$tun=0x3 errno=14 cover=1396 #0 [235887ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [235896ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=43696 #0 [235908ms] -> ioctl$TUNSETLINK(0x3, 0x400454cd, 0x30a) #0 [235908ms] <- ioctl$TUNSETLINK=0x0 errno=14 cover=132 #0 [235908ms] -> creat(0x20000040, 0x0) #0 [235909ms] <- creat=0x4 errno=14 cover=6872 #0 [235910ms] -> dup3(0x4, 0x3, 0x0) #0 [235924ms] <- dup3=0x3 errno=14 cover=45417 15:08:51 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, "0000000000000000f100"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r1, r0, 0x0) 2021/11/11 15:08:51 result hanged=false: [235951ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27260 #0 [235963ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [235963ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [235963ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [235964ms] <- openat$tun=0x3 errno=14 cover=1386 #0 [235965ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [235971ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=44109 #0 [235975ms] -> ioctl$TUNSETLINK(0x3, 0x400454cd, 0x30a) #0 [235975ms] <- ioctl$TUNSETLINK=0x0 errno=14 cover=132 #0 [235975ms] -> creat(0x20000040, 0x0) #0 [235976ms] <- creat=0x4 errno=14 cover=6748 #0 [235977ms] -> dup3(0x4, 0x3, 0x0) #0 [235993ms] <- dup3=0x3 errno=14 cover=45743 2021/11/11 15:08:51 result hanged=false: 2021/11/11 15:08:51 added new input for call #5 dup3 to corpus: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, "0000000000000000f100"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r1, r0, 0x0) 15:08:51 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, "0000000000000000f100"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r1, r0, 0x0) [236037ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27262 2021/11/11 15:08:51 #0: triaging type=7 2021/11/11 15:08:51 triaging input for call #2 ioctl$TUNSETQUEUE (new signal=6) #0 [236046ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [236046ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [236046ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [236047ms] <- openat$tun=0x3 errno=14 cover=1396 #0 [236048ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [236055ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=44122 #0 [236058ms] -> ioctl$TUNSETLINK(0x3, 0x400454cd, 0x30a) #0 [236058ms] <- ioctl$TUNSETLINK=0x0 errno=14 cover=132 #0 [236058ms] -> creat(0x20000040, 0x0) #0 [236059ms] <- creat=0x4 errno=14 cover=6683 #0 [236061ms] -> dup3(0x4, 0x3, 0x0) #0 [236071ms] <- dup3=0x3 errno=14 cover=45666 15:08:51 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, "0000000000000000f100"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r1, r0, 0x0) 2021/11/11 15:08:51 result hanged=false: [236100ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27264 #0 [236110ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [236110ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [236112ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [236112ms] <- openat$tun=0x3 errno=14 cover=1450 #0 [236114ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [236124ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=43738 #0 [236128ms] -> ioctl$TUNSETLINK(0x3, 0x400454cd, 0x30a) #0 [236128ms] <- ioctl$TUNSETLINK=0x0 errno=14 cover=132 #0 [236128ms] -> creat(0x20000040, 0x0) #0 [236128ms] <- creat=0x4 errno=14 cover=6764 #0 [236129ms] -> dup3(0x4, 0x3, 0x0) #0 [236139ms] <- dup3=0x3 errno=14 cover=45370 15:08:51 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, "0000000000000000f100"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r1, r0, 0x0) 2021/11/11 15:08:51 result hanged=false: [236169ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27266 #0 [236182ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [236182ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [236184ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [236184ms] <- openat$tun=0x3 errno=14 cover=1483 #0 [236186ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [236194ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=43835 #0 [236198ms] -> ioctl$TUNSETLINK(0x3, 0x400454cd, 0x30a) #0 [236198ms] <- ioctl$TUNSETLINK=0x0 errno=14 cover=132 #0 [236198ms] -> creat(0x20000040, 0x0) #0 [236198ms] <- creat=0x4 errno=14 cover=6729 #0 [236200ms] -> dup3(0x4, 0x3, 0x0) #0 [236214ms] <- dup3=0x3 errno=14 cover=45546 2021/11/11 15:08:51 result hanged=false: 2021/11/11 15:08:51 added new input for call #2 ioctl$TUNSETQUEUE to corpus: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, "0000000000000000f100"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r1, r0, 0x0) 15:08:51 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000001bc0)=[{&(0x7f0000001980)="fb", 0x1}, {&(0x7f0000001a40)="c3", 0x1}], 0x0, 0x0) [236261ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27268 #0 [236271ms] -> syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, 0x20001bc0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [236272ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=10531 enabling collider #0 [236273ms] -> syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, 0x20001bc0, 0x0, 0x0) #0 [236275ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=16 cover=6321 2021/11/11 15:08:51 result hanged=false: 15:08:51 executing program 0: modify_ldt$write(0x1, &(0x7f0000000000), 0x10) modify_ldt$write(0xffffc90000000000, &(0x7f0000000280), 0x10) [236296ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27270 #0 [236307ms] -> modify_ldt$write(0x1, 0x20000000, 0x10) #0 [236308ms] <- modify_ldt$write=0x0 errno=14 cover=8962 #0 [236308ms] -> modify_ldt$write(0xffffc90000000000, 0x20000280, 0x10) #0 [236308ms] <- modify_ldt$write=0x10 errno=14 cover=2353 enabling collider #0 [236308ms] -> modify_ldt$write(0x1, 0x20000000, 0x10) #0 [236308ms] <- modify_ldt$write=0x0 errno=14 cover=1953 15:08:51 executing program 0: memfd_create(&(0x7f0000000c80)='\x00', 0x0) 2021/11/11 15:08:51 result hanged=false: [236329ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27272 #0 [236347ms] -> memfd_create(0x20000c80, 0x0) #0 [236347ms] <- memfd_create=0x3 errno=14 cover=1131 enabling collider #0 [236348ms] -> memfd_create(0x20000c80, 0x0) #0 [236348ms] <- memfd_create=0x3 errno=14 cover=1119 15:08:51 executing program 0: setns(0xffffffffffffffff, 0x0) 2021/11/11 15:08:51 result hanged=false: [236370ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27274 #0 [236381ms] -> setns(0xffffffffffffffff, 0x0) #0 [236382ms] <- setns=0xffffffffffffffff errno=9 cover=43 enabling collider #0 [236382ms] -> setns(0xffffffffffffffff, 0x0) #0 [236382ms] <- setns=0xffffffffffffffff errno=9 cover=43 15:08:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000000)=""/20, &(0x7f0000000100)=0x14) 2021/11/11 15:08:51 result hanged=false: 2021/11/11 15:08:51 poll: candidates=8 inputs=0 signal=0 [236406ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27276 #0 [236416ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [236418ms] <- socket$nl_generic=0x3 errno=14 cover=1412 #0 [236419ms] -> getsockopt$netlink(0x3, 0x10e, 0x3, 0x20000000, 0x20000100) #0 [236419ms] <- getsockopt$netlink=0x0 errno=14 cover=96 enabling collider #0 [236420ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [236420ms] <- socket$nl_generic=0x3 errno=14 cover=1411 #0 [236421ms] -> getsockopt$netlink(0x3, 2021/11/11 15:08:51 result hanged=false: 15:08:51 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [236443ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27278 #0 [236454ms] -> openat$pidfd(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [236454ms] <- openat$pidfd=0x3 errno=14 cover=1697 enabling collider #0 [236455ms] -> openat$pidfd(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [236455ms] <- openat$pidfd=0x3 errno=14 cover=1817 15:08:51 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000300)={{}, 'port1\x00'}) 2021/11/11 15:08:51 result hanged=false: [236480ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27280 #0 [236491ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000180, 0x0) #0 [236493ms] <- openat$sndseq=0x3 errno=14 cover=2236 #0 [236495ms] -> ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0x3, 0x40a85321, 0x20000300) #0 [236495ms] <- ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT=0xffffffffffffffff errno=1 cover=157 enabling collider #0 [236496ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000180, 0x0) #0 [236496ms] <- openat$sndseq=0x3 errno=14 cover=2198 15:08:51 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000300)={{}, 'port1\x00'}) 2021/11/11 15:08:51 result hanged=false: 2021/11/11 15:08:51 #0: triaging type=7 2021/11/11 15:08:51 triaging input for call #0 openat$sndseq (new signal=1) [236521ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27282 #0 [236531ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000180, 0x0) #0 [236531ms] <- openat$sndseq=0x3 errno=14 cover=2208 #0 [236534ms] -> ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0x3, 0x40a85321, 0x20000300) #0 [236534ms] <- ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT=0xffffffffffffffff errno=1 cover=157 15:08:51 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000300)={{}, 'port1\x00'}) 2021/11/11 15:08:51 result hanged=false: [236564ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27284 #0 [236574ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000180, 0x0) #0 [236576ms] <- openat$sndseq=0x3 errno=14 cover=2186 #0 [236576ms] -> ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0x3, 0x40a85321, 0x20000300) #0 [236577ms] <- ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT=0xffffffffffffffff errno=1 cover=157 15:08:51 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000300)={{}, 'port1\x00'}) 2021/11/11 15:08:51 result hanged=false: [236600ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27286 #0 [236610ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000180, 0x0) #0 [236610ms] <- openat$sndseq=0x3 errno=14 cover=2196 #0 [236612ms] -> ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0x3, 0x40a85321, 0x20000300) #0 [236612ms] <- ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT=0xffffffffffffffff errno=1 cover=157 2021/11/11 15:08:51 result hanged=false: 2021/11/11 15:08:51 added new input for call #0 openat$sndseq to corpus: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000300)={{}, 'port1\x00'}) 15:08:51 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setsig(r0, 0xa, 0x17) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0, 0x0) [236651ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27288 #0 [236659ms] -> creat(0x20000000, 0x0) #0 [236660ms] <- creat=0x3 errno=14 cover=6805 #0 [236660ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [236661ms] <- perf_event_open=0x4 errno=14 cover=3948 #0 [236661ms] -> sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) #0 [236662ms] <- sendfile=0xffffffffffffffff errno=9 cover=48 #0 [236662ms] -> fcntl$setlease(0x3, 0x400, 0x1) #0 [236662ms] <- fcntl$setlease=0x0 errno=14 cover=398 #0 [236662ms] -> fcntl$setsig(0x3, 0xa, 0x17) #0 [236662ms] <- fcntl$setsig=0x0 errno=14 cover=72 #0 [236662ms] -> openat$dir(0xffffffffffffff9c, 0x20000240, 0x0, 0x0) #0 [237766ms] <- openat$dir=0x5 errno=14 cover=259918 enabling collider #0 [237769ms] -> creat(0x20000000, 0x0) #0 [237772ms] <- creat=0x3 errno=14 cover=5048 #0 [237772ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [237773ms] <- perf_event_open=0x4 errno=14 cover=4190 pthread_create failed (errno 11) 2021/11/11 15:08:53 result hanged=false: 15:08:53 executing program 0: futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000040), 0x10000000) [237836ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27390 #0 [237848ms] -> futex(0x20000080, 0x5, 0x0, 0x0, 0x20000040, 0x10000000) #0 [237851ms] <- futex=0x0 errno=14 cover=1963 enabling collider #0 [237852ms] -> futex(0x20000080, 0x5, 0x0, 0x0, 0x20000040, 0x10000000) #0 [237852ms] <- futex=0x0 errno=14 cover=301 2021/11/11 15:08:53 result hanged=false: 2021/11/11 15:08:53 #0: triaging type=7 2021/11/11 15:08:53 triaging input for call #0 futex (new signal=1) 15:08:53 executing program 0: futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000040), 0x10000000) [237876ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27392 #0 [237887ms] -> futex(0x20000080, 0x5, 0x0, 0x0, 0x20000040, 0x10000000) #0 [237889ms] <- futex=0x0 errno=14 cover=908 2021/11/11 15:08:53 result hanged=false: 15:08:53 executing program 0: futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000040), 0x10000000) [237913ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27394 #0 [237923ms] -> futex(0x20000080, 0x5, 0x0, 0x0, 0x20000040, 0x10000000) #0 [237926ms] <- futex=0x0 errno=14 cover=302 2021/11/11 15:08:53 result hanged=false: 15:08:53 executing program 0: futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000040), 0x10000000) [237955ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27396 #0 [237964ms] -> futex(0x20000080, 0x5, 0x0, 0x0, 0x20000040, 0x10000000) #0 [237966ms] <- futex=0x0 errno=14 cover=302 2021/11/11 15:08:53 result hanged=false: 2021/11/11 15:08:53 added new input for call #0 futex to corpus: futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000040), 0x10000000) 15:08:53 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) [237998ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27398 #0 [238008ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) #0 [238011ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6476 enabling collider #0 [238016ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) #0 [238017ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=5539 15:08:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000004580)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 2021/11/11 15:08:53 result hanged=false: [238042ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27400 #0 [238051ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [238051ms] <- socket$nl_generic=0x3 errno=14 cover=1423 #0 [238052ms] -> sendmsg$TIPC_NL_MON_PEER_GET(0x3, 0x20004640, 0x0) #0 [238052ms] <- sendmsg$TIPC_NL_MON_PEER_GET=0x14 errno=14 cover=1401 enabling collider #0 [238052ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [238053ms] <- socket$nl_generic=0x3 errno=14 cover=1486 15:08:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) 2021/11/11 15:08:53 result hanged=false: [238075ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27402 #0 [238084ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [238085ms] <- perf_event_open=0x3 errno=14 cover=3978 #0 [238087ms] -> syz_open_procfs(0x0, 0x0) #0 [238088ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=8596 enabling collider #0 [238089ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [238089ms] <- perf_event_open=0x3 errno=14 cover=3864 #0 [238091ms] -> syz_open_procfs(0x0, 0x0) 15:08:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) 2021/11/11 15:08:53 result hanged=false: 2021/11/11 15:08:53 #0: triaging type=7 2021/11/11 15:08:53 triaging input for call #0 perf_event_open (new signal=2) [238113ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27404 #0 [238123ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [238124ms] <- perf_event_open=0x3 errno=14 cover=3943 #0 [238124ms] -> syz_open_procfs(0x0, 0x0) #0 [238125ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=4366 15:08:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) 2021/11/11 15:08:53 result hanged=false: [238148ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27406 #0 [238158ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [238162ms] <- perf_event_open=0x3 errno=14 cover=3921 #0 [238163ms] -> syz_open_procfs(0x0, 0x0) #0 [238163ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=4340 2021/11/11 15:08:53 result hanged=false: 15:08:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) [238191ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27408 #0 [238202ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [238203ms] <- perf_event_open=0x3 errno=14 cover=3932 #0 [238204ms] -> syz_open_procfs(0x0, 0x0) #0 [238204ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=4438 2021/11/11 15:08:53 result hanged=false: 2021/11/11 15:08:53 added new input for call #0 perf_event_open to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) 15:08:53 executing program 0: r0 = syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}, 0x0) syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) io_uring_enter(r0, 0x7bd1, 0x0, 0x0, 0x0, 0x0) [238233ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 15:08:53 poll: candidates=8 inputs=0 signal=0 spawned worker pid 27410 #0 [238245ms] -> syz_io_uring_setup(0x4, 0x20000080, 0x20ffe000, 0x20ffc000, 0x20000040, 0x20000140) #0 [238247ms] <- syz_io_uring_setup=0x3 errno=14 cover=7698 #0 [238247ms] -> syz_io_uring_submit(0x20ffe000, 0x20ffc000, 0x20000100, 0x0) #0 [238247ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [238248ms] -> syz_io_uring_setup(0x5, 0x20000080, 0x20ffd000, 0x200b0000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [238249ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=5468 #0 [238249ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) #0 [238250ms] <- syz_init_net_socket$bt_l2cap=0x6 errno=14 cover=6606 #0 [238251ms] -> io_uring_enter(0x3, 0x7bd1, 0x0, 0x0, 0x0, 0x0) #0 [238251ms] <- io_uring_enter=0x1 errno=14 cover=437 enabling collider #0 [238251ms] -> syz_io_uring_setup(0x4, 0x20000080, 0x20ffe000, 0x20ffc000, 0x20000040, 0x20000140) #0 [238252ms] <- syz_io_uring_setup=0x3 errno=14 cover=5405 #0 [238253ms] -> syz_io_uring_submit(0x20ffe000, 0x20ffc000, 0x20000100, 0x0) #0 [238253ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 pthread_create failed (errno 11) 2021/11/11 15:08:53 result hanged=false: 2021/11/11 15:08:53 #0: triaging type=7 15:08:53 executing program 0: r0 = syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}, 0x0) syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) io_uring_enter(r0, 0x7bd1, 0x0, 0x0, 0x0, 0x0) 2021/11/11 15:08:53 triaging input for call #4 io_uring_enter (new signal=1) [238317ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27512 #0 [238328ms] -> syz_io_uring_setup(0x4, 0x20000080, 0x20ffe000, 0x20ffc000, 0x20000040, 0x20000140) #0 [238332ms] <- syz_io_uring_setup=0x3 errno=14 cover=7498 #0 [238334ms] -> syz_io_uring_submit(0x20ffe000, 0x20ffc000, 0x20000100, 0x0) #0 [238334ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [238334ms] -> syz_io_uring_setup(0x5, 0x20000080, 0x20ffd000, 0x200b0000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [238337ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=5518 #0 [238337ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) #0 [238338ms] <- syz_init_net_socket$bt_l2cap=0x6 errno=14 cover=6391 #0 [238339ms] -> io_uring_enter(0x3, 0x7bd1, 0x0, 0x0, 0x0, 0x0) #0 [238339ms] <- io_uring_enter=0x1 errno=14 cover=426 2021/11/11 15:08:53 result hanged=false: 15:08:53 executing program 0: r0 = syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}, 0x0) syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) io_uring_enter(r0, 0x7bd1, 0x0, 0x0, 0x0, 0x0) [238363ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27514 #0 [238373ms] -> syz_io_uring_setup(0x4, 0x20000080, 0x20ffe000, 0x20ffc000, 0x20000040, 0x20000140) #0 [238382ms] <- syz_io_uring_setup=0x3 errno=14 cover=7582 #0 [238384ms] -> syz_io_uring_submit(0x20ffe000, 0x20ffc000, 0x20000100, 0x0) #0 [238384ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [238384ms] -> syz_io_uring_setup(0x5, 0x20000080, 0x20ffd000, 0x200b0000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [238394ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=5586 #0 [238395ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) #0 [238396ms] <- syz_init_net_socket$bt_l2cap=0x6 errno=14 cover=6350 #0 [238398ms] -> io_uring_enter(0x3, 0x7bd1, 0x0, 0x0, 0x0, 0x0) #0 [238398ms] <- io_uring_enter=0x1 errno=14 cover=426 15:08:53 executing program 0: r0 = syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}, 0x0) syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) io_uring_enter(r0, 0x7bd1, 0x0, 0x0, 0x0, 0x0) 2021/11/11 15:08:53 result hanged=false: [238421ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27516 #0 [238433ms] -> syz_io_uring_setup(0x4, 0x20000080, 0x20ffe000, 0x20ffc000, 0x20000040, 0x20000140) #0 [238446ms] <- syz_io_uring_setup=0x3 errno=14 cover=7743 #0 [238447ms] -> syz_io_uring_submit(0x20ffe000, 0x20ffc000, 0x20000100, 0x0) #0 [238448ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [238448ms] -> syz_io_uring_setup(0x5, 0x20000080, 0x20ffd000, 0x200b0000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [238450ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=5453 #0 [238451ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) #0 [238452ms] <- syz_init_net_socket$bt_l2cap=0x6 errno=14 cover=6365 #0 [238454ms] -> io_uring_enter(0x3, 0x7bd1, 0x0, 0x0, 0x0, 0x0) #0 [238454ms] <- io_uring_enter=0x1 errno=14 cover=426 2021/11/11 15:08:53 result hanged=false: 2021/11/11 15:08:53 added new input for call #4 io_uring_enter to corpus: r0 = syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}, 0x0) syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) io_uring_enter(r0, 0x7bd1, 0x0, 0x0, 0x0, 0x0) 15:08:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'tunl0\x00'}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) fcntl$setstatus(r2, 0x4, 0x6400) write(r2, &(0x7f0000001200), 0xffffff45) [238477ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27518 #0 [238486ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [238486ms] <- socket$inet_tcp=0x3 errno=14 cover=1761 #0 [238488ms] -> ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x20000200) #0 [238488ms] <- ioctl$sock_SIOCGIFINDEX=0xffffffffffffffff errno=9 cover=45 #0 [238488ms] -> setsockopt$inet_IP_IPSEC_POLICY(0x3, 0x0, 0x10, 0x0, 0x0) #0 [238488ms] <- setsockopt$inet_IP_IPSEC_POLICY=0x0 errno=14 cover=1824 #0 [238489ms] -> ioctl$FIOCLEX(0x3, 0x5451) #0 [238489ms] <- ioctl$FIOCLEX=0x0 errno=14 cover=101 #0 [238489ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [238489ms] <- socket$inet6_tcp=0x4 errno=14 cover=1741 #0 [238489ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [238490ms] <- socket$inet6_udplite=0x5 errno=14 cover=1689 #0 [238490ms] -> bind$inet6(0x5, 0x200000c0, 0x1c) #0 [238490ms] <- bind$inet6=0x0 errno=14 cover=3549 #0 [238490ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [238491ms] <- openat=0x6 errno=14 cover=6693 #0 [238491ms] -> fcntl$setstatus(0x6, 0x4, 0x6400) #0 [238491ms] <- fcntl$setstatus=0x0 errno=14 cover=83 #0 [238491ms] -> write(0x6, 0x20001200, 0xffffff45) #0 [238560ms] <- write=0xffffffffffffffff errno=14 cover=262143 enabling collider #0 [238565ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [238565ms] <- socket$inet_tcp=0x3 errno=14 cover=1717 #0 [238565ms] -> ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x20000200) #0 [238566ms] <- ioctl$sock_SIOCGIFINDEX=0xffffffffffffffff errno=9 cover=45 pthread_create failed (errno 11) 15:08:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'tunl0\x00'}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) fcntl$setstatus(r2, 0x4, 0x6400) write(r2, &(0x7f0000001200), 0xffffff45) 2021/11/11 15:08:53 result hanged=false: 2021/11/11 15:08:53 #0: triaging type=7 2021/11/11 15:08:53 triaging input for call #9 write (new signal=4) [238631ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27620 #0 [238640ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [238641ms] <- socket$inet_tcp=0x3 errno=14 cover=1770 #0 [238642ms] -> ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x20000200) #0 [238642ms] <- ioctl$sock_SIOCGIFINDEX=0xffffffffffffffff errno=9 cover=45 #0 [238642ms] -> setsockopt$inet_IP_IPSEC_POLICY(0x3, 0x0, 0x10, 0x0, 0x0) #0 [238642ms] <- setsockopt$inet_IP_IPSEC_POLICY=0x0 errno=14 cover=210 #0 [238642ms] -> ioctl$FIOCLEX(0x3, 0x5451) #0 [238642ms] <- ioctl$FIOCLEX=0x0 errno=14 cover=101 #0 [238642ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [238642ms] <- socket$inet6_tcp=0x4 errno=14 cover=1730 #0 [238643ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [238643ms] <- socket$inet6_udplite=0x5 errno=14 cover=1624 #0 [238643ms] -> bind$inet6(0x5, 0x200000c0, 0x1c) #0 [238643ms] <- bind$inet6=0x0 errno=14 cover=305 #0 [238643ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [238644ms] <- openat=0x6 errno=14 cover=6744 #0 [238645ms] -> fcntl$setstatus(0x6, 0x4, 0x6400) #0 [238645ms] <- fcntl$setstatus=0x0 errno=14 cover=83 #0 [238645ms] -> write(0x6, 0x20001200, 0xffffff45) #0 [238715ms] <- write=0xffffffffffffffff errno=14 cover=262143 2021/11/11 15:08:54 result hanged=false: 15:08:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'tunl0\x00'}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) fcntl$setstatus(r2, 0x4, 0x6400) write(r2, &(0x7f0000001200), 0xffffff45) [238757ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27622 #0 [238768ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [238771ms] <- socket$inet_tcp=0x3 errno=14 cover=1739 #0 [238772ms] -> ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x20000200) #0 [238772ms] <- ioctl$sock_SIOCGIFINDEX=0xffffffffffffffff errno=9 cover=45 #0 [238773ms] -> setsockopt$inet_IP_IPSEC_POLICY(0x3, 0x0, 0x10, 0x0, 0x0) #0 [238773ms] <- setsockopt$inet_IP_IPSEC_POLICY=0x0 errno=14 cover=210 #0 [238773ms] -> ioctl$FIOCLEX(0x3, 0x5451) #0 [238773ms] <- ioctl$FIOCLEX=0x0 errno=14 cover=101 #0 [238774ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [238774ms] <- socket$inet6_tcp=0x4 errno=14 cover=1708 #0 [238775ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [238775ms] <- socket$inet6_udplite=0x5 errno=14 cover=1664 #0 [238775ms] -> bind$inet6(0x5, 0x200000c0, 0x1c) #0 [238775ms] <- bind$inet6=0x0 errno=14 cover=305 #0 [238776ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [238777ms] <- openat=0x6 errno=14 cover=6744 #0 [238779ms] -> fcntl$setstatus(0x6, 0x4, 0x6400) #0 [238779ms] <- fcntl$setstatus=0x0 errno=14 cover=83 #0 [238779ms] -> write(0x6, 0x20001200, 0xffffff45) #0 [238848ms] <- write=0xffffffffffffffff errno=14 cover=262143 15:08:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'tunl0\x00'}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) fcntl$setstatus(r2, 0x4, 0x6400) write(r2, &(0x7f0000001200), 0xffffff45) 2021/11/11 15:08:54 result hanged=false: [238892ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27624 #0 [238902ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [238905ms] <- socket$inet_tcp=0x3 errno=14 cover=1724 #0 [238906ms] -> ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x20000200) #0 [238906ms] <- ioctl$sock_SIOCGIFINDEX=0xffffffffffffffff errno=9 cover=45 #0 [238907ms] -> setsockopt$inet_IP_IPSEC_POLICY(0x3, 0x0, 0x10, 0x0, 0x0) #0 [238907ms] <- setsockopt$inet_IP_IPSEC_POLICY=0x0 errno=14 cover=210 #0 [238907ms] -> ioctl$FIOCLEX(0x3, 0x5451) #0 [238907ms] <- ioctl$FIOCLEX=0x0 errno=14 cover=101 #0 [238908ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [238908ms] <- socket$inet6_tcp=0x4 errno=14 cover=1708 #0 [238909ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [238909ms] <- socket$inet6_udplite=0x5 errno=14 cover=1624 #0 [238910ms] -> bind$inet6(0x5, 0x200000c0, 0x1c) #0 [238910ms] <- bind$inet6=0x0 errno=14 cover=305 #0 [238910ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [238911ms] <- openat=0x6 errno=14 cover=6716 #0 [238912ms] -> fcntl$setstatus(0x6, 0x4, 0x6400) #0 [238912ms] <- fcntl$setstatus=0x0 errno=14 cover=83 #0 [238912ms] -> write(0x6, 0x20001200, 0xffffff45) #0 [238981ms] <- write=0xffffffffffffffff errno=14 cover=262143 2021/11/11 15:08:54 result hanged=false: 2021/11/11 15:08:54 added new input for call #9 write to corpus: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'tunl0\x00'}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) fcntl$setstatus(r2, 0x4, 0x6400) write(r2, &(0x7f0000001200), 0xffffff45) 15:08:54 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5609, &(0x7f0000000440)) [239038ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27626 #0 [239050ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [239051ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3414 #0 [239051ms] -> ioctl$TIOCGSOFTCAR(0x3, 0x5609, 0x20000440) #0 [239051ms] <- ioctl$TIOCGSOFTCAR=0x0 errno=14 cover=916 enabling collider #0 [239052ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [239052ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3438 15:08:54 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5609, &(0x7f0000000440)) 2021/11/11 15:08:54 result hanged=false: 2021/11/11 15:08:54 #0: triaging type=7 2021/11/11 15:08:54 triaging input for call #1 ioctl$TIOCGSOFTCAR (new signal=7) [239075ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27628 #0 [239085ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [239087ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3436 #0 [239088ms] -> ioctl$TIOCGSOFTCAR(0x3, 0x5609, 0x20000440) #0 [239088ms] <- ioctl$TIOCGSOFTCAR=0x0 errno=14 cover=916 2021/11/11 15:08:54 result hanged=false: 15:08:54 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5609, &(0x7f0000000440)) [239111ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27630 #0 [239121ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [239124ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3453 #0 [239128ms] -> ioctl$TIOCGSOFTCAR(0x3, 0x5609, 0x20000440) #0 [239130ms] <- ioctl$TIOCGSOFTCAR=0x0 errno=14 cover=916 2021/11/11 15:08:54 result hanged=false: 15:08:54 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5609, &(0x7f0000000440)) [239154ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27632 #0 [239167ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [239168ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3436 #0 [239173ms] -> ioctl$TIOCGSOFTCAR(0x3, 0x5609, 0x20000440) #0 [239173ms] <- ioctl$TIOCGSOFTCAR=0x0 errno=14 cover=981 2021/11/11 15:08:54 result hanged=false: 2021/11/11 15:08:54 added new input for call #1 ioctl$TIOCGSOFTCAR to corpus: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5609, &(0x7f0000000440)) 15:08:54 executing program 0: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x3fc}, 0x0, 0x0, 0x0) [239203ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27634 #0 [239213ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000280, 0x1, 0x0) #0 [239214ms] <- openat$tcp_mem=0x3 errno=14 cover=3989 #0 [239215ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [239216ms] <- openat$sndseq=0x4 errno=14 cover=2263 #0 [239216ms] -> socket$unix(0x1, 0x1, 0x0) #0 [239217ms] <- socket$unix=0x5 errno=14 cover=1439 #0 [239217ms] -> syz_io_uring_setup(0x1, 0x20000180, 0x20ffd000, 0x20ffb000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [239220ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=6957 #0 [239220ms] -> socket$packet(0x11, 0x3, 0x300) #0 [239221ms] <- socket$packet=0x7 errno=14 cover=1744 #0 [239221ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [239222ms] <- perf_event_open=0x8 errno=14 cover=3920 #0 [239222ms] -> openat$rtc(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [239223ms] <- openat$rtc=0x9 errno=14 cover=1089 #0 [239223ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [239224ms] <- close_range=0x0 errno=14 cover=1311 #0 [239224ms] -> pselect6(0x40, 0x20000180, 0x200001c0, 0x0, 0x0, 0x0) #0 [239225ms] <- pselect6=0x5 errno=14 cover=544 enabling collider #0 [239226ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000280, 0x1, 0x0) #0 [239226ms] <- openat$tcp_mem=0xa errno=14 cover=1677 #0 [239226ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [239226ms] <- openat$sndseq=0xb errno=14 cover=2210 pthread_create failed (errno 11) 2021/11/11 15:08:54 result hanged=false: 2021/11/11 15:08:54 #0: triaging type=7 2021/11/11 15:08:54 triaging input for call #8 pselect6 (new signal=12) 15:08:54 executing program 0: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x3fc}, 0x0, 0x0, 0x0) [239304ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27736 #0 [239316ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000280, 0x1, 0x0) #0 [239319ms] <- openat$tcp_mem=0x3 errno=14 cover=1700 #0 [239320ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [239320ms] <- openat$sndseq=0x4 errno=14 cover=2197 #0 [239320ms] -> socket$unix(0x1, 0x1, 0x0) #0 [239321ms] <- socket$unix=0x5 errno=14 cover=1442 #0 [239321ms] -> syz_io_uring_setup(0x1, 0x20000180, 0x20ffd000, 0x20ffb000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [239322ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=7004 #0 [239323ms] -> socket$packet(0x11, 0x3, 0x300) #0 [239323ms] <- socket$packet=0x7 errno=14 cover=1774 #0 [239324ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [239324ms] <- perf_event_open=0x8 errno=14 cover=3942 #0 [239324ms] -> openat$rtc(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [239325ms] <- openat$rtc=0x9 errno=14 cover=1077 #0 [239325ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [239325ms] <- close_range=0x0 errno=14 cover=1308 #0 [239325ms] -> pselect6(0x40, 0x20000180, 0x200001c0, 0x0, 0x0, 0x0) #0 [239325ms] <- pselect6=0x5 errno=14 cover=544 15:08:54 executing program 0: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x3fc}, 0x0, 0x0, 0x0) 2021/11/11 15:08:54 result hanged=false: [239353ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27738 #0 [239362ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000280, 0x1, 0x0) #0 [239362ms] <- openat$tcp_mem=0x3 errno=14 cover=1666 #0 [239364ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [239365ms] <- openat$sndseq=0x4 errno=14 cover=2217 #0 [239365ms] -> socket$unix(0x1, 0x1, 0x0) #0 [239366ms] <- socket$unix=0x5 errno=14 cover=1464 #0 [239367ms] -> syz_io_uring_setup(0x1, 0x20000180, 0x20ffd000, 0x20ffb000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [239375ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=6813 #0 [239378ms] -> socket$packet(0x11, 0x3, 0x300) #0 [239378ms] <- socket$packet=0x7 errno=14 cover=1719 #0 [239379ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [239380ms] <- perf_event_open=0x8 errno=14 cover=3938 #0 [239381ms] -> openat$rtc(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [239381ms] <- openat$rtc=0x9 errno=14 cover=1088 #0 [239382ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [239382ms] <- close_range=0x0 errno=14 cover=1308 #0 [239382ms] -> pselect6(0x40, 0x20000180, 0x200001c0, 0x0, 0x0, 0x0) #0 [239382ms] <- pselect6=0x5 errno=14 cover=544 15:08:54 executing program 0: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x3fc}, 0x0, 0x0, 0x0) 2021/11/11 15:08:54 result hanged=false: [239415ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27740 #0 [239424ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000280, 0x1, 0x0) #0 [239426ms] <- openat$tcp_mem=0x3 errno=14 cover=1689 #0 [239427ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [239427ms] <- openat$sndseq=0x4 errno=14 cover=2175 #0 [239429ms] -> socket$unix(0x1, 0x1, 0x0) #0 [239430ms] <- socket$unix=0x5 errno=14 cover=1464 #0 [239430ms] -> syz_io_uring_setup(0x1, 0x20000180, 0x20ffd000, 0x20ffb000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [239432ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=7259 #0 [239433ms] -> socket$packet(0x11, 0x3, 0x300) #0 [239433ms] <- socket$packet=0x7 errno=14 cover=1741 #0 [239433ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [239434ms] <- perf_event_open=0x8 errno=14 cover=3887 #0 [239434ms] -> openat$rtc(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [239434ms] <- openat$rtc=0x9 errno=14 cover=1078 #0 [239435ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [239435ms] <- close_range=0x0 errno=14 cover=1297 #0 [239435ms] -> pselect6(0x40, 0x20000180, 0x200001c0, 0x0, 0x0, 0x0) #0 [239435ms] <- pselect6=0x5 errno=14 cover=544 2021/11/11 15:08:54 result hanged=false: 2021/11/11 15:08:54 added new input for call #8 pselect6 to corpus: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x3fc}, 0x0, 0x0, 0x0) 15:08:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f0000000700)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_submit(r1, 0x2, &(0x7f00000009c0)=[&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) [239471ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27742 #0 [239480ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [239481ms] <- socket$inet6_udplite=0x3 errno=14 cover=1671 #0 [239485ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [239485ms] <- close_range=0x0 errno=14 cover=1275 #0 [239486ms] -> io_setup(0x3, 0x20000700) #0 [239486ms] <- io_setup=0x0 errno=14 cover=3451 #0 [239487ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [239487ms] <- socket$inet6_tcp=0x4 errno=14 cover=1719 #0 [239488ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [239488ms] <- openat=0x5 errno=14 cover=6739 #0 [239489ms] -> io_submit(0x7fbccc6ac000, 0x2, 0x200009c0) #0 [239489ms] <- io_submit=0x1 errno=14 cover=993 enabling collider #0 [239490ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [239490ms] <- socket$inet6_udplite=0x6 errno=14 cover=1634 #0 [239491ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [239491ms] <- close_range=0x0 errno=14 cover=51 pthread_create failed (errno 11) 15:08:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) semctl$IPC_RMID(0x0, 0x0, 0x10) 2021/11/11 15:08:54 result hanged=false: [239576ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27844 #0 [239586ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [239589ms] <- perf_event_open=0x3 errno=14 cover=4018 #0 [239589ms] -> unshare(0x8000000) #0 [239594ms] <- unshare=0x0 errno=14 cover=11934 #0 [239595ms] -> semget$private(0x0, 0x4000, 0x0) #0 [239598ms] <- semget$private=0x0 errno=14 cover=16874 #0 [239599ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [239599ms] <- perf_event_open=0x4 errno=14 cover=4125 #0 [239600ms] -> add_key$keyring(0x200002c0, 0x20000300, 0x0, 0x0, 0xfffffffffffffffd) #0 [239601ms] <- add_key$keyring=0x381de3d0 errno=14 cover=3312 #0 [239601ms] -> semctl$IPC_RMID(0x0, 0x0, 0x10) #0 [239604ms] <- semctl$IPC_RMID=0x0 errno=22 cover=197005 enabling collider #0 [239606ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [239607ms] <- perf_event_open=0x3 errno=14 cover=3906 #0 [239608ms] -> unshare(0x8000000) #0 [239619ms] <- unshare=0x0 errno=14 cover=12774 pthread_create failed (errno 11) 15:08:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) semctl$IPC_RMID(0x0, 0x0, 0x10) 2021/11/11 15:08:54 result hanged=false: 2021/11/11 15:08:54 #0: triaging type=7 2021/11/11 15:08:54 triaging input for call #5 semctl$IPC_RMID (new signal=1) [239676ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27946 #0 [239686ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [239689ms] <- perf_event_open=0x3 errno=14 cover=3921 #0 [239690ms] -> unshare(0x8000000) #0 [239695ms] <- unshare=0x0 errno=14 cover=16325 #0 [239697ms] -> semget$private(0x0, 0x4000, 0x0) #0 [239701ms] <- semget$private=0x0 errno=14 cover=16896 #0 [239703ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [239703ms] <- perf_event_open=0x4 errno=14 cover=4169 #0 [239704ms] -> add_key$keyring(0x200002c0, 0x20000300, 0x0, 0x0, 0xfffffffffffffffd) #0 [239704ms] <- add_key$keyring=0x19e74393 errno=14 cover=3330 #0 [239705ms] -> semctl$IPC_RMID(0x0, 0x0, 0x10) #0 [239708ms] <- semctl$IPC_RMID=0x0 errno=22 cover=197019 15:08:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) semctl$IPC_RMID(0x0, 0x0, 0x10) 2021/11/11 15:08:55 result hanged=false: [239739ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27948 #0 [239753ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [239754ms] <- perf_event_open=0x3 errno=14 cover=4114 #0 [239759ms] -> unshare(0x8000000) #0 [239766ms] <- unshare=0x0 errno=14 cover=51434 #0 [239775ms] -> semget$private(0x0, 0x4000, 0x0) #0 [239779ms] <- semget$private=0x0 errno=14 cover=17881 #0 [239780ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [239780ms] <- perf_event_open=0x4 errno=14 cover=6985 #0 [239781ms] -> add_key$keyring(0x200002c0, 0x20000300, 0x0, 0x0, 0xfffffffffffffffd) #0 [239781ms] <- add_key$keyring=0xd1096a9 errno=14 cover=5211 #0 [239782ms] -> semctl$IPC_RMID(0x0, 0x0, 0x10) #0 [239787ms] <- semctl$IPC_RMID=0x0 errno=22 cover=197313 2021/11/11 15:08:55 result hanged=false: 15:08:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) semctl$IPC_RMID(0x0, 0x0, 0x10) [239818ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27950 #0 [239830ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [239831ms] <- perf_event_open=0x3 errno=14 cover=3954 #0 [239833ms] -> unshare(0x8000000) #0 [239839ms] <- unshare=0x0 errno=14 cover=14809 #0 [239842ms] -> semget$private(0x0, 0x4000, 0x0) #0 [239844ms] <- semget$private=0x0 errno=14 cover=16928 #0 [239846ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [239846ms] <- perf_event_open=0x4 errno=14 cover=4245 #0 [239851ms] -> add_key$keyring(0x200002c0, 0x20000300, 0x0, 0x0, 0xfffffffffffffffd) #0 [239851ms] <- add_key$keyring=0x39032ae0 errno=14 cover=3444 #0 [239852ms] -> semctl$IPC_RMID(0x0, 0x0, 0x10) #0 [239855ms] <- semctl$IPC_RMID=0x0 errno=22 cover=197035 2021/11/11 15:08:55 result hanged=false: 2021/11/11 15:08:55 added new input for call #5 semctl$IPC_RMID to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) semctl$IPC_RMID(0x0, 0x0, 0x10) 15:08:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) semctl$IPC_RMID(0x0, 0x0, 0x10) 2021/11/11 15:08:55 #0: triaging type=7 2021/11/11 15:08:55 triaging input for call #4 add_key$keyring (new signal=4) [239887ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27952 #0 [239898ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [239899ms] <- perf_event_open=0x3 errno=14 cover=4100 #0 [239904ms] -> unshare(0x8000000) #0 [239909ms] <- unshare=0x0 errno=14 cover=27414 #0 [239912ms] -> semget$private(0x0, 0x4000, 0x0) #0 [239916ms] <- semget$private=0x0 errno=14 cover=16899 #0 [239918ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [239918ms] <- perf_event_open=0x4 errno=14 cover=4197 #0 [239919ms] -> add_key$keyring(0x200002c0, 0x20000300, 0x0, 0x0, 0xfffffffffffffffd) #0 [239920ms] <- add_key$keyring=0x1b3beca8 errno=14 cover=3258 #0 [239920ms] -> semctl$IPC_RMID(0x0, 0x0, 0x10) #0 [239923ms] <- semctl$IPC_RMID=0x0 errno=22 cover=197019 15:08:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) semctl$IPC_RMID(0x0, 0x0, 0x10) 2021/11/11 15:08:55 result hanged=false: [239956ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27954 #0 [239965ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [239966ms] <- perf_event_open=0x3 errno=14 cover=4114 #0 [239968ms] -> unshare(0x8000000) #0 [239978ms] <- unshare=0x0 errno=14 cover=31474 #0 [239982ms] -> semget$private(0x0, 0x4000, 0x0) #0 [239986ms] <- semget$private=0x0 errno=14 cover=16864 #0 [239987ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [239988ms] <- perf_event_open=0x4 errno=14 cover=4223 #0 [239989ms] -> add_key$keyring(0x200002c0, 0x20000300, 0x0, 0x0, 0xfffffffffffffffd) #0 [239991ms] <- add_key$keyring=0x3c92c133 errno=14 cover=5380 #0 [239991ms] -> semctl$IPC_RMID(0x0, 0x0, 0x10) #0 [239994ms] <- semctl$IPC_RMID=0x0 errno=22 cover=197081 15:08:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) semctl$IPC_RMID(0x0, 0x0, 0x10) 2021/11/11 15:08:55 result hanged=false: [240026ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27956 #0 [240036ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [240037ms] <- perf_event_open=0x3 errno=14 cover=4125 #0 [240039ms] -> unshare(0x8000000) #0 [240048ms] <- unshare=0x0 errno=14 cover=24487 #0 [240051ms] -> semget$private(0x0, 0x4000, 0x0) #0 [240055ms] <- semget$private=0x0 errno=14 cover=16924 #0 [240056ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [240057ms] <- perf_event_open=0x4 errno=14 cover=4237 #0 [240057ms] -> add_key$keyring(0x200002c0, 0x20000300, 0x0, 0x0, 0xfffffffffffffffd) #0 [240058ms] <- add_key$keyring=0x2e70571e errno=14 cover=3494 #0 [240058ms] -> semctl$IPC_RMID(0x0, 0x0, 0x10) #0 [240062ms] <- semctl$IPC_RMID=0x0 errno=22 cover=197067 2021/11/11 15:08:55 result hanged=false: 2021/11/11 15:08:55 added new input for call #4 add_key$keyring to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) semctl$IPC_RMID(0x0, 0x0, 0x10) 15:08:55 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./mnt\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000380), 0x24, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./mnt\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {}, [], {}, [], {0x10, 0x5}}, 0x24, 0x0) [240099ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 27958 #0 [240111ms] -> syz_mount_image$ext4(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [240114ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12598 #0 [240115ms] -> lsetxattr$system_posix_acl(0x20000040, 0x200000c0, 0x20000380, 0x24, 0x0) #0 [240116ms] <- lsetxattr$system_posix_acl=0x0 errno=14 cover=6450 #0 [240117ms] -> lsetxattr$system_posix_acl(0x20000040, 0x200000c0, 0x20000380, 0x24, 0x0) #0 [240117ms] <- lsetxattr$system_posix_acl=0x0 errno=14 cover=3233 enabling collider #0 [240118ms] -> syz_mount_image$ext4(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [240118ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1392 #0 [240119ms] -> lsetxattr$system_posix_acl(0x20000040, 0x200000c0, 0x20000380, 0x24, 0x0) #0 [240127ms] <- lsetxattr$system_posix_acl=0x0 errno=14 cover=2111 pthread_create failed (errno 11) 2021/11/11 15:08:55 result hanged=false: 15:08:55 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0x151, 0xffffffffffffffff, 0x10000000) r0 = syz_io_uring_complete(0x0) r1 = syz_io_uring_setup(0x3770, &(0x7f0000000780)={0x0, 0x1ea9, 0x10, 0x1, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000800), &(0x7f0000000840)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), 0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000dc0)) epoll_create1(0x0) syz_io_uring_setup(0x209d, &(0x7f0000001f80)={0x0, 0x8f89, 0x2, 0x1, 0x102}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000002000), 0xfffffffffffffffc) [240192ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28060 #0 [240203ms] -> mmap$IORING_OFF_SQES(0x20ffc000, 0x1000, 0x1000003, 0x151, 0xffffffffffffffff, 0x10000000) #0 [240203ms] <- mmap$IORING_OFF_SQES=0xffffffffffffffff errno=9 cover=44 #0 [240204ms] -> syz_io_uring_complete(0x0) SIGSEGV on 0x80, skipping #0 [240204ms] <- syz_io_uring_complete=0xffffffffffffffff errno=14 cover=997 #0 [240204ms] -> syz_io_uring_setup(0x3770, 0x20000780, 0x20ffb000, 0x20ff9000, 0x20000800, 0x20000840) #0 [240208ms] <- syz_io_uring_setup=0x3 errno=14 cover=15323 #0 [240209ms] -> io_uring_register$IORING_REGISTER_EVENTFD(0x3, 0x4, 0x0, 0x1) #0 [240221ms] <- io_uring_register$IORING_REGISTER_EVENTFD=0xffffffffffffffff errno=14 cover=631 #0 [240221ms] -> syz_genetlink_get_family_id$mptcp(0x20000c80, 0xffffffffffffffff) syz_genetlink_get_family_id(mptcp_pm, -1) netlink: failed to get family id for mptcp_pm: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [240240ms] <- syz_genetlink_get_family_id$mptcp=0xffffffffffffffff errno=2 cover=8118 #0 [240241ms] -> ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x20000dc0) #0 [240241ms] <- ioctl$BTRFS_IOC_INO_LOOKUP=0xffffffffffffffff errno=9 cover=45 #0 [240241ms] -> epoll_create1(0x0) #0 [240241ms] <- epoll_create1=0x4 errno=14 cover=539 #0 [240241ms] -> syz_io_uring_setup(0x209d, 0x20001f80, 0x20ffb000, 0x20fef000, 0x20002000, 0xffffffffff600000) SIGSEGV on 0xffffffffff600000, skipping #0 [240248ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=20462 enabling collider #0 [240250ms] -> mmap$IORING_OFF_SQES(0x20ffc000, 0x1000, 0x1000003, 0x151, 0xffffffffffffffff, 0x10000000) #0 [240250ms] <- mmap$IORING_OFF_SQES=0xffffffffffffffff errno=9 cover=44 #0 [240251ms] -> syz_io_uring_complete(0x0) SIGSEGV on 0x80, skipping #0 [240251ms] <- syz_io_uring_complete=0xffffffffffffffff errno=14 cover=755 pthread_create failed (errno 11) 15:08:55 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0x151, 0xffffffffffffffff, 0x10000000) r0 = syz_io_uring_complete(0x0) r1 = syz_io_uring_setup(0x3770, &(0x7f0000000780)={0x0, 0x1ea9, 0x10, 0x1, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000800), &(0x7f0000000840)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), 0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000dc0)) epoll_create1(0x0) syz_io_uring_setup(0x209d, &(0x7f0000001f80)={0x0, 0x8f89, 0x2, 0x1, 0x102}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000002000), 0xfffffffffffffffc) 2021/11/11 15:08:55 result hanged=false: 2021/11/11 15:08:55 #0: triaging type=7 2021/11/11 15:08:55 triaging input for call #4 syz_genetlink_get_family_id$mptcp (new signal=1) [240341ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28162 #0 [240352ms] -> mmap$IORING_OFF_SQES(0x20ffc000, 0x1000, 0x1000003, 0x151, 0xffffffffffffffff, 0x10000000) #0 [240356ms] <- mmap$IORING_OFF_SQES=0xffffffffffffffff errno=9 cover=44 #0 [240356ms] -> syz_io_uring_complete(0x0) SIGSEGV on 0x80, skipping #0 [240356ms] <- syz_io_uring_complete=0xffffffffffffffff errno=14 cover=1001 #0 [240357ms] -> syz_io_uring_setup(0x3770, 0x20000780, 0x20ffb000, 0x20ff9000, 0x20000800, 0x20000840) #0 [240360ms] <- syz_io_uring_setup=0x3 errno=14 cover=15260 #0 [240361ms] -> io_uring_register$IORING_REGISTER_EVENTFD(0x3, 0x4, 0x0, 0x1) #0 [240371ms] <- io_uring_register$IORING_REGISTER_EVENTFD=0xffffffffffffffff errno=14 cover=631 #0 [240371ms] -> syz_genetlink_get_family_id$mptcp(0x20000c80, 0xffffffffffffffff) syz_genetlink_get_family_id(mptcp_pm, -1) netlink: failed to get family id for mptcp_pm: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [240390ms] <- syz_genetlink_get_family_id$mptcp=0xffffffffffffffff errno=2 cover=8036 #0 [240391ms] -> ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x20000dc0) #0 [240391ms] <- ioctl$BTRFS_IOC_INO_LOOKUP=0xffffffffffffffff errno=9 cover=45 #0 [240391ms] -> epoll_create1(0x0) #0 [240391ms] <- epoll_create1=0x4 errno=14 cover=539 #0 [240391ms] -> syz_io_uring_setup(0x209d, 0x20001f80, 0x20ffb000, 0x20fef000, 0x20002000, 0xffffffffff600000) SIGSEGV on 0xffffffffff600000, skipping #0 [240394ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=20425 15:08:55 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0x151, 0xffffffffffffffff, 0x10000000) r0 = syz_io_uring_complete(0x0) r1 = syz_io_uring_setup(0x3770, &(0x7f0000000780)={0x0, 0x1ea9, 0x10, 0x1, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000800), &(0x7f0000000840)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), 0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000dc0)) epoll_create1(0x0) syz_io_uring_setup(0x209d, &(0x7f0000001f80)={0x0, 0x8f89, 0x2, 0x1, 0x102}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000002000), 0xfffffffffffffffc) 2021/11/11 15:08:55 result hanged=false: [240418ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28164 #0 [240429ms] -> mmap$IORING_OFF_SQES(0x20ffc000, 0x1000, 0x1000003, 0x151, 0xffffffffffffffff, 0x10000000) #0 [240429ms] <- mmap$IORING_OFF_SQES=0xffffffffffffffff errno=9 cover=44 #0 [240431ms] -> syz_io_uring_complete(0x0) SIGSEGV on 0x80, skipping #0 [240431ms] <- syz_io_uring_complete=0xffffffffffffffff errno=14 cover=1009 #0 [240432ms] -> syz_io_uring_setup(0x3770, 0x20000780, 0x20ffb000, 0x20ff9000, 0x20000800, 0x20000840) #0 [240442ms] <- syz_io_uring_setup=0x3 errno=14 cover=14862 #0 [240444ms] -> io_uring_register$IORING_REGISTER_EVENTFD(0x3, 0x4, 0x0, 0x1) #0 [240447ms] <- io_uring_register$IORING_REGISTER_EVENTFD=0xffffffffffffffff errno=14 cover=631 #0 [240448ms] -> syz_genetlink_get_family_id$mptcp(0x20000c80, 0xffffffffffffffff) syz_genetlink_get_family_id(mptcp_pm, -1) netlink: failed to get family id for mptcp_pm: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [240471ms] <- syz_genetlink_get_family_id$mptcp=0xffffffffffffffff errno=2 cover=8170 #0 [240473ms] -> ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x20000dc0) #0 [240473ms] <- ioctl$BTRFS_IOC_INO_LOOKUP=0xffffffffffffffff errno=9 cover=45 #0 [240473ms] -> epoll_create1(0x0) #0 [240473ms] <- epoll_create1=0x4 errno=14 cover=528 #0 [240475ms] -> syz_io_uring_setup(0x209d, 0x20001f80, 0x20ffb000, 0x20fef000, 0x20002000, 0xffffffffff600000) SIGSEGV on 0xffffffffff600000, skipping #0 [240478ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=20437 15:08:55 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0x151, 0xffffffffffffffff, 0x10000000) r0 = syz_io_uring_complete(0x0) r1 = syz_io_uring_setup(0x3770, &(0x7f0000000780)={0x0, 0x1ea9, 0x10, 0x1, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000800), &(0x7f0000000840)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), 0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000dc0)) epoll_create1(0x0) syz_io_uring_setup(0x209d, &(0x7f0000001f80)={0x0, 0x8f89, 0x2, 0x1, 0x102}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000002000), 0xfffffffffffffffc) 2021/11/11 15:08:55 result hanged=false: [240507ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28166 #0 [240516ms] -> mmap$IORING_OFF_SQES(0x20ffc000, 0x1000, 0x1000003, 0x151, 0xffffffffffffffff, 0x10000000) #0 [240516ms] <- mmap$IORING_OFF_SQES=0xffffffffffffffff errno=9 cover=44 #0 [240517ms] -> syz_io_uring_complete(0x0) SIGSEGV on 0x80, skipping #0 [240517ms] <- syz_io_uring_complete=0xffffffffffffffff errno=14 cover=1063 #0 [240519ms] -> syz_io_uring_setup(0x3770, 0x20000780, 0x20ffb000, 0x20ff9000, 0x20000800, 0x20000840) #0 [240530ms] <- syz_io_uring_setup=0x3 errno=14 cover=14893 #0 [240531ms] -> io_uring_register$IORING_REGISTER_EVENTFD(0x3, 0x4, 0x0, 0x1) #0 [240536ms] <- io_uring_register$IORING_REGISTER_EVENTFD=0xffffffffffffffff errno=14 cover=631 #0 [240536ms] -> syz_genetlink_get_family_id$mptcp(0x20000c80, 0xffffffffffffffff) syz_genetlink_get_family_id(mptcp_pm, -1) netlink: failed to get family id for mptcp_pm: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [240550ms] <- syz_genetlink_get_family_id$mptcp=0xffffffffffffffff errno=2 cover=8041 #0 [240552ms] -> ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x20000dc0) #0 [240552ms] <- ioctl$BTRFS_IOC_INO_LOOKUP=0xffffffffffffffff errno=9 cover=45 #0 [240552ms] -> epoll_create1(0x0) #0 [240552ms] <- epoll_create1=0x4 errno=14 cover=506 #0 [240553ms] -> syz_io_uring_setup(0x209d, 0x20001f80, 0x20ffb000, 0x20fef000, 0x20002000, 0xffffffffff600000) SIGSEGV on 0xffffffffff600000, skipping #0 [240557ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=20585 2021/11/11 15:08:55 result hanged=false: 2021/11/11 15:08:55 added new input for call #4 syz_genetlink_get_family_id$mptcp to corpus: mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0x151, 0xffffffffffffffff, 0x10000000) r0 = syz_io_uring_complete(0x0) r1 = syz_io_uring_setup(0x3770, &(0x7f0000000780)={0x0, 0x1ea9, 0x10, 0x1, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000800), &(0x7f0000000840)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), 0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000dc0)) epoll_create1(0x0) syz_io_uring_setup(0x209d, &(0x7f0000001f80)={0x0, 0x8f89, 0x2, 0x1, 0x102}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000002000), 0xfffffffffffffffc) 15:08:55 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x14}, 0x14}}, 0x0) [240607ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 15:08:55 poll: candidates=8 inputs=0 signal=0 spawned worker pid 28168 #0 [240617ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [240618ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6283 #0 [240620ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEV(0x4, 0x20000900, 0x0) #0 [240620ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEV=0x14 errno=14 cover=1050 enabling collider #0 [240622ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [240623ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5647 #0 [240624ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEV(0x4, 0x20000900, 0x0) #0 [240624ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEV=0xffffffffffffffff errno=9 cover=53 15:08:55 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x5382, &(0x7f0000000000)) 2021/11/11 15:08:55 result hanged=false: [240647ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28170 #0 [240657ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [240659ms] <- openat=0x3 errno=14 cover=6731 #0 [240660ms] -> mount(0x20000080, 0x200000c0, 0x0, 0x209000, 0x0) #0 [240662ms] <- mount=0x0 errno=14 cover=6566 #0 [240662ms] -> openat(0xffffffffffffff9c, 0x20004c40, 0x84e00, 0x0) #0 [240680ms] <- openat=0x4 errno=14 cover=3397 #0 [240681ms] -> ioctl$SG_SET_TIMEOUT(0x4, 0x5382, 0x20000000) #0 [240681ms] <- ioctl$SG_SET_TIMEOUT=0x0 errno=14 cover=187 enabling collider #0 [240683ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [240754ms] <- openat=0xffffffffffffffff errno=123 cover=8544 #0 [240754ms] -> mount(0x20000080, 0x200000c0, 0x0, 0x209000, 0x0) #0 [240755ms] <- mount=0x0 errno=14 cover=2289 pthread_create failed (errno 11) 2021/11/11 15:08:56 result hanged=false: 15:08:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0) umount(./1875/file1) umount(./1875/file1) [240823ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28272 #0 [240833ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [240836ms] <- perf_event_open=0x3 errno=14 cover=4064 #0 [240837ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [240838ms] <- socket$nl_generic=0x4 errno=14 cover=4341 #0 [240839ms] -> ioctl$sock_SIOCSIFBR(0x4, 0x8941, 0x0) #0 [240857ms] <- ioctl$sock_SIOCSIFBR=0xffffffffffffffff errno=65 cover=18127 enabling collider #0 [240858ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [240858ms] <- perf_event_open=0x3 errno=14 cover=4094 #0 [240859ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [240860ms] <- socket$nl_generic=0x4 errno=14 cover=2030 pthread_create failed (errno 11) 15:08:56 executing program 0: clone3(&(0x7f0000001240)={0x100022000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2021/11/11 15:08:56 result hanged=false: [240922ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28374 #0 [240932ms] -> clone3(0x20001240, 0x58) #0 [240959ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 enabling collider #0 [240961ms] -> clone3(0x20001240, 0x58) #0 [240988ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 2021/11/11 15:08:56 result hanged=false: 15:08:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) dup2(r0, r0) [241011ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28378 #0 [241021ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [241021ms] <- socket$inet6_udplite=0x3 errno=14 cover=1646 #0 [241021ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [241022ms] <- close_range=0x0 errno=14 cover=2928 #0 [241023ms] -> dup2(0x3, 0x3) #0 [241023ms] <- dup2=0xffffffffffffffff errno=9 cover=42 enabling collider #0 [241024ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [241024ms] <- socket$inet6_udplite=0x3 errno=14 cover=1634 #0 [241024ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [241025ms] <- close_range=0x0 errno=14 cover=2659 pthread_create failed (errno 11) 15:08:56 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2021/11/11 15:08:56 result hanged=false: [241087ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28480 #0 [241098ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000080) #0 [241099ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0xffffffffffffffff errno=22 cover=1485 #0 [241099ms] -> openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [241100ms] <- openat$nvram=0xffffffffffffffff errno=14 cover=628 enabling collider #0 [241100ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000080) #0 [241101ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0xffffffffffffffff errno=22 cover=1485 15:08:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) ppoll(&(0x7f0000000d40)=[{r1}, {r0, 0x151c0}], 0x2, 0x0, 0x0, 0x0) 2021/11/11 15:08:56 result hanged=false: [241125ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28482 #0 [241136ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [241138ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3432 #0 [241140ms] -> syz_open_dev$usbmon(0x200000c0, 0x0, 0x0) #0 [241141ms] <- syz_open_dev$usbmon=0x4 errno=14 cover=3499 #0 [241142ms] -> ppoll(0x20000d40, 0x2, 0x0, 0x0, 0x0) #0 [241142ms] <- ppoll=0x1 errno=14 cover=2770 enabling collider #0 [241144ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [241144ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3392 #0 [241146ms] -> syz_open_dev$usbmon(0x200000c0, 0x0, 0x0) #0 [241146ms] <- syz_open_dev$usbmon=0x4 errno=14 cover=3508 pthread_create failed (errno 11) 2021/11/11 15:08:56 result hanged=false: 15:08:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) ppoll(&(0x7f0000000d40)=[{r1}, {r0, 0x151c0}], 0x2, 0x0, 0x0, 0x0) 2021/11/11 15:08:56 #0: triaging type=7 2021/11/11 15:08:56 triaging input for call #2 ppoll (new signal=1) [241209ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28584 #0 [241218ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [241219ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3372 #0 [241220ms] -> syz_open_dev$usbmon(0x200000c0, 0x0, 0x0) #0 [241220ms] <- syz_open_dev$usbmon=0x4 errno=14 cover=3423 #0 [241220ms] -> ppoll(0x20000d40, 0x2, 0x0, 0x0, 0x0) #0 [241221ms] <- ppoll=0x1 errno=14 cover=352 2021/11/11 15:08:56 result hanged=false: 15:08:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) ppoll(&(0x7f0000000d40)=[{r1}, {r0, 0x151c0}], 0x2, 0x0, 0x0, 0x0) [241243ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28586 #0 [241254ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [241257ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3396 #0 [241258ms] -> syz_open_dev$usbmon(0x200000c0, 0x0, 0x0) #0 [241260ms] <- syz_open_dev$usbmon=0x4 errno=14 cover=9834 #0 [241261ms] -> ppoll(0x20000d40, 0x2, 0x0, 0x0, 0x0) #0 [241261ms] <- ppoll=0x1 errno=14 cover=338 2021/11/11 15:08:56 result hanged=false: 15:08:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) ppoll(&(0x7f0000000d40)=[{r1}, {r0, 0x151c0}], 0x2, 0x0, 0x0, 0x0) [241282ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28588 #0 [241291ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [241292ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3418 #0 [241293ms] -> syz_open_dev$usbmon(0x200000c0, 0x0, 0x0) #0 [241293ms] <- syz_open_dev$usbmon=0x4 errno=14 cover=3412 #0 [241293ms] -> ppoll(0x20000d40, 0x2, 0x0, 0x0, 0x0) #0 [241293ms] <- ppoll=0x1 errno=14 cover=338 2021/11/11 15:08:56 result hanged=false: 2021/11/11 15:08:56 added new input for call #2 ppoll to corpus: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) ppoll(&(0x7f0000000d40)=[{r1}, {r0, 0x151c0}], 0x2, 0x0, 0x0, 0x0) 15:08:56 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x10001) [241319ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28590 #0 [241329ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [241329ms] <- perf_event_open=0x3 errno=14 cover=3890 #0 [241331ms] -> sched_setaffinity(0x0, 0x8, 0x20000240) #0 [241331ms] <- sched_setaffinity=0x0 errno=14 cover=972 enabling collider #0 [241331ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [241332ms] <- perf_event_open=0x3 errno=14 cover=4150 15:08:56 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x10001) 2021/11/11 15:08:56 result hanged=false: 2021/11/11 15:08:56 #0: triaging type=7 2021/11/11 15:08:56 triaging input for call #1 sched_setaffinity (new signal=1) [241353ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28592 #0 [241364ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [241366ms] <- perf_event_open=0x3 errno=14 cover=4247 #0 [241367ms] -> sched_setaffinity(0x0, 0x8, 0x20000240) #0 [241367ms] <- sched_setaffinity=0x0 errno=14 cover=605 15:08:56 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x10001) 2021/11/11 15:08:56 result hanged=false: [241390ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28594 #0 [241401ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [241404ms] <- perf_event_open=0x3 errno=14 cover=4283 #0 [241405ms] -> sched_setaffinity(0x0, 0x8, 0x20000240) #0 [241405ms] <- sched_setaffinity=0x0 errno=14 cover=605 2021/11/11 15:08:56 result hanged=false: 15:08:56 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x10001) [241427ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28596 #0 [241437ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [241437ms] <- perf_event_open=0x3 errno=14 cover=4204 #0 [241438ms] -> sched_setaffinity(0x0, 0x8, 0x20000240) #0 [241438ms] <- sched_setaffinity=0x0 errno=14 cover=605 2021/11/11 15:08:56 result hanged=false: 2021/11/11 15:08:56 added new input for call #1 sched_setaffinity to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x10001) 15:08:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x14, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) [241462ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 15:08:56 poll: candidates=8 inputs=0 signal=0 spawned worker pid 28598 #0 [241472ms] -> socket$netlink(0x10, 0x3, 0x4) #0 [241472ms] <- socket$netlink=0x3 errno=14 cover=1425 #0 [241473ms] -> sendmsg$nl_generic(0x3, 0x20000100, 0x0) #0 [241491ms] <- sendmsg$nl_generic=0x14 errno=14 cover=24032 enabling collider #0 [241491ms] -> socket$netlink(0x10, 0x3, 0x4) #0 [241491ms] <- socket$netlink=0x3 errno=14 cover=1402 15:08:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x14, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 2021/11/11 15:08:56 result hanged=false: 2021/11/11 15:08:56 #0: triaging type=7 2021/11/11 15:08:56 triaging input for call #1 sendmsg$nl_generic (new signal=2) [241515ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28600 #0 [241524ms] -> socket$netlink(0x10, 0x3, 0x4) #0 [241524ms] <- socket$netlink=0x3 errno=14 cover=1403 #0 [241525ms] -> sendmsg$nl_generic(0x3, 0x20000100, 0x0) #0 [241550ms] <- sendmsg$nl_generic=0x14 errno=14 cover=3085 15:08:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x14, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 2021/11/11 15:08:56 result hanged=false: [241573ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28602 #0 [241584ms] -> socket$netlink(0x10, 0x3, 0x4) #0 [241584ms] <- socket$netlink=0x3 errno=14 cover=1427 #0 [241586ms] -> sendmsg$nl_generic(0x3, 0x20000100, 0x0) #0 [241609ms] <- sendmsg$nl_generic=0x14 errno=14 cover=2359 15:08:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x14, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 2021/11/11 15:08:56 result hanged=false: [241633ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28604 #0 [241643ms] -> socket$netlink(0x10, 0x3, 0x4) #0 [241644ms] <- socket$netlink=0x3 errno=14 cover=1478 #0 [241645ms] -> sendmsg$nl_generic(0x3, 0x20000100, 0x0) #0 [241665ms] <- sendmsg$nl_generic=0x14 errno=14 cover=2524 2021/11/11 15:08:57 result hanged=false: 2021/11/11 15:08:57 added new input for call #1 sendmsg$nl_generic to corpus: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x14, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 15:08:57 executing program 0: stat(&(0x7f00000000c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) request_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, r0, 0x0) [241695ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28606 #0 [241706ms] -> stat(0x200000c0, 0x20001c00) #0 [241706ms] <- stat=0x0 errno=14 cover=814 #0 [241707ms] -> request_key(0x200000c0, 0x20000100, 0x0, 0xffffffffffffffff) #0 [241707ms] <- request_key=0xffffffffffffffff errno=126 cover=1255 #0 [241708ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [241708ms] <- perf_event_open=0x3 errno=14 cover=4208 #0 [241709ms] -> setresuid(0xffffffffffffffff, 0x41ed, 0x0) #0 [241710ms] <- setresuid=0x0 errno=14 cover=1333 enabling collider #0 [241711ms] -> stat(0x200000c0, 0x20001c00) #0 [241711ms] <- stat=0x0 errno=14 cover=562 #0 [241711ms] -> request_key(0x200000c0, 0x20000100, 0x0, 0xffffffffffffffff) #0 [241713ms] <- request_key=0xffffffffffffffff errno=126 cover=475 pthread_create failed (errno 11) 2021/11/11 15:08:57 result hanged=false: 15:08:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x18, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic='{']}, 0x18}}, 0x0) [241781ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28708 #0 [241792ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [241795ms] <- socket$netlink=0x3 errno=14 cover=1417 #0 [241796ms] -> sendmsg$nl_generic(0x3, 0x200000c0, 0x0) #0 [241796ms] <- sendmsg$nl_generic=0x18 errno=14 cover=1636 enabling collider #0 [241797ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [241797ms] <- socket$netlink=0x3 errno=14 cover=1405 2021/11/11 15:08:57 result hanged=false: 15:08:57 executing program 0: rt_sigaction(0x35, &(0x7f00000005c0)={&(0x7f0000000500)="f042ff8f00000000c40151ec36f366f68364150000492ef2400f103fc4c171fd8600000080f2f3450f0ff1aac4a1fe2cd54780096ef04783298e64f047f791c785c653", 0x0, 0x0}, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000006c0)) [241821ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28710 #0 [241831ms] -> rt_sigaction(0x35, 0x200005c0, 0x20000680, 0x8, 0x200006c0) #0 [241832ms] <- rt_sigaction=0x0 errno=14 cover=89 enabling collider #0 [241832ms] -> rt_sigaction(0x35, 0x200005c0, 0x20000680, 0x8, 0x200006c0) #0 [241832ms] <- rt_sigaction=0x0 errno=14 cover=89 15:08:57 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2021/11/11 15:08:57 result hanged=false: [241853ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28712 #0 [241863ms] -> syz_mount_image$ext4(0x0, 0x20000200, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [241864ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12721 #0 [241865ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [241865ms] <- perf_event_open=0x3 errno=14 cover=3849 #0 [241865ms] -> unlinkat(0xffffffffffffff9c, 0x20000000, 0x200) #0 [241866ms] <- unlinkat=0x0 errno=14 cover=9546 enabling collider #0 [241866ms] -> syz_mount_image$ext4(0x0, 0x20000200, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [241867ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=11528 #0 [241868ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [241869ms] <- perf_event_open=0x3 errno=14 cover=3795 pthread_create failed (errno 11) 15:08:57 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2021/11/11 15:08:57 result hanged=false: [241930ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28814 #0 [241940ms] -> perf_event_open(0x20000000, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [241943ms] <- perf_event_open=0x3 errno=14 cover=19674 #0 [241944ms] -> close(0x3) #0 [241955ms] <- close=0x0 errno=14 cover=4156 enabling collider #0 [241956ms] -> perf_event_open(0x20000000, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [241956ms] <- perf_event_open=0x3 errno=14 cover=7039 #0 [241957ms] -> close(0x3) #0 [241957ms] <- close=0xffffffffffffffff errno=9 cover=42 15:08:57 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2021/11/11 15:08:57 result hanged=false: 2021/11/11 15:08:57 #0: triaging type=7 2021/11/11 15:08:57 triaging input for call #0 perf_event_open (new signal=2) [241991ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28816 #0 [242002ms] -> perf_event_open(0x20000000, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [242003ms] <- perf_event_open=0x3 errno=14 cover=7345 #0 [242004ms] -> close(0x3) #0 [242019ms] <- close=0x0 errno=14 cover=4155 15:08:57 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2021/11/11 15:08:57 result hanged=false: [242042ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28818 #0 [242053ms] -> perf_event_open(0x20000000, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [242054ms] <- perf_event_open=0x3 errno=14 cover=7756 #0 [242055ms] -> close(0x3) #0 [242070ms] <- close=0x0 errno=14 cover=4153 15:08:57 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2021/11/11 15:08:57 result hanged=false: [242096ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28820 #0 [242106ms] -> perf_event_open(0x20000000, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [242108ms] <- perf_event_open=0x3 errno=14 cover=7585 #0 [242109ms] -> close(0x3) #0 [242117ms] <- close=0x0 errno=14 cover=4158 2021/11/11 15:08:57 result hanged=false: 2021/11/11 15:08:57 added new input for call #0 perf_event_open to corpus: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 15:08:57 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x105000, 0x0) [242149ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28822 #0 [242160ms] -> openat$zero(0xffffffffffffff9c, 0x20000200, 0x105000, 0x0) #0 [242161ms] <- openat$zero=0xffffffffffffffff errno=22 cover=1297 enabling collider #0 [242161ms] -> openat$zero(0xffffffffffffff9c, 0x20000200, 0x105000, 0x0) #0 [242162ms] <- openat$zero=0xffffffffffffffff errno=22 cover=1310 15:08:57 executing program 0: mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x5, 0x4, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x2) 2021/11/11 15:08:57 result hanged=false: [242184ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28824 #0 [242195ms] -> mbind(0x20ffc000, 0x2000, 0x1, 0x20000000, 0x4, 0x0) #0 [242196ms] <- mbind=0x0 errno=14 cover=1192 #0 [242196ms] -> get_mempolicy(0x0, 0x0, 0x0, 0x20ffc000, 0x2) #0 [242196ms] <- get_mempolicy=0x0 errno=14 cover=70 enabling collider #0 [242196ms] -> mbind(0x20ffc000, 0x2000, 0x1, 0x20000000, 0x4, 0x0) #0 [242197ms] <- mbind=0x0 errno=14 cover=332 15:08:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x30}, {0x6}]}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@flushsa={0x14, 0x1c, 0x4}, 0x14}}, 0x0) 2021/11/11 15:08:57 result hanged=false: 2021/11/11 15:08:57 poll: candidates=8 inputs=0 signal=0 [242221ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28826 #0 [242231ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [242231ms] <- socket$nl_xfrm=0x3 errno=14 cover=1408 #0 [242232ms] -> setsockopt$SO_ATTACH_FILTER(0x3, 0x1, 0x1a, 0x20000080, 0x10) #0 [242253ms] <- setsockopt$SO_ATTACH_FILTER=0x0 errno=14 cover=124342 #0 [242256ms] -> sendmsg$nl_xfrm(0x3, 0x20000300, 0x0) #0 [242256ms] <- sendmsg$nl_xfrm=0x14 errno=14 cover=1711 enabling collider #0 [242257ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [242257ms] <- socket$nl_xfrm=0x3 errno=14 cover=1483 #0 [242259ms] -> setsockopt$SO_ATTACH_FILTER(0x3, 0x1, 0x1a, 0x20000080, 0x10) #0 [242262ms] <- setsockopt$SO_ATTACH_FILTER=0x0 errno=14 cover=6305 pthread_create failed (errno 11) 15:08:57 executing program 0: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xe05c6d79d37bf7bf, 0x20031, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5e8d, &(0x7f0000000440), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1) 2021/11/11 15:08:57 result hanged=false: [242323ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 28928 #0 [242335ms] -> mmap(0x20001000, 0x2000, 0xe05c6d79d37bf7bf, 0x20031, 0xffffffffffffffff, 0x0) #0 [242335ms] <- mmap=0x20001000 errno=14 cover=4772 #0 [242337ms] -> syz_io_uring_setup(0x5e8d, 0x20000440, 0x20ffa000, 0x20fff000, 0x200004c0, 0x20000500) #0 [242341ms] <- syz_io_uring_setup=0x3 errno=14 cover=20824 #0 [242344ms] -> io_uring_register$IORING_REGISTER_BUFFERS(0x3, 0x0, 0x200001c0, 0x1) #0 [242349ms] <- io_uring_register$IORING_REGISTER_BUFFERS=0xffffffffffffffff errno=95 cover=8307 enabling collider #0 [242350ms] -> mmap(0x20001000, 0x2000, 0xe05c6d79d37bf7bf, 0x20031, 0xffffffffffffffff, 0x0) #0 [242351ms] <- mmap=0x20001000 errno=14 cover=2823 #0 [242352ms] -> syz_io_uring_setup(0x5e8d, 0x20000440, 0x20ffa000, 0x20fff000, 0x200004c0, 0x20000500) #0 [242356ms] <- syz_io_uring_setup=0x3 errno=14 cover=29113 pthread_create failed (errno 11) 2021/11/11 15:08:57 result hanged=false: 15:08:57 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="d7", 0x1, 0xffff) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) [242418ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29030 #0 [242428ms] -> creat(0x20000080, 0x0) #0 [242430ms] <- creat=0x3 errno=14 cover=6779 #0 [242431ms] -> pwrite64(0x3, 0x20000140, 0x1, 0xffff) #0 [242432ms] <- pwrite64=0x1 errno=14 cover=3213 #0 [242432ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [242899ms] <- pwrite64=0xfff000 errno=14 cover=262143 enabling collider #0 [242904ms] -> creat(0x20000080, 0x0) 2021/11/11 15:08:58 poll: candidates=0 inputs=0 signal=0 #0 [243028ms] <- creat=0x3 errno=14 cover=262143 #0 [243030ms] -> pwrite64(0x3, 0x20000140, 0x1, 0xffff) #0 [243033ms] <- pwrite64=0x1 errno=14 cover=2966 pthread_create failed (errno 11) 15:08:58 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="d7", 0x1, 0xffff) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) 2021/11/11 15:08:58 result hanged=false: 2021/11/11 15:08:58 #0: triaging type=7 2021/11/11 15:08:58 triaging input for call #2 pwrite64 (new signal=3) [243096ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29132 #0 [243107ms] -> creat(0x20000080, 0x0) #0 [243108ms] <- creat=0x3 errno=14 cover=6769 #0 [243109ms] -> pwrite64(0x3, 0x20000140, 0x1, 0xffff) #0 [243110ms] <- pwrite64=0x1 errno=14 cover=3085 #0 [243111ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [243595ms] <- pwrite64=0xfff000 errno=14 cover=262143 2021/11/11 15:08:58 result hanged=false: 15:08:58 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="d7", 0x1, 0xffff) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) [243728ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29134 #0 [243745ms] -> creat(0x20000080, 0x0) #0 [243746ms] <- creat=0x3 errno=14 cover=6915 #0 [243751ms] -> pwrite64(0x3, 0x20000140, 0x1, 0xffff) #0 [243752ms] <- pwrite64=0x1 errno=14 cover=3119 #0 [243753ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [244208ms] <- pwrite64=0xfff000 errno=14 cover=262143 2021/11/11 15:08:59 result hanged=false: 15:08:59 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="d7", 0x1, 0xffff) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) [244336ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29136 #0 [244352ms] -> creat(0x20000080, 0x0) #0 [244353ms] <- creat=0x3 errno=14 cover=7019 #0 [244354ms] -> pwrite64(0x3, 0x20000140, 0x1, 0xffff) #0 [244357ms] <- pwrite64=0x1 errno=14 cover=3064 #0 [244358ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [244700ms] <- pwrite64=0xfff000 errno=14 cover=262143 2021/11/11 15:09:00 result hanged=false: 2021/11/11 15:09:00 added new input for call #2 pwrite64 to corpus: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="d7", 0x1, 0xffff) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) 15:09:00 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="d7", 0x1, 0xffff) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) 2021/11/11 15:09:00 #0: triaging type=7 2021/11/11 15:09:00 triaging input for call #1 pwrite64 (new signal=3) [244806ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29138 #0 [244819ms] -> creat(0x20000080, 0x0) #0 [244820ms] <- creat=0x3 errno=14 cover=6930 #0 [244822ms] -> pwrite64(0x3, 0x20000140, 0x1, 0xffff) #0 [244822ms] <- pwrite64=0x1 errno=14 cover=3053 #0 [244823ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [245087ms] <- pwrite64=0xfff000 errno=14 cover=262143 15:09:00 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="d7", 0x1, 0xffff) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) 2021/11/11 15:09:00 result hanged=false: [245253ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29140 #0 [245264ms] -> creat(0x20000080, 0x0) #0 [245268ms] <- creat=0x3 errno=14 cover=14400 #0 [245269ms] -> pwrite64(0x3, 0x20000140, 0x1, 0xffff) #0 [245270ms] <- pwrite64=0x1 errno=14 cover=3145 #0 [245271ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [245534ms] <- pwrite64=0xfff000 errno=14 cover=262143 15:09:00 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="d7", 0x1, 0xffff) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) 2021/11/11 15:09:00 result hanged=false: [245664ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29142 #0 [245675ms] -> creat(0x20000080, 0x0) #0 [245677ms] <- creat=0x3 errno=14 cover=6674 #0 [245679ms] -> pwrite64(0x3, 0x20000140, 0x1, 0xffff) #0 [245681ms] <- pwrite64=0x1 errno=14 cover=3173 #0 [245681ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [245950ms] <- pwrite64=0xfff000 errno=14 cover=262143 2021/11/11 15:09:01 result hanged=false: 2021/11/11 15:09:01 added new input for call #1 pwrite64 to corpus: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="d7", 0x1, 0xffff) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) 15:09:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) [246086ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29144 #0 [246095ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [246098ms] <- perf_event_open=0x3 errno=14 cover=4237 #0 [246099ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [246101ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=24001 #0 [246102ms] -> mount(0x0, 0x20000080, 0x200000c0, 0x0, 0x0) #0 [246105ms] <- mount=0x0 errno=14 cover=55472 #0 [246107ms] -> ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) #0 [246107ms] <- ioctl$F2FS_IOC_GET_FEATURES=0xffffffffffffffff errno=9 cover=74 enabling collider #0 [246108ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [246109ms] <- perf_event_open=0x3 errno=14 cover=8034 #0 [246110ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [246110ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=3093 pthread_create failed (errno 11) 15:09:01 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r0, &(0x7f0000001180)=@target={'target ', {'PCI:', '0', ':', '0', ':', '12', '.', '6'}}, 0x14) 2021/11/11 15:09:01 result hanged=false: umount(./1911/mnt) [246160ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29246 #0 [246174ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x200001c0, 0x40001, 0x0) #0 [246174ms] <- openat$vga_arbiter=0x3 errno=14 cover=1243 #0 [246176ms] -> write$vga_arbiter(0x3, 0x20001180, 0x14) #0 [246176ms] <- write$vga_arbiter=0xffffffffffffffff errno=19 cover=1014 enabling collider #0 [246177ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x200001c0, 0x40001, 0x0) #0 [246179ms] <- openat$vga_arbiter=0x3 errno=14 cover=1324 15:09:01 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r0, &(0x7f0000001180)=@target={'target ', {'PCI:', '0', ':', '0', ':', '12', '.', '6'}}, 0x14) 2021/11/11 15:09:01 result hanged=false: 2021/11/11 15:09:01 #0: triaging type=7 2021/11/11 15:09:01 triaging input for call #1 write$vga_arbiter (new signal=72) [246208ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29248 #0 [246221ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x200001c0, 0x40001, 0x0) #0 [246223ms] <- openat$vga_arbiter=0x3 errno=14 cover=1276 #0 [246225ms] -> write$vga_arbiter(0x3, 0x20001180, 0x14) #0 [246225ms] <- write$vga_arbiter=0xffffffffffffffff errno=19 cover=1014 15:09:01 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r0, &(0x7f0000001180)=@target={'target ', {'PCI:', '0', ':', '0', ':', '12', '.', '6'}}, 0x14) 2021/11/11 15:09:01 result hanged=false: [246252ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29250 #0 [246260ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x200001c0, 0x40001, 0x0) #0 [246260ms] <- openat$vga_arbiter=0x3 errno=14 cover=1232 #0 [246261ms] -> write$vga_arbiter(0x3, 0x20001180, 0x14) #0 [246261ms] <- write$vga_arbiter=0xffffffffffffffff errno=19 cover=1014 2021/11/11 15:09:01 result hanged=false: 15:09:01 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r0, &(0x7f0000001180)=@target={'target ', {'PCI:', '0', ':', '0', ':', '12', '.', '6'}}, 0x14) [246294ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29252 #0 [246304ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x200001c0, 0x40001, 0x0) #0 [246305ms] <- openat$vga_arbiter=0x3 errno=14 cover=1198 #0 [246305ms] -> write$vga_arbiter(0x3, 0x20001180, 0x14) #0 [246305ms] <- write$vga_arbiter=0xffffffffffffffff errno=19 cover=1014 2021/11/11 15:09:01 result hanged=false: 2021/11/11 15:09:01 added new input for call #1 write$vga_arbiter to corpus: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r0, &(0x7f0000001180)=@target={'target ', {'PCI:', '0', ':', '0', ':', '12', '.', '6'}}, 0x14) 15:09:01 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [246328ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29254 #0 [246335ms] -> pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x9999999999999999) #0 [246335ms] <- pselect6=0xffffffffffffffff errno=14 cover=39 enabling collider #0 [246335ms] -> pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x9999999999999999) #0 [246336ms] <- pselect6=0xffffffffffffffff errno=14 cover=39 15:09:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) umount2(&(0x7f0000000140)='./mnt\x00', 0x0) 2021/11/11 15:09:01 result hanged=false: [246354ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29256 #0 [246366ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [246367ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12384 #0 [246369ms] -> mount(0x0, 0x20000080, 0x200000c0, 0x0, 0x0) #0 [246377ms] <- mount=0x0 errno=14 cover=12890 #0 [246379ms] -> umount2(0x20000140, 0x0) #0 [246382ms] <- umount2=0x0 errno=14 cover=11011 enabling collider #0 [246382ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [246382ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1348 #0 [246382ms] -> mount(0x0, 0x20000080, 0x200000c0, 0x0, 0x0) #0 [246385ms] <- mount=0x0 errno=14 cover=12836 pthread_create failed (errno 11) 15:09:01 executing program 0: r0 = add_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="fa", 0x1, 0xfffffffffffffffe) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) 2021/11/11 15:09:01 result hanged=false: umount(./1917/mnt) [246443ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29358 #0 [246450ms] -> add_key(0x20000280, 0x20000040, 0x20000080, 0x1, 0xfffffffffffffffe) #0 [246453ms] <- add_key=0x1b59438 errno=14 cover=2291 #0 [246453ms] -> stat(0x20001cc0, 0x20001c00) #0 [246453ms] <- stat=0x0 errno=14 cover=542 #0 [246453ms] -> setresuid(0xffffffffffffffff, 0x41ed, 0x0) #0 [246453ms] <- setresuid=0x0 errno=14 cover=413 #0 [246453ms] -> keyctl$chown(0x4, 0x1b59438, 0x0, 0xffffffffffffffff) #0 [246454ms] <- keyctl$chown=0x0 errno=14 cover=1035 enabling collider #0 [246454ms] -> add_key(0x20000280, 0x20000040, 0x20000080, 0x1, 0xfffffffffffffffe) #0 [246454ms] <- add_key=0x35245ad9 errno=14 cover=3120 #0 [246455ms] -> stat(0x20001cc0, 0x20001c00) #0 [246455ms] <- stat=0x0 errno=14 cover=590 pthread_create failed (errno 11) 15:09:01 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0x2) sendfile(r1, r0, 0x0, 0x80000000) 2021/11/11 15:09:01 result hanged=false: 2021/11/11 15:09:01 poll: candidates=8 inputs=0 signal=0 [246513ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29460 #0 [246523ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [246525ms] <- openat=0x3 errno=14 cover=2662 #0 [246527ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [246527ms] <- openat=0x4 errno=14 cover=6712 #0 [246528ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [246528ms] <- openat=0x5 errno=14 cover=1154 #0 [246528ms] -> ftruncate(0x4, 0x2) #0 [246529ms] <- ftruncate=0x0 errno=14 cover=1741 #0 [246529ms] -> sendfile(0x5, 0x4, 0x0, 0x80000000) #0 [246531ms] <- sendfile=0xffffffffffffffff errno=22 cover=16600 enabling collider #0 [246532ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [246533ms] <- openat=0x3 errno=14 cover=2175 #0 [246534ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [246535ms] <- openat=0x4 errno=14 cover=1179 pthread_create failed (errno 11) 2021/11/11 15:09:01 result hanged=false: 2021/11/11 15:09:01 #0: triaging type=7 15:09:01 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0x2) sendfile(r1, r0, 0x0, 0x80000000) 2021/11/11 15:09:01 triaging input for call #4 sendfile (new signal=2) [246600ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29562 #0 [246610ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [246613ms] <- openat=0x3 errno=14 cover=2763 #0 [246615ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [246617ms] <- openat=0x4 errno=14 cover=6738 #0 [246618ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [246618ms] <- openat=0x5 errno=14 cover=1209 #0 [246619ms] -> ftruncate(0x4, 0x2) #0 [246619ms] <- ftruncate=0x0 errno=14 cover=1727 #0 [246620ms] -> sendfile(0x5, 0x4, 0x0, 0x80000000) #0 [246621ms] <- sendfile=0xffffffffffffffff errno=22 cover=8583 2021/11/11 15:09:01 result hanged=false: 15:09:01 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0x2) sendfile(r1, r0, 0x0, 0x80000000) [246649ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29564 #0 [246661ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [246662ms] <- openat=0x3 errno=14 cover=2728 #0 [246663ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [246665ms] <- openat=0x4 errno=14 cover=6812 #0 [246666ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [246666ms] <- openat=0x5 errno=14 cover=1144 #0 [246667ms] -> ftruncate(0x4, 0x2) #0 [246668ms] <- ftruncate=0x0 errno=14 cover=1755 #0 [246669ms] -> sendfile(0x5, 0x4, 0x0, 0x80000000) #0 [246670ms] <- sendfile=0xffffffffffffffff errno=22 cover=7865 15:09:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0x2) sendfile(r1, r0, 0x0, 0x80000000) [246693ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29566 2021/11/11 15:09:02 result hanged=false: #0 [246704ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [246705ms] <- openat=0x3 errno=14 cover=2710 #0 [246708ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [246709ms] <- openat=0x4 errno=14 cover=7044 #0 [246716ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [246716ms] <- openat=0x5 errno=14 cover=1223 #0 [246717ms] -> ftruncate(0x4, 0x2) #0 [246717ms] <- ftruncate=0x0 errno=14 cover=1733 #0 [246718ms] -> sendfile(0x5, 0x4, 0x0, 0x80000000) #0 [246720ms] <- sendfile=0xffffffffffffffff errno=22 cover=8269 2021/11/11 15:09:02 result hanged=false: 2021/11/11 15:09:02 added new input for call #4 sendfile to corpus: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0x2) sendfile(r1, r0, 0x0, 0x80000000) 15:09:02 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x34000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) poll(&(0x7f0000002d80)=[{r0}], 0x1, 0x0) [246764ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29568 #0 [246773ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [246774ms] <- socket$inet6_udp=0x3 errno=14 cover=1694 #0 [246775ms] -> connect$inet6(0x3, 0x20000600, 0x1c) #0 [246775ms] <- connect$inet6=0x0 errno=14 cover=1135 #0 [246775ms] -> sendmmsg$inet6(0x3, 0x20004d00, 0x7ffff000, 0x0) #0 [246892ms] <- sendmmsg$inet6=0x400 errno=14 cover=262143 #0 [246899ms] -> poll(0x20002d80, 0x1, 0x0) #0 [246902ms] <- poll=0x0 errno=14 cover=145 enabling collider #0 [246903ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [246905ms] <- socket$inet6_udp=0x3 errno=14 cover=1748 #0 [246906ms] -> connect$inet6(0x3, 0x20000600, 0x1c) #0 [246908ms] <- connect$inet6=0x0 errno=14 cover=1185 pthread_create failed (errno 11) 15:09:02 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x34000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) poll(&(0x7f0000002d80)=[{r0}], 0x1, 0x0) 2021/11/11 15:09:02 result hanged=false: 2021/11/11 15:09:02 #0: triaging type=7 2021/11/11 15:09:02 triaging input for call #2 sendmmsg$inet6 (new signal=13) iptable filter/10: resetting iptable mangle/10: resetting [246981ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29670 #0 [246991ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [246994ms] <- socket$inet6_udp=0x3 errno=14 cover=1662 #0 [246995ms] -> connect$inet6(0x3, 0x20000600, 0x1c) #0 [246996ms] <- connect$inet6=0x0 errno=14 cover=1135 #0 [246996ms] -> sendmmsg$inet6(0x3, 0x20004d00, 0x7ffff000, 0x0) #0 [247142ms] <- sendmmsg$inet6=0x400 errno=14 cover=262143 #0 [247161ms] -> poll(0x20002d80, 0x1, 0x0) #0 [247161ms] <- poll=0x0 errno=14 cover=145 2021/11/11 15:09:02 result hanged=false: 15:09:02 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x34000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) poll(&(0x7f0000002d80)=[{r0}], 0x1, 0x0) iptable filter/10: resetting iptable mangle/10: resetting [247192ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29672 #0 [247202ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [247203ms] <- socket$inet6_udp=0x3 errno=14 cover=1665 #0 [247203ms] -> connect$inet6(0x3, 0x20000600, 0x1c) #0 [247203ms] <- connect$inet6=0x0 errno=14 cover=1135 #0 [247204ms] -> sendmmsg$inet6(0x3, 0x20004d00, 0x7ffff000, 0x0) #0 [247332ms] <- sendmmsg$inet6=0x400 errno=14 cover=262143 #0 [247353ms] -> poll(0x20002d80, 0x1, 0x0) #0 [247354ms] <- poll=0x0 errno=14 cover=145 2021/11/11 15:09:02 result hanged=false: 15:09:02 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x34000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) poll(&(0x7f0000002d80)=[{r0}], 0x1, 0x0) iptable filter/10: resetting iptable mangle/10: resetting [247381ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29674 #0 [247390ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [247393ms] <- socket$inet6_udp=0x3 errno=14 cover=1687 #0 [247394ms] -> connect$inet6(0x3, 0x20000600, 0x1c) #0 [247395ms] <- connect$inet6=0x0 errno=14 cover=1149 #0 [247395ms] -> sendmmsg$inet6(0x3, 0x20004d00, 0x7ffff000, 0x0) #0 [247548ms] <- sendmmsg$inet6=0x400 errno=14 cover=262143 #0 [247565ms] -> poll(0x20002d80, 0x1, 0x0) #0 [247565ms] <- poll=0x0 errno=14 cover=145 2021/11/11 15:09:02 result hanged=false: 2021/11/11 15:09:02 added new input for call #2 sendmmsg$inet6 to corpus: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x34000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) poll(&(0x7f0000002d80)=[{r0}], 0x1, 0x0) iptable filter/10: resetting iptable mangle/10: resetting 15:09:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[], 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) [247605ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29676 #0 [247615ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [247617ms] <- openat=0x3 errno=14 cover=6762 #0 [247617ms] -> write$P9_RREADLINK(0x3, 0x20000280, 0x10) #0 [247624ms] <- write$P9_RREADLINK=0x10 errno=14 cover=10852 #0 [247627ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [247627ms] <- openat=0x4 errno=14 cover=1180 #0 [247628ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [247628ms] <- openat=0x5 errno=14 cover=2672 #0 [247628ms] -> copy_file_range(0x5, 0x0, 0x4, 0x0, 0x200f5ef, 0x0) #0 [247815ms] <- copy_file_range=0x1da688 errno=14 cover=262143 #0 [247818ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [247818ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [247819ms] -> ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) #0 [247819ms] <- ioctl$TIOCGRS485=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [247820ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [247820ms] <- openat=0x3 errno=14 cover=1141 #0 [247821ms] -> write$P9_RREADLINK(0x3, 0x20000280, 0x10) #0 [247824ms] <- write$P9_RREADLINK=0x10 errno=14 cover=4274 pthread_create failed (errno 11) 2021/11/11 15:09:03 result hanged=false: 15:09:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[], 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) 2021/11/11 15:09:03 #0: triaging type=7 2021/11/11 15:09:03 triaging input for call #4 copy_file_range (new signal=6) iptable filter/10: resetting iptable mangle/10: resetting [247902ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29778 #0 [247917ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [247918ms] <- openat=0x3 errno=14 cover=6729 #0 [247919ms] -> write$P9_RREADLINK(0x3, 0x20000280, 0x10) #0 [247924ms] <- write$P9_RREADLINK=0x10 errno=14 cover=9084 #0 [247926ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [247926ms] <- openat=0x4 errno=14 cover=1130 #0 [247926ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [247927ms] <- openat=0x5 errno=14 cover=2731 #0 [247927ms] -> copy_file_range(0x5, 0x0, 0x4, 0x0, 0x200f5ef, 0x0) #0 [248098ms] <- copy_file_range=0x1da688 errno=14 cover=262143 #0 [248118ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [248123ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [248123ms] -> ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) #0 [248123ms] <- ioctl$TIOCGRS485=0xffffffffffffffff errno=9 cover=45 15:09:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[], 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) 2021/11/11 15:09:03 result hanged=false: [248157ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29780 #0 [248169ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [248169ms] <- openat=0x3 errno=14 cover=6779 #0 [248170ms] -> write$P9_RREADLINK(0x3, 0x20000280, 0x10) #0 [248175ms] <- write$P9_RREADLINK=0x10 errno=14 cover=9297 #0 [248177ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [248177ms] <- openat=0x4 errno=14 cover=1130 #0 [248177ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [248177ms] <- openat=0x5 errno=14 cover=2684 #0 [248178ms] -> copy_file_range(0x5, 0x0, 0x4, 0x0, 0x200f5ef, 0x0) #0 [248351ms] <- copy_file_range=0x1da688 errno=14 cover=262143 #0 [248371ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [248376ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [248376ms] -> ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) #0 [248376ms] <- ioctl$TIOCGRS485=0xffffffffffffffff errno=9 cover=45 15:09:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[], 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) 2021/11/11 15:09:03 result hanged=false: [248410ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29782 #0 [248422ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [248423ms] <- openat=0x3 errno=14 cover=6709 #0 [248426ms] -> write$P9_RREADLINK(0x3, 0x20000280, 0x10) #0 [248432ms] <- write$P9_RREADLINK=0x10 errno=14 cover=9352 #0 [248433ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [248434ms] <- openat=0x4 errno=14 cover=1232 #0 [248434ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [248434ms] <- openat=0x5 errno=14 cover=2674 #0 [248435ms] -> copy_file_range(0x5, 0x0, 0x4, 0x0, 0x200f5ef, 0x0) #0 [248624ms] <- copy_file_range=0x1da688 errno=14 cover=262143 #0 [248646ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [248647ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [248648ms] -> ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) #0 [248648ms] <- ioctl$TIOCGRS485=0xffffffffffffffff errno=9 cover=45 2021/11/11 15:09:03 result hanged=false: 2021/11/11 15:09:03 added new input for call #4 copy_file_range to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[], 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) 15:09:04 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x33}, 0x0, 0x0, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_io_uring_setup(0x6894, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x3, 0x119}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000ec0), &(0x7f0000000f00)) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) [248692ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29784 #0 [248704ms] -> ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x20000140) #0 [248705ms] <- ioctl$sock_ipv6_tunnel_SIOCCHG6RD=0xffffffffffffffff errno=9 cover=45 #0 [248705ms] -> ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) #0 [248706ms] <- ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL=0xffffffffffffffff errno=9 cover=45 #0 [248706ms] -> syz_io_uring_setup(0x6894, 0x20000e40, 0x20ffb000, 0x20ffc000, 0x20000ec0, 0x20000f00) #0 [248709ms] <- syz_io_uring_setup=0x3 errno=14 cover=21640 #0 [248710ms] -> sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) #0 [248710ms] <- sendmsg$FOU_CMD_GET=0xffffffffffffffff errno=9 cover=52 enabling collider #0 [248710ms] -> ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x20000140) #0 [248710ms] <- ioctl$sock_ipv6_tunnel_SIOCCHG6RD=0xffffffffffffffff errno=9 cover=45 #0 [248711ms] -> ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) #0 [248712ms] <- ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL=0xffffffffffffffff errno=9 cover=45 pthread_create failed (errno 11) 15:09:04 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYBLOB='7']) 2021/11/11 15:09:04 result hanged=false: [248774ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29886 #0 [248784ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [248785ms] <- openat=0x3 errno=14 cover=6709 #0 [248786ms] -> pipe(0x20000000) #0 [248786ms] <- pipe=0x0 errno=14 cover=1115 #0 [248786ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x20000140) #0 [248827ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=262143 enabling collider #0 [248829ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [248830ms] <- openat=0x3 errno=14 cover=1269 #0 [248832ms] -> pipe(0x20000000) #0 [248833ms] <- pipe=0x0 errno=14 cover=1167 pthread_create failed (errno 11) 2021/11/11 15:09:04 result hanged=false: 2021/11/11 15:09:04 #0: triaging type=7 2021/11/11 15:09:04 triaging input for call #2 mount$9p_fd (new signal=2) 15:09:04 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYBLOB='7']) iptable filter/10: resetting iptable mangle/10: resetting [248903ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29988 #0 [248914ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [248917ms] <- openat=0x3 errno=14 cover=6784 #0 [248918ms] -> pipe(0x20000000) #0 [248919ms] <- pipe=0x0 errno=14 cover=1148 #0 [248920ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x20000140) #0 [248955ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=70354 15:09:04 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYBLOB='7']) 2021/11/11 15:09:04 result hanged=false: [248985ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29990 #0 [248995ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [248997ms] <- openat=0x3 errno=14 cover=6783 #0 [248998ms] -> pipe(0x20000000) #0 [248998ms] <- pipe=0x0 errno=14 cover=1115 #0 [248998ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x20000140) #0 [249030ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=67575 15:09:04 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYBLOB='7']) 2021/11/11 15:09:04 result hanged=false: [249060ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29992 #0 [249070ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [249071ms] <- openat=0x3 errno=14 cover=6742 #0 [249072ms] -> pipe(0x20000000) #0 [249072ms] <- pipe=0x0 errno=14 cover=1093 #0 [249072ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x20000140) #0 [249106ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=66943 2021/11/11 15:09:04 result hanged=false: 2021/11/11 15:09:04 added new input for call #2 mount$9p_fd to corpus: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYBLOB='7']) 15:09:04 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x31ae, &(0x7f00000001c0), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_io_uring_setup(0x4cd5, &(0x7f0000000780), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000000800), 0x0) [249161ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 29994 #0 [249171ms] -> syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) SIGSEGV on 0x10c, skipping #0 [249172ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=1117 #0 [249173ms] -> syz_io_uring_setup(0x31ae, 0x200001c0, 0x20ff2000, 0x20ffb000, 0x20000240, 0x20000280) #0 [249175ms] <- syz_io_uring_setup=0x3 errno=14 cover=14545 #0 [249176ms] -> io_uring_register$IORING_REGISTER_PERSONALITY(0x3, 0x9, 0x0, 0x0) #0 [249176ms] <- io_uring_register$IORING_REGISTER_PERSONALITY=0x1 errno=14 cover=319 #0 [249176ms] -> openat$bsg(0xffffffffffffff9c, 0x20000340, 0x0, 0x0) #0 [249177ms] <- openat$bsg=0x4 errno=14 cover=1262 #0 [249177ms] -> syz_io_uring_setup(0x4cd5, 0x20000780, 0x20ff6000, 0x20ff3000, 0x20000800, 0x0) SIGSEGV on (nil), skipping #0 [249181ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=25910 enabling collider #0 [249181ms] -> syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) SIGSEGV on 0x10c, skipping #0 [249182ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=819 #0 [249183ms] -> syz_io_uring_setup(0x31ae, 0x200001c0, 0x20ff2000, 0x20ffb000, 0x20000240, 0x20000280) #0 [249192ms] <- syz_io_uring_setup=0x3 errno=14 cover=18092 pthread_create failed (errno 11) 2021/11/11 15:09:04 result hanged=false: 15:09:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x6, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc30}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_SPLICE, 0x4) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [249254ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30096 #0 [249265ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [249266ms] <- socket$nl_generic=0x3 errno=14 cover=1520 #0 [249267ms] -> syz_io_uring_setup(0x4d4f, 0x20000080, 0x200a0000, 0x20ffc000, 0x20000200, 0x20000140) #0 [249270ms] <- syz_io_uring_setup=0x4 errno=14 cover=17925 #0 [249271ms] -> syz_io_uring_submit(0x200a0000, 0x20ffc000, 0x20000000, 0x0) #0 [249271ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [249271ms] -> mmap$IORING_OFF_SQ_RING(0x20ffc000, 0x4000, 0x100000e, 0x13, 0x4, 0x0) #0 [249273ms] <- mmap$IORING_OFF_SQ_RING=0x20ffc000 errno=14 cover=5250 #0 [249273ms] -> syz_io_uring_submit(0x20ffc000, 0x20ffc000, 0x20000100, 0x4) #0 [249273ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [249273ms] -> io_uring_enter(0x4, 0x58ab, 0x0, 0x0, 0x0, 0x0) #0 [249274ms] <- io_uring_enter=0x2 errno=14 cover=781 enabling collider #0 [249274ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [249275ms] <- socket$nl_generic=0x3 errno=14 cover=1425 #0 [249276ms] -> syz_io_uring_setup(0x4d4f, 0x20000080, 0x200a0000, 0x20ffc000, 0x20000200, 0x20000140) #0 [249282ms] <- syz_io_uring_setup=0x4 errno=14 cover=28406 pthread_create failed (errno 11) 15:09:04 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x78) fallocate(r0, 0x0, 0x0, 0x8800000) lseek(r0, 0x0, 0x4) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001200)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='auxv\x00') syz_io_uring_setup(0x25bb, &(0x7f0000000180)={0x0, 0xfcb6, 0x0, 0x3, 0x3d1, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r0, &(0x7f0000000900)={0x2, 0x100, 0xb}, &(0x7f0000000940)='./file0\x00', 0x18, 0x0, 0x12345}, 0x81) 2021/11/11 15:09:04 result hanged=false: [249344ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30198 #0 [249354ms] -> creat(0x20000040, 0x0) #0 [249358ms] <- creat=0x3 errno=14 cover=6683 #0 [249359ms] -> write$binfmt_elf64(0x3, 0x20000080, 0x78) #0 [249360ms] <- write$binfmt_elf64=0x78 errno=14 cover=2945 #0 [249361ms] -> fallocate(0x3, 0x0, 0x0, 0x8800000) #0 [249368ms] <- fallocate=0x0 errno=14 cover=95173 #0 [249371ms] -> lseek(0x3, 0x0, 0x4) #0 [249372ms] <- lseek=0x1000 errno=14 cover=912 #0 [249372ms] -> creat(0x20000000, 0x0) #0 [249374ms] <- creat=0x4 errno=14 cover=17183 #0 [249375ms] -> ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x40086602, 0x20001200) #0 [249375ms] <- ioctl$FS_IOC_GETFLAGS=0xffffffffffffffff errno=9 cover=45 #0 [249375ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [249376ms] <- syz_open_procfs=0x5 errno=14 cover=4020 #0 [249377ms] -> syz_io_uring_setup(0x25bb, 0x20000180, 0x20ffd000, 0x20ffb000, 0x20000200, 0x20000240) #0 [249379ms] <- syz_io_uring_setup=0x6 errno=14 cover=14611 #0 [249380ms] -> syz_io_uring_submit(0x0, 0x0, 0x20000180, 0x81) SIGSEGV on 0x10c, skipping #0 [249380ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=1083 enabling collider #0 [249381ms] -> creat(0x20000040, 0x0) #0 [249382ms] <- creat=0x3 errno=14 cover=4788 #0 [249383ms] -> write$binfmt_elf64(0x3, 0x20000080, 0x78) #0 [249385ms] <- write$binfmt_elf64=0x78 errno=14 cover=2779 pthread_create failed (errno 11) 2021/11/11 15:09:04 result hanged=false: 2021/11/11 15:09:04 #0: triaging type=7 2021/11/11 15:09:04 triaging input for call #4 creat (new signal=2) 15:09:04 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x78) fallocate(r0, 0x0, 0x0, 0x8800000) lseek(r0, 0x0, 0x4) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001200)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='auxv\x00') syz_io_uring_setup(0x25bb, &(0x7f0000000180)={0x0, 0xfcb6, 0x0, 0x3, 0x3d1, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r0, &(0x7f0000000900)={0x2, 0x100, 0xb}, &(0x7f0000000940)='./file0\x00', 0x18, 0x0, 0x12345}, 0x81) [249453ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30300 #0 [249466ms] -> creat(0x20000040, 0x0) #0 [249467ms] <- creat=0x3 errno=14 cover=6706 #0 [249469ms] -> write$binfmt_elf64(0x3, 0x20000080, 0x78) #0 [249470ms] <- write$binfmt_elf64=0x78 errno=14 cover=2930 #0 [249470ms] -> fallocate(0x3, 0x0, 0x0, 0x8800000) #0 [249477ms] <- fallocate=0x0 errno=14 cover=89441 #0 [249483ms] -> lseek(0x3, 0x0, 0x4) #0 [249483ms] <- lseek=0x1000 errno=14 cover=472 #0 [249483ms] -> creat(0x20000000, 0x0) #0 [249485ms] <- creat=0x4 errno=14 cover=17184 #0 [249487ms] -> ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x40086602, 0x20001200) #0 [249487ms] <- ioctl$FS_IOC_GETFLAGS=0xffffffffffffffff errno=9 cover=45 #0 [249488ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [249489ms] <- syz_open_procfs=0x5 errno=14 cover=4023 #0 [249490ms] -> syz_io_uring_setup(0x25bb, 0x20000180, 0x20ffd000, 0x20ffb000, 0x20000200, 0x20000240) #0 [249494ms] <- syz_io_uring_setup=0x6 errno=14 cover=14645 #0 [249496ms] -> syz_io_uring_submit(0x0, 0x0, 0x20000180, 0x81) SIGSEGV on 0x10c, skipping #0 [249496ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=1045 2021/11/11 15:09:04 result hanged=false: 15:09:04 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x78) fallocate(r0, 0x0, 0x0, 0x8800000) lseek(r0, 0x0, 0x4) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001200)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='auxv\x00') syz_io_uring_setup(0x25bb, &(0x7f0000000180)={0x0, 0xfcb6, 0x0, 0x3, 0x3d1, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r0, &(0x7f0000000900)={0x2, 0x100, 0xb}, &(0x7f0000000940)='./file0\x00', 0x18, 0x0, 0x12345}, 0x81) [249524ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30302 #0 [249535ms] -> creat(0x20000040, 0x0) #0 [249536ms] <- creat=0x3 errno=14 cover=6730 #0 [249537ms] -> write$binfmt_elf64(0x3, 0x20000080, 0x78) #0 [249538ms] <- write$binfmt_elf64=0x78 errno=14 cover=2952 #0 [249539ms] -> fallocate(0x3, 0x0, 0x0, 0x8800000) #0 [249545ms] <- fallocate=0x0 errno=14 cover=89612 #0 [249552ms] -> lseek(0x3, 0x0, 0x4) #0 [249552ms] <- lseek=0x1000 errno=14 cover=912 #0 [249552ms] -> creat(0x20000000, 0x0) #0 [249554ms] <- creat=0x4 errno=14 cover=17301 #0 [249555ms] -> ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x40086602, 0x20001200) #0 [249555ms] <- ioctl$FS_IOC_GETFLAGS=0xffffffffffffffff errno=9 cover=45 #0 [249556ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [249558ms] <- syz_open_procfs=0x5 errno=14 cover=4482 #0 [249559ms] -> syz_io_uring_setup(0x25bb, 0x20000180, 0x20ffd000, 0x20ffb000, 0x20000200, 0x20000240) #0 [249562ms] <- syz_io_uring_setup=0x6 errno=14 cover=14621 #0 [249564ms] -> syz_io_uring_submit(0x0, 0x0, 0x20000180, 0x81) SIGSEGV on 0x10c, skipping #0 [249564ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=1045 2021/11/11 15:09:04 result hanged=false: 15:09:04 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x78) fallocate(r0, 0x0, 0x0, 0x8800000) lseek(r0, 0x0, 0x4) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001200)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='auxv\x00') syz_io_uring_setup(0x25bb, &(0x7f0000000180)={0x0, 0xfcb6, 0x0, 0x3, 0x3d1, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r0, &(0x7f0000000900)={0x2, 0x100, 0xb}, &(0x7f0000000940)='./file0\x00', 0x18, 0x0, 0x12345}, 0x81) [249589ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30304 #0 [249601ms] -> creat(0x20000040, 0x0) #0 [249602ms] <- creat=0x3 errno=14 cover=6861 #0 [249607ms] -> write$binfmt_elf64(0x3, 0x20000080, 0x78) #0 [249608ms] <- write$binfmt_elf64=0x78 errno=14 cover=2968 #0 [249609ms] -> fallocate(0x3, 0x0, 0x0, 0x8800000) #0 [249619ms] <- fallocate=0x0 errno=14 cover=87047 #0 [249628ms] -> lseek(0x3, 0x0, 0x4) #0 [249628ms] <- lseek=0x1000 errno=14 cover=849 #0 [249629ms] -> creat(0x20000000, 0x0) #0 [249631ms] <- creat=0x4 errno=14 cover=17289 #0 [249633ms] -> ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x40086602, 0x20001200) #0 [249633ms] <- ioctl$FS_IOC_GETFLAGS=0xffffffffffffffff errno=9 cover=45 #0 [249635ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [249636ms] <- syz_open_procfs=0x5 errno=14 cover=4075 #0 [249638ms] -> syz_io_uring_setup(0x25bb, 0x20000180, 0x20ffd000, 0x20ffb000, 0x20000200, 0x20000240) #0 [249640ms] <- syz_io_uring_setup=0x6 errno=14 cover=14677 #0 [249642ms] -> syz_io_uring_submit(0x0, 0x0, 0x20000180, 0x81) SIGSEGV on 0x10c, skipping #0 [249643ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=1101 2021/11/11 15:09:04 result hanged=false: 2021/11/11 15:09:04 added new input for call #4 creat to corpus: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x78) fallocate(r0, 0x0, 0x0, 0x8800000) lseek(r0, 0x0, 0x4) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001200)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='auxv\x00') syz_io_uring_setup(0x25bb, &(0x7f0000000180)={0x0, 0xfcb6, 0x0, 0x3, 0x3d1, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r0, &(0x7f0000000900)={0x2, 0x100, 0xb}, &(0x7f0000000940)='./file0\x00', 0x18, 0x0, 0x12345}, 0x81) 2021/11/11 15:09:05 #0: triaging type=7 2021/11/11 15:09:05 triaging input for call #2 fallocate (new signal=5) 15:09:05 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x78) fallocate(r0, 0x0, 0x0, 0x8800000) lseek(r0, 0x0, 0x4) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001200)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='auxv\x00') syz_io_uring_setup(0x25bb, &(0x7f0000000180)={0x0, 0xfcb6, 0x0, 0x3, 0x3d1, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r0, &(0x7f0000000900)={0x2, 0x100, 0xb}, &(0x7f0000000940)='./file0\x00', 0x18, 0x0, 0x12345}, 0x81) [249684ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30306 #0 [249693ms] -> creat(0x20000040, 0x0) #0 [249694ms] <- creat=0x3 errno=14 cover=6778 #0 [249696ms] -> write$binfmt_elf64(0x3, 0x20000080, 0x78) #0 [249697ms] <- write$binfmt_elf64=0x78 errno=14 cover=2940 #0 [249698ms] -> fallocate(0x3, 0x0, 0x0, 0x8800000) #0 [249704ms] <- fallocate=0x0 errno=14 cover=86144 #0 [249710ms] -> lseek(0x3, 0x0, 0x4) #0 [249711ms] <- lseek=0x1000 errno=14 cover=889 #0 [249711ms] -> creat(0x20000000, 0x0) #0 [249714ms] <- creat=0x4 errno=14 cover=22197 #0 [249716ms] -> ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x40086602, 0x20001200) #0 [249716ms] <- ioctl$FS_IOC_GETFLAGS=0xffffffffffffffff errno=9 cover=45 #0 [249716ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [249717ms] <- syz_open_procfs=0x5 errno=14 cover=4055 #0 [249718ms] -> syz_io_uring_setup(0x25bb, 0x20000180, 0x20ffd000, 0x20ffb000, 0x20000200, 0x20000240) #0 [249721ms] <- syz_io_uring_setup=0x6 errno=14 cover=14663 #0 [249723ms] -> syz_io_uring_submit(0x0, 0x0, 0x20000180, 0x81) SIGSEGV on 0x10c, skipping #0 [249723ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=1045 15:09:05 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x78) fallocate(r0, 0x0, 0x0, 0x8800000) lseek(r0, 0x0, 0x4) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001200)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='auxv\x00') syz_io_uring_setup(0x25bb, &(0x7f0000000180)={0x0, 0xfcb6, 0x0, 0x3, 0x3d1, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r0, &(0x7f0000000900)={0x2, 0x100, 0xb}, &(0x7f0000000940)='./file0\x00', 0x18, 0x0, 0x12345}, 0x81) 2021/11/11 15:09:05 result hanged=false: [249747ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30308 #0 [249757ms] -> creat(0x20000040, 0x0) #0 [249759ms] <- creat=0x3 errno=14 cover=6738 #0 [249760ms] -> write$binfmt_elf64(0x3, 0x20000080, 0x78) #0 [249761ms] <- write$binfmt_elf64=0x78 errno=14 cover=2894 #0 [249761ms] -> fallocate(0x3, 0x0, 0x0, 0x8800000) #0 [249767ms] <- fallocate=0x0 errno=14 cover=96000 #0 [249774ms] -> lseek(0x3, 0x0, 0x4) #0 [249774ms] <- lseek=0x1000 errno=14 cover=912 #0 [249774ms] -> creat(0x20000000, 0x0) #0 [249775ms] <- creat=0x4 errno=14 cover=17149 #0 [249776ms] -> ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x40086602, 0x20001200) #0 [249776ms] <- ioctl$FS_IOC_GETFLAGS=0xffffffffffffffff errno=9 cover=45 #0 [249777ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [249777ms] <- syz_open_procfs=0x5 errno=14 cover=4074 #0 [249778ms] -> syz_io_uring_setup(0x25bb, 0x20000180, 0x20ffd000, 0x20ffb000, 0x20000200, 0x20000240) #0 [249783ms] <- syz_io_uring_setup=0x6 errno=14 cover=14777 #0 [249785ms] -> syz_io_uring_submit(0x0, 0x0, 0x20000180, 0x81) SIGSEGV on 0x10c, skipping #0 [249785ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=1045 15:09:05 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x78) fallocate(r0, 0x0, 0x0, 0x8800000) lseek(r0, 0x0, 0x4) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001200)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='auxv\x00') syz_io_uring_setup(0x25bb, &(0x7f0000000180)={0x0, 0xfcb6, 0x0, 0x3, 0x3d1, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r0, &(0x7f0000000900)={0x2, 0x100, 0xb}, &(0x7f0000000940)='./file0\x00', 0x18, 0x0, 0x12345}, 0x81) 2021/11/11 15:09:05 result hanged=false: [249807ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30310 #0 [249818ms] -> creat(0x20000040, 0x0) #0 [249818ms] <- creat=0x3 errno=14 cover=6706 #0 [249819ms] -> write$binfmt_elf64(0x3, 0x20000080, 0x78) #0 [249820ms] <- write$binfmt_elf64=0x78 errno=14 cover=2905 #0 [249820ms] -> fallocate(0x3, 0x0, 0x0, 0x8800000) #0 [249826ms] <- fallocate=0x0 errno=14 cover=94857 #0 [249855ms] -> lseek(0x3, 0x0, 0x4) #0 [249855ms] <- lseek=0x1000 errno=14 cover=912 #0 [249855ms] -> creat(0x20000000, 0x0) #0 [249856ms] <- creat=0x4 errno=14 cover=17190 #0 [249858ms] -> ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x40086602, 0x20001200) #0 [249858ms] <- ioctl$FS_IOC_GETFLAGS=0xffffffffffffffff errno=9 cover=45 #0 [249858ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [249858ms] <- syz_open_procfs=0x5 errno=14 cover=4006 #0 [249859ms] -> syz_io_uring_setup(0x25bb, 0x20000180, 0x20ffd000, 0x20ffb000, 0x20000200, 0x20000240) #0 [249861ms] <- syz_io_uring_setup=0x6 errno=14 cover=14530 #0 [249863ms] -> syz_io_uring_submit(0x0, 0x0, 0x20000180, 0x81) SIGSEGV on 0x10c, skipping #0 [249863ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=1045 2021/11/11 15:09:05 result hanged=false: 2021/11/11 15:09:05 added new input for call #2 fallocate to corpus: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x78) fallocate(r0, 0x0, 0x0, 0x8800000) lseek(r0, 0x0, 0x4) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001200)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='auxv\x00') syz_io_uring_setup(0x25bb, &(0x7f0000000180)={0x0, 0xfcb6, 0x0, 0x3, 0x3d1, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r0, &(0x7f0000000900)={0x2, 0x100, 0xb}, &(0x7f0000000940)='./file0\x00', 0x18, 0x0, 0x12345}, 0x81) iptable filter/10: resetting iptable mangle/10: resetting 15:09:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) [249900ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30312 2021/11/11 15:09:05 poll: candidates=8 inputs=0 signal=0 #0 [249914ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [249914ms] <- socket$inet_udp=0x3 errno=14 cover=1673 #0 [249915ms] -> setsockopt$inet_IP_XFRM_POLICY(0x3, 0x0, 0x11, 0x20000040, 0xe8) #0 [249916ms] <- setsockopt$inet_IP_XFRM_POLICY=0x0 errno=14 cover=638 #0 [249916ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [249916ms] <- connect$inet=0x0 errno=14 cover=975 enabling collider #0 [249916ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [249917ms] <- socket$inet_udp=0x3 errno=14 cover=1686 #0 [249917ms] -> setsockopt$inet_IP_XFRM_POLICY(0x3, 0x0, 0x11, 0x20000040, 0xe8) #0 [249917ms] <- setsockopt$inet_IP_XFRM_POLICY=0x0 errno=14 cover=569 pthread_create failed (errno 11) 2021/11/11 15:09:05 result hanged=false: 2021/11/11 15:09:05 #0: triaging type=7 2021/11/11 15:09:05 triaging input for call #1 setsockopt$inet_IP_XFRM_POLICY (new signal=1) 15:09:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) [249983ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30414 #0 [249994ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [249994ms] <- socket$inet_udp=0x3 errno=14 cover=1717 #0 [249995ms] -> setsockopt$inet_IP_XFRM_POLICY(0x3, 0x0, 0x11, 0x20000040, 0xe8) #0 [249996ms] <- setsockopt$inet_IP_XFRM_POLICY=0x0 errno=14 cover=548 #0 [249996ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [249997ms] <- connect$inet=0x0 errno=14 cover=1028 15:09:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 2021/11/11 15:09:05 result hanged=false: [250020ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30416 #0 [250029ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [250031ms] <- socket$inet_udp=0x3 errno=14 cover=1662 #0 [250033ms] -> setsockopt$inet_IP_XFRM_POLICY(0x3, 0x0, 0x11, 0x20000040, 0xe8) #0 [250033ms] <- setsockopt$inet_IP_XFRM_POLICY=0x0 errno=14 cover=548 #0 [250033ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [250034ms] <- connect$inet=0x0 errno=14 cover=978 2021/11/11 15:09:05 result hanged=false: 15:09:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) [250057ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30418 #0 [250070ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [250071ms] <- socket$inet_udp=0x3 errno=14 cover=1788 #0 [250072ms] -> setsockopt$inet_IP_XFRM_POLICY(0x3, 0x0, 0x11, 0x20000040, 0xe8) #0 [250072ms] <- setsockopt$inet_IP_XFRM_POLICY=0x0 errno=14 cover=569 #0 [250072ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [250073ms] <- connect$inet=0x0 errno=14 cover=1024 2021/11/11 15:09:05 result hanged=false: 2021/11/11 15:09:05 added new input for call #1 setsockopt$inet_IP_XFRM_POLICY to corpus: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 15:09:05 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}]}, 0x24}}, 0x0) [250102ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30420 #0 [250112ms] -> syz_genetlink_get_family_id$nl80211(0x200001c0, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [250114ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11693 #0 [250114ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [250114ms] <- socket$nl_generic=0x3 errno=14 cover=1378 #0 [250115ms] -> sendmsg$NL80211_CMD_START_NAN(0x3, 0x20000880, 0x0) #0 [250115ms] <- sendmsg$NL80211_CMD_START_NAN=0x24 errno=14 cover=1970 enabling collider #0 [250115ms] -> syz_genetlink_get_family_id$nl80211(0x200001c0, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [250116ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11187 #0 [250117ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [250117ms] <- socket$nl_generic=0x3 errno=14 cover=1439 pthread_create failed (errno 11) 15:09:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000000000000000700000000008f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 2021/11/11 15:09:05 result hanged=false: [250179ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30522 #0 [250190ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [250191ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1738 #0 [250192ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [250192ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1654 #0 [250193ms] -> ioctl$sock_SIOCGIFINDEX(0x4, 0x8933, 0x20000140) #0 [250193ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [250193ms] -> sendmmsg$inet(0x3, 0x20002040, 0x1, 0x0) #0 [250201ms] <- sendmmsg$inet=0x1 errno=14 cover=53123 enabling collider #0 [250205ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [250208ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1730 #0 [250208ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [250210ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1783 pthread_create failed (errno 11) 2021/11/11 15:09:05 result hanged=false: 2021/11/11 15:09:05 #0: triaging type=7 2021/11/11 15:09:05 triaging input for call #3 sendmmsg$inet (new signal=1) 15:09:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000000000000000700000000008f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) iptable filter/2: resetting iptable mangle/2: resetting [250275ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30624 #0 [250288ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [250288ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1699 #0 [250289ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [250289ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1720 #0 [250289ms] -> ioctl$sock_SIOCGIFINDEX(0x4, 0x8933, 0x20000140) #0 [250289ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [250290ms] -> sendmmsg$inet(0x3, 0x20002040, 0x1, 0x0) #0 [250297ms] <- sendmmsg$inet=0x1 errno=14 cover=47002 2021/11/11 15:09:05 result hanged=false: 15:09:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000000000000000700000000008f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) iptable filter/2: resetting iptable mangle/2: resetting [250334ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30626 #0 [250347ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [250347ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1655 #0 [250348ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [250348ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1700 #0 [250351ms] -> ioctl$sock_SIOCGIFINDEX(0x4, 0x8933, 0x20000140) #0 [250351ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [250351ms] -> sendmmsg$inet(0x3, 0x20002040, 0x1, 0x0) #0 [250363ms] <- sendmmsg$inet=0x1 errno=14 cover=47103 15:09:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000000000000000700000000008f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 2021/11/11 15:09:05 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [250394ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30628 #0 [250410ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [250411ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1666 #0 [250412ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [250412ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1676 #0 [250413ms] -> ioctl$sock_SIOCGIFINDEX(0x4, 0x8933, 0x20000140) #0 [250413ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [250413ms] -> sendmmsg$inet(0x3, 0x20002040, 0x1, 0x0) #0 [250421ms] <- sendmmsg$inet=0x1 errno=14 cover=46726 2021/11/11 15:09:05 result hanged=false: 2021/11/11 15:09:05 added new input for call #3 sendmmsg$inet to corpus: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000000000000000000000700000000008f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) iptable filter/2: resetting iptable mangle/2: resetting 15:09:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0xffffffffffffffe7, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x22, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x3c}}, 0x0) [250473ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30630 #0 [250483ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [250483ms] <- socket$nl_generic=0x3 errno=14 cover=1434 #0 [250484ms] -> syz_genetlink_get_family_id$ethtool(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [250485ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=7834 #0 [250486ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [250486ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1664 #0 [250486ms] -> ioctl$sock_SIOCGIFINDEX(0x4, 0x8933, 0x20000140) #0 [250486ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [250486ms] -> sendmsg$ETHTOOL_MSG_FEATURES_SET(0x3, 0x20000200, 0x0) #0 [250487ms] <- sendmsg$ETHTOOL_MSG_FEATURES_SET=0x3c errno=14 cover=3621 enabling collider #0 [250487ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [250489ms] <- socket$nl_generic=0x3 errno=14 cover=1454 #0 [250490ms] -> syz_genetlink_get_family_id$ethtool(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [250492ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=7374 pthread_create failed (errno 11) 15:09:05 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000340)) 2021/11/11 15:09:05 result hanged=false: [250556ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30732 #0 [250567ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [250568ms] <- perf_event_open=0x3 errno=14 cover=3913 #0 [250568ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [250568ms] <- openat$sndseq=0x4 errno=14 cover=2164 #0 [250568ms] -> ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0x4, 0xc05c5340, 0x20000340) #0 [250569ms] <- ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS=0xffffffffffffffff errno=22 cover=1838 enabling collider #0 [250569ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [250569ms] <- perf_event_open=0x3 errno=14 cover=3864 #0 [250570ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [250571ms] <- openat$sndseq=0x4 errno=14 cover=2237 pthread_create failed (errno 11) 2021/11/11 15:09:05 result hanged=false: 2021/11/11 15:09:05 #0: triaging type=7 2021/11/11 15:09:05 triaging input for call #2 ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS (new signal=4) 15:09:05 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000340)) [250636ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30834 #0 [250647ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [250648ms] <- perf_event_open=0x3 errno=14 cover=4053 #0 [250649ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [250651ms] <- openat$sndseq=0x4 errno=14 cover=5665 #0 [250652ms] -> ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0x4, 0xc05c5340, 0x20000340) #0 [250652ms] <- ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS=0xffffffffffffffff errno=22 cover=337 15:09:05 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000340)) 2021/11/11 15:09:05 result hanged=false: [250675ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30836 #0 [250684ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [250685ms] <- perf_event_open=0x3 errno=14 cover=4122 #0 [250691ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [250691ms] <- openat$sndseq=0x4 errno=14 cover=5816 #0 [250693ms] -> ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0x4, 0xc05c5340, 0x20000340) #0 [250694ms] <- ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS=0xffffffffffffffff errno=22 cover=337 15:09:06 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000340)) 2021/11/11 15:09:06 result hanged=false: [250722ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30838 #0 [250732ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [250732ms] <- perf_event_open=0x3 errno=14 cover=3982 #0 [250733ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [250733ms] <- openat$sndseq=0x4 errno=14 cover=2203 #0 [250734ms] -> ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0x4, 0xc05c5340, 0x20000340) #0 [250734ms] <- ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS=0xffffffffffffffff errno=22 cover=192 2021/11/11 15:09:06 result hanged=false: 2021/11/11 15:09:06 added new input for call #2 ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000340)) 15:09:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}, {0x0}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=ANY=[@ANYBLOB]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) fcntl$dupfd(r0, 0x406, r0) r1 = fork() ptrace(0x10, r1) migrate_pages(r1, 0x4, &(0x7f0000000200)=0x7a52b9a7, &(0x7f0000000240)=0x1) r2 = getegid() setresgid(r2, r2, 0x0) r3 = fork() r4 = getpgid(r1) ptrace(0x4207, r4) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x2, 0x0, 0xee00, 0x0, 0x0, 0x0, 0x9}, 0x3, 0xf80000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f00000007c0)={0x5, 0x1, 0x2}, &(0x7f0000000800)=[{}, {}]) [250758ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30840 #0 [250767ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [250770ms] <- perf_event_open=0x3 errno=14 cover=3901 #0 [250770ms] -> syz_mount_image$vfat(0x20000000, 0x200000c0, 0x0, 0x3, 0x20000200, 0x0, 0x20011300) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 320.692795] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) #0 [250784ms] <- syz_mount_image$vfat=0x6 errno=0 cover=26774 #0 [250786ms] -> chdir(0x20000040) #0 [250786ms] <- chdir=0x0 errno=14 cover=1604 #0 [250786ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [250789ms] <- openat=0x4 errno=14 cover=28128 #0 [250790ms] -> socket$unix(0x1, 0x1, 0x0) #0 [250791ms] <- socket$unix=0x5 errno=14 cover=4370 #0 [250792ms] -> ioctl$sock_SIOCETHTOOL(0x5, 0x8946, 0x20000080) #0 [250792ms] <- ioctl$sock_SIOCETHTOOL=0xffffffffffffffff errno=95 cover=450 #0 [250792ms] -> socketpair$unix(0x1, 0x1, 0x0, 0x20000040) #0 [250794ms] <- socketpair$unix=0x0 errno=14 cover=8926 #0 [250794ms] -> fcntl$dupfd(0x5, 0x406, 0x5) #0 [250794ms] <- fcntl$dupfd=0x9 errno=14 cover=197 #0 [250794ms] -> fork() #0 [250816ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [250820ms] -> ptrace(0x10, 0x0) #0 [250820ms] <- ptrace=0xffffffffffffffff errno=3 cover=93 #0 [250820ms] -> migrate_pages(0x0, 0x4, 0x20000200, 0x20000240) #0 [250825ms] <- migrate_pages=0x0 errno=14 cover=223960 #0 [250827ms] -> getegid() #0 [250827ms] <- getegid=0x0 errno=14 cover=43 #0 [250827ms] -> setresgid(0x0, 0x0, 0x0) #0 [250827ms] <- setresgid=0x0 errno=14 cover=1865 #0 [250828ms] -> fork() #0 [250852ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [250854ms] -> getpgid(0x0) #0 [250854ms] <- getpgid=0x7878 errno=14 cover=77 #0 [250854ms] -> ptrace(0x4207, 0x7878) #0 [250854ms] <- ptrace=0xffffffffffffffff errno=3 cover=141 #0 [250854ms] -> semctl$IPC_SET(0x0, 0x0, 0x1, 0x20000040) #0 [250855ms] <- semctl$IPC_SET=0x0 errno=22 cover=294 #0 [250855ms] -> ptrace(0x10, 0x0) #0 [250857ms] <- ptrace=0xffffffffffffffff errno=3 cover=93 #0 [250857ms] -> ptrace$peeksig(0x4209, 0x0, 0x200007c0, 0x20000800) #0 [250857ms] <- ptrace$peeksig=0xffffffffffffffff errno=3 cover=93 enabling collider #0 [250859ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [250859ms] <- perf_event_open=0x3 errno=14 cover=4106 #0 [250861ms] -> syz_mount_image$vfat(0x20000000, 0x200000c0, 0x0, 0x3, 0x20000200, 0x0, 0x20011300) #0 [250865ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=16 cover=14754 pthread_create failed (errno 11) 15:09:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}, {0x0}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=ANY=[@ANYBLOB]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) fcntl$dupfd(r0, 0x406, r0) r1 = fork() ptrace(0x10, r1) migrate_pages(r1, 0x4, &(0x7f0000000200)=0x7a52b9a7, &(0x7f0000000240)=0x1) r2 = getegid() setresgid(r2, r2, 0x0) r3 = fork() r4 = getpgid(r1) ptrace(0x4207, r4) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x2, 0x0, 0xee00, 0x0, 0x0, 0x0, 0x9}, 0x3, 0xf80000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f00000007c0)={0x5, 0x1, 0x2}, &(0x7f0000000800)=[{}, {}]) 2021/11/11 15:09:06 result hanged=false: 2021/11/11 15:09:06 #0: triaging type=7 2021/11/11 15:09:06 triaging input for call #16 semctl$IPC_SET (new signal=6) [ 320.834563] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) umount(./1959/file0) [250942ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30944 #0 [250951ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [250952ms] <- perf_event_open=0x3 errno=14 cover=3933 #0 [250953ms] -> syz_mount_image$vfat(0x20000000, 0x200000c0, 0x0, 0x3, 0x20000200, 0x0, 0x20011300) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 320.873220] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) #0 [250964ms] <- syz_mount_image$vfat=0x6 errno=0 cover=22633 #0 [250966ms] -> chdir(0x20000040) #0 [250966ms] <- chdir=0x0 errno=14 cover=664 #0 [250966ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [250969ms] <- openat=0x4 errno=14 cover=10674 #0 [250970ms] -> socket$unix(0x1, 0x1, 0x0) #0 [250970ms] <- socket$unix=0x5 errno=14 cover=1438 #0 [250970ms] -> ioctl$sock_SIOCETHTOOL(0x5, 0x8946, 0x20000080) #0 [250970ms] <- ioctl$sock_SIOCETHTOOL=0xffffffffffffffff errno=95 cover=247 #0 [250970ms] -> socketpair$unix(0x1, 0x1, 0x0, 0x20000040) #0 [250971ms] <- socketpair$unix=0x0 errno=14 cover=2946 #0 [250971ms] -> fcntl$dupfd(0x5, 0x406, 0x5) #0 [250971ms] <- fcntl$dupfd=0x9 errno=14 cover=110 #0 [250971ms] -> fork() #0 [250992ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [251007ms] -> ptrace(0x10, 0x0) #0 [251008ms] <- ptrace=0xffffffffffffffff errno=3 cover=93 #0 [251009ms] -> migrate_pages(0x0, 0x4, 0x20000200, 0x20000240) #0 [251017ms] <- migrate_pages=0x0 errno=14 cover=220265 #0 [251029ms] -> getegid() #0 [251029ms] <- getegid=0x0 errno=14 cover=43 #0 [251029ms] -> setresgid(0x0, 0x0, 0x0) #0 [251029ms] <- setresgid=0x0 errno=14 cover=1943 #0 [251030ms] -> fork() #0 [251055ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [251070ms] -> getpgid(0x0) #0 [251070ms] <- getpgid=0x78e0 errno=14 cover=77 #0 [251070ms] -> ptrace(0x4207, 0x78e0) #0 [251070ms] <- ptrace=0xffffffffffffffff errno=3 cover=141 #0 [251071ms] -> semctl$IPC_SET(0x0, 0x0, 0x1, 0x20000040) #0 [251071ms] <- semctl$IPC_SET=0x0 errno=22 cover=294 #0 [251071ms] -> ptrace(0x10, 0x0) #0 [251071ms] <- ptrace=0xffffffffffffffff errno=3 cover=93 #0 [251072ms] -> ptrace$peeksig(0x4209, 0x0, 0x200007c0, 0x20000800) #0 [251072ms] <- ptrace$peeksig=0xffffffffffffffff errno=3 cover=93 15:09:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}, {0x0}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=ANY=[@ANYBLOB]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) fcntl$dupfd(r0, 0x406, r0) r1 = fork() ptrace(0x10, r1) migrate_pages(r1, 0x4, &(0x7f0000000200)=0x7a52b9a7, &(0x7f0000000240)=0x1) r2 = getegid() setresgid(r2, r2, 0x0) r3 = fork() r4 = getpgid(r1) ptrace(0x4207, r4) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x2, 0x0, 0xee00, 0x0, 0x0, 0x0, 0x9}, 0x3, 0xf80000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f00000007c0)={0x5, 0x1, 0x2}, &(0x7f0000000800)=[{}, {}]) 2021/11/11 15:09:06 result hanged=false: [ 321.002319] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) umount(./1960/file0) [251112ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30948 #0 [251122ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [251122ms] <- perf_event_open=0x3 errno=14 cover=4245 #0 [251123ms] -> syz_mount_image$vfat(0x20000000, 0x200000c0, 0x0, 0x3, 0x20000200, 0x0, 0x20011300) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 321.041130] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) #0 [251132ms] <- syz_mount_image$vfat=0x6 errno=0 cover=22467 #0 [251133ms] -> chdir(0x20000040) #0 [251134ms] <- chdir=0x0 errno=14 cover=665 #0 [251134ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [251136ms] <- openat=0x4 errno=14 cover=12209 #0 [251137ms] -> socket$unix(0x1, 0x1, 0x0) #0 [251137ms] <- socket$unix=0x5 errno=14 cover=1427 #0 [251137ms] -> ioctl$sock_SIOCETHTOOL(0x5, 0x8946, 0x20000080) #0 [251137ms] <- ioctl$sock_SIOCETHTOOL=0xffffffffffffffff errno=95 cover=247 #0 [251137ms] -> socketpair$unix(0x1, 0x1, 0x0, 0x20000040) #0 [251138ms] <- socketpair$unix=0x0 errno=14 cover=2867 #0 [251138ms] -> fcntl$dupfd(0x5, 0x406, 0x5) #0 [251138ms] <- fcntl$dupfd=0x9 errno=14 cover=110 #0 [251138ms] -> fork() #0 [251159ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [251175ms] -> ptrace(0x10, 0x0) #0 [251175ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [251176ms] -> migrate_pages(0x0, 0x4, 0x20000200, 0x20000240) #0 [251183ms] <- migrate_pages=0x0 errno=14 cover=216570 #0 [251193ms] -> getegid() #0 [251193ms] <- getegid=0x0 errno=14 cover=43 #0 [251193ms] -> setresgid(0x0, 0x0, 0x0) #0 [251193ms] <- setresgid=0x0 errno=14 cover=435 #0 [251194ms] -> fork() #0 [251213ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [251231ms] -> getpgid(0x0) #0 [251231ms] <- getpgid=0x78e4 errno=14 cover=48 #0 [251232ms] -> ptrace(0x4207, 0x78e4) #0 [251232ms] <- ptrace=0xffffffffffffffff errno=3 cover=83 #0 [251232ms] -> semctl$IPC_SET(0x0, 0x0, 0x1, 0x20000040) #0 [251232ms] <- semctl$IPC_SET=0x0 errno=22 cover=149 #0 [251232ms] -> ptrace(0x10, 0x0) #0 [251232ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [251232ms] -> ptrace$peeksig(0x4209, 0x0, 0x200007c0, 0x20000800) #0 [251232ms] <- ptrace$peeksig=0xffffffffffffffff errno=3 cover=64 15:09:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}, {0x0}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=ANY=[@ANYBLOB]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) fcntl$dupfd(r0, 0x406, r0) r1 = fork() ptrace(0x10, r1) migrate_pages(r1, 0x4, &(0x7f0000000200)=0x7a52b9a7, &(0x7f0000000240)=0x1) r2 = getegid() setresgid(r2, r2, 0x0) r3 = fork() r4 = getpgid(r1) ptrace(0x4207, r4) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x2, 0x0, 0xee00, 0x0, 0x0, 0x0, 0x9}, 0x3, 0xf80000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f00000007c0)={0x5, 0x1, 0x2}, &(0x7f0000000800)=[{}, {}]) 2021/11/11 15:09:06 result hanged=false: [ 321.164920] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) umount(./1961/file0) [251269ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30952 #0 [251280ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [251281ms] <- perf_event_open=0x3 errno=14 cover=4215 #0 [251282ms] -> syz_mount_image$vfat(0x20000000, 0x200000c0, 0x0, 0x3, 0x20000200, 0x0, 0x20011300) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 321.209438] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) #0 [251300ms] <- syz_mount_image$vfat=0x6 errno=0 cover=68994 #0 [251305ms] -> chdir(0x20000040) #0 [251305ms] <- chdir=0x0 errno=14 cover=664 #0 [251306ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [251307ms] <- openat=0x4 errno=14 cover=9712 #0 [251308ms] -> socket$unix(0x1, 0x1, 0x0) #0 [251309ms] <- socket$unix=0x5 errno=14 cover=1449 #0 [251310ms] -> ioctl$sock_SIOCETHTOOL(0x5, 0x8946, 0x20000080) #0 [251310ms] <- ioctl$sock_SIOCETHTOOL=0xffffffffffffffff errno=95 cover=247 #0 [251310ms] -> socketpair$unix(0x1, 0x1, 0x0, 0x20000040) #0 [251310ms] <- socketpair$unix=0x0 errno=14 cover=2867 #0 [251311ms] -> fcntl$dupfd(0x5, 0x406, 0x5) #0 [251312ms] <- fcntl$dupfd=0x9 errno=14 cover=110 #0 [251312ms] -> fork() #0 [251331ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [251349ms] -> ptrace(0x10, 0x0) #0 [251351ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [251353ms] -> migrate_pages(0x0, 0x4, 0x20000200, 0x20000240) #0 [251359ms] <- migrate_pages=0x0 errno=14 cover=216445 #0 [251370ms] -> getegid() #0 [251370ms] <- getegid=0x0 errno=14 cover=43 #0 [251370ms] -> setresgid(0x0, 0x0, 0x0) #0 [251370ms] <- setresgid=0x0 errno=14 cover=410 #0 [251370ms] -> fork() #0 [251388ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [251403ms] -> getpgid(0x0) #0 [251403ms] <- getpgid=0x78e8 errno=14 cover=48 #0 [251403ms] -> ptrace(0x4207, 0x78e8) #0 [251403ms] <- ptrace=0xffffffffffffffff errno=3 cover=83 #0 [251403ms] -> semctl$IPC_SET(0x0, 0x0, 0x1, 0x20000040) #0 [251403ms] <- semctl$IPC_SET=0x0 errno=22 cover=149 #0 [251403ms] -> ptrace(0x10, 0x0) #0 [251403ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [251403ms] -> ptrace$peeksig(0x4209, 0x0, 0x200007c0, 0x20000800) #0 [251403ms] <- ptrace$peeksig=0xffffffffffffffff errno=3 cover=64 2021/11/11 15:09:06 result hanged=false: 2021/11/11 15:09:06 added new input for call #16 semctl$IPC_SET to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}, {0x0}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=ANY=[@ANYBLOB]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) fcntl$dupfd(r0, 0x406, r0) r1 = fork() ptrace(0x10, r1) migrate_pages(r1, 0x4, &(0x7f0000000200)=0x7a52b9a7, &(0x7f0000000240)=0x1) r2 = getegid() setresgid(r2, r2, 0x0) r3 = fork() r4 = getpgid(r1) ptrace(0x4207, r4) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x2, 0x0, 0xee00, 0x0, 0x0, 0x0, 0x9}, 0x3, 0xf80000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f00000007c0)={0x5, 0x1, 0x2}, &(0x7f0000000800)=[{}, {}]) [ 321.332771] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 15:09:06 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @remote}, {0x308}, 0x2e}) umount(./1962/file0) [251443ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30956 #0 [251455ms] -> socket$inet(0x2, 0x2, 0x0) #0 [251455ms] <- socket$inet=0x3 errno=14 cover=1712 #0 [251456ms] -> ioctl$sock_inet_SIOCSARP(0x3, 0x8955, 0x20000100) #0 [251456ms] <- ioctl$sock_inet_SIOCSARP=0x0 errno=14 cover=210 enabling collider #0 [251457ms] -> socket$inet(0x2, 0x2, 0x0) #0 [251457ms] <- socket$inet=0x3 errno=14 cover=1712 15:09:06 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@target={'target ', {'PCI:', '0', ':', '1', ':', '5', '.', '12'}}, 0x14) 2021/11/11 15:09:06 result hanged=false: [251481ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30958 #0 [251491ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x200001c0, 0x40001, 0x0) #0 [251491ms] <- openat$vga_arbiter=0x3 errno=14 cover=1210 #0 [251492ms] -> write$vga_arbiter(0x3, 0x20000000, 0x14) #0 [251495ms] <- write$vga_arbiter=0xffffffffffffffff errno=19 cover=1006 enabling collider #0 [251495ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x200001c0, 0x40001, 0x0) #0 [251495ms] <- openat$vga_arbiter=0x3 errno=14 cover=1209 15:09:06 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@target={'target ', {'PCI:', '0', ':', '1', ':', '5', '.', '12'}}, 0x14) 2021/11/11 15:09:06 result hanged=false: 2021/11/11 15:09:06 #0: triaging type=7 2021/11/11 15:09:06 triaging input for call #1 write$vga_arbiter (new signal=1) [251523ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30960 #0 [251533ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x200001c0, 0x40001, 0x0) #0 [251533ms] <- openat$vga_arbiter=0x3 errno=14 cover=1265 #0 [251534ms] -> write$vga_arbiter(0x3, 0x20000000, 0x14) #0 [251534ms] <- write$vga_arbiter=0xffffffffffffffff errno=19 cover=1006 15:09:06 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@target={'target ', {'PCI:', '0', ':', '1', ':', '5', '.', '12'}}, 0x14) 2021/11/11 15:09:06 result hanged=false: [251557ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30962 #0 [251568ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x200001c0, 0x40001, 0x0) #0 [251570ms] <- openat$vga_arbiter=0x3 errno=14 cover=1209 #0 [251571ms] -> write$vga_arbiter(0x3, 0x20000000, 0x14) #0 [251571ms] <- write$vga_arbiter=0xffffffffffffffff errno=19 cover=1006 2021/11/11 15:09:06 result hanged=false: 15:09:06 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@target={'target ', {'PCI:', '0', ':', '1', ':', '5', '.', '12'}}, 0x14) [251596ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30964 #0 [251608ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x200001c0, 0x40001, 0x0) #0 [251608ms] <- openat$vga_arbiter=0x3 errno=14 cover=1209 #0 [251611ms] -> write$vga_arbiter(0x3, 0x20000000, 0x14) #0 [251611ms] <- write$vga_arbiter=0xffffffffffffffff errno=19 cover=1006 2021/11/11 15:09:06 result hanged=false: 2021/11/11 15:09:06 added new input for call #1 write$vga_arbiter to corpus: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@target={'target ', {'PCI:', '0', ':', '1', ':', '5', '.', '12'}}, 0x14) 15:09:06 executing program 0: io_uring_setup(0x0, 0x0) [251637ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30966 2021/11/11 15:09:06 poll: candidates=8 inputs=0 signal=0 #0 [251646ms] -> io_uring_setup(0x0, 0x0) #0 [251646ms] <- io_uring_setup=0xffffffffffffffff errno=14 cover=394 enabling collider #0 [251647ms] -> io_uring_setup(0x0, 0x0) #0 [251647ms] <- io_uring_setup=0xffffffffffffffff errno=14 cover=395 2021/11/11 15:09:06 result hanged=false: 15:09:06 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5420, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5423) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) socket$packet(0x11, 0x0, 0x300) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) [251670ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 30968 #0 [251682ms] -> openat$sndtimer(0xffffffffffffff9c, 0x20000000, 0x0) #0 [251682ms] <- openat$sndtimer=0x3 errno=14 cover=1375 #0 [251683ms] -> ioctl$SNDRV_TIMER_IOCTL_SELECT(0x3, 0x40345410, 0x20000080) #0 [251684ms] <- ioctl$SNDRV_TIMER_IOCTL_SELECT=0x0 errno=14 cover=8773 #0 [251685ms] -> ioctl$SNDRV_TIMER_IOCTL_SELECT(0x3, 0x5420, 0x0) #0 [251686ms] <- ioctl$SNDRV_TIMER_IOCTL_SELECT=0x0 errno=14 cover=5257 #0 [251686ms] -> ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0x3, 0x5423) #0 [251686ms] <- ioctl$SNDRV_TIMER_IOCTL_CONTINUE=0x0 errno=14 cover=187 #0 [251687ms] -> ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0x3, 0x54a2) #0 [251687ms] <- ioctl$SNDRV_TIMER_IOCTL_CONTINUE=0x0 errno=14 cover=210 #0 [251687ms] -> socket$packet(0x11, 0x0, 0x300) #0 [251688ms] <- socket$packet=0xffffffffffffffff errno=94 cover=748 #0 [251688ms] -> ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0x3, 0x54a2) #0 [251688ms] <- ioctl$SNDRV_TIMER_IOCTL_CONTINUE=0xffffffffffffffff errno=16 cover=134 enabling collider #0 [251689ms] -> openat$sndtimer(0xffffffffffffff9c, 0x20000000, 0x0) #0 [251689ms] <- openat$sndtimer=0x3 errno=14 cover=1352 #0 [251691ms] -> ioctl$SNDRV_TIMER_IOCTL_SELECT(0x3, 0x40345410, 0x20000080) #0 [251691ms] <- ioctl$SNDRV_TIMER_IOCTL_SELECT=0x0 errno=14 cover=417 pthread_create failed (errno 11) 15:09:07 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5420, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5423) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) socket$packet(0x11, 0x0, 0x300) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2021/11/11 15:09:07 result hanged=false: 2021/11/11 15:09:07 #0: triaging type=7 2021/11/11 15:09:07 triaging input for call #2 ioctl$SNDRV_TIMER_IOCTL_SELECT (new signal=1) [251753ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31070 #0 [251763ms] -> openat$sndtimer(0xffffffffffffff9c, 0x20000000, 0x0) #0 [251763ms] <- openat$sndtimer=0x3 errno=14 cover=1386 #0 [251763ms] -> ioctl$SNDRV_TIMER_IOCTL_SELECT(0x3, 0x40345410, 0x20000080) #0 [251765ms] <- ioctl$SNDRV_TIMER_IOCTL_SELECT=0x0 errno=14 cover=417 #0 [251765ms] -> ioctl$SNDRV_TIMER_IOCTL_SELECT(0x3, 0x5420, 0x0) #0 [251765ms] <- ioctl$SNDRV_TIMER_IOCTL_SELECT=0x0 errno=14 cover=230 #0 [251765ms] -> ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0x3, 0x5423) #0 [251765ms] <- ioctl$SNDRV_TIMER_IOCTL_CONTINUE=0x0 errno=14 cover=188 #0 [251765ms] -> ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0x3, 0x54a2) #0 [251765ms] <- ioctl$SNDRV_TIMER_IOCTL_CONTINUE=0x0 errno=14 cover=207 #0 [251765ms] -> socket$packet(0x11, 0x0, 0x300) #0 [251765ms] <- socket$packet=0xffffffffffffffff errno=94 cover=723 #0 [251766ms] -> ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0x3, 0x54a2) #0 [251766ms] <- ioctl$SNDRV_TIMER_IOCTL_CONTINUE=0xffffffffffffffff errno=16 cover=134 15:09:07 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5420, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5423) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) socket$packet(0x11, 0x0, 0x300) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2021/11/11 15:09:07 result hanged=false: [251788ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31072 #0 [251799ms] -> openat$sndtimer(0xffffffffffffff9c, 0x20000000, 0x0) #0 [251802ms] <- openat$sndtimer=0x3 errno=14 cover=1375 #0 [251803ms] -> ioctl$SNDRV_TIMER_IOCTL_SELECT(0x3, 0x40345410, 0x20000080) #0 [251803ms] <- ioctl$SNDRV_TIMER_IOCTL_SELECT=0x0 errno=14 cover=417 #0 [251804ms] -> ioctl$SNDRV_TIMER_IOCTL_SELECT(0x3, 0x5420, 0x0) #0 [251804ms] <- ioctl$SNDRV_TIMER_IOCTL_SELECT=0x0 errno=14 cover=230 #0 [251804ms] -> ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0x3, 0x5423) #0 [251804ms] <- ioctl$SNDRV_TIMER_IOCTL_CONTINUE=0x0 errno=14 cover=188 #0 [251804ms] -> ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0x3, 0x54a2) #0 [251804ms] <- ioctl$SNDRV_TIMER_IOCTL_CONTINUE=0x0 errno=14 cover=211 #0 [251804ms] -> socket$packet(0x11, 0x0, 0x300) #0 [251805ms] <- socket$packet=0xffffffffffffffff errno=94 cover=759 #0 [251805ms] -> ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0x3, 0x54a2) #0 [251805ms] <- ioctl$SNDRV_TIMER_IOCTL_CONTINUE=0xffffffffffffffff errno=16 cover=134 15:09:07 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5420, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5423) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) socket$packet(0x11, 0x0, 0x300) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2021/11/11 15:09:07 result hanged=false: [251827ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31074 #0 [251838ms] -> openat$sndtimer(0xffffffffffffff9c, 0x20000000, 0x0) #0 [251838ms] <- openat$sndtimer=0x3 errno=14 cover=1364 #0 [251838ms] -> ioctl$SNDRV_TIMER_IOCTL_SELECT(0x3, 0x40345410, 0x20000080) #0 [251839ms] <- ioctl$SNDRV_TIMER_IOCTL_SELECT=0x0 errno=14 cover=417 #0 [251839ms] -> ioctl$SNDRV_TIMER_IOCTL_SELECT(0x3, 0x5420, 0x0) #0 [251839ms] <- ioctl$SNDRV_TIMER_IOCTL_SELECT=0x0 errno=14 cover=229 #0 [251839ms] -> ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0x3, 0x5423) #0 [251840ms] <- ioctl$SNDRV_TIMER_IOCTL_CONTINUE=0x0 errno=14 cover=187 #0 [251840ms] -> ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0x3, 0x54a2) #0 [251840ms] <- ioctl$SNDRV_TIMER_IOCTL_CONTINUE=0x0 errno=14 cover=209 #0 [251840ms] -> socket$packet(0x11, 0x0, 0x300) #0 [251840ms] <- socket$packet=0xffffffffffffffff errno=94 cover=734 #0 [251840ms] -> ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0x3, 0x54a2) #0 [251840ms] <- ioctl$SNDRV_TIMER_IOCTL_CONTINUE=0xffffffffffffffff errno=16 cover=134 2021/11/11 15:09:07 result hanged=false: 2021/11/11 15:09:07 added new input for call #2 ioctl$SNDRV_TIMER_IOCTL_SELECT to corpus: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5420, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5423) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) socket$packet(0x11, 0x0, 0x300) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 15:09:07 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5420, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5423) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) socket$packet(0x11, 0x0, 0x300) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) [251870ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 15:09:07 #0: triaging type=7 2021/11/11 15:09:07 triaging input for call #1 ioctl$SNDRV_TIMER_IOCTL_SELECT (new signal=2) spawned worker pid 31076 #0 [251879ms] -> openat$sndtimer(0xffffffffffffff9c, 0x20000000, 0x0) #0 [251879ms] <- openat$sndtimer=0x3 errno=14 cover=1343 #0 [251880ms] -> ioctl$SNDRV_TIMER_IOCTL_SELECT(0x3, 0x40345410, 0x20000080) #0 [251880ms] <- ioctl$SNDRV_TIMER_IOCTL_SELECT=0x0 errno=14 cover=439 #0 [251880ms] -> ioctl$SNDRV_TIMER_IOCTL_SELECT(0x3, 0x5420, 0x0) #0 [251880ms] <- ioctl$SNDRV_TIMER_IOCTL_SELECT=0x0 errno=14 cover=227 #0 [251880ms] -> ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0x3, 0x5423) #0 [251880ms] <- ioctl$SNDRV_TIMER_IOCTL_CONTINUE=0x0 errno=14 cover=188 #0 [251880ms] -> ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0x3, 0x54a2) #0 [251881ms] <- ioctl$SNDRV_TIMER_IOCTL_CONTINUE=0x0 errno=14 cover=209 #0 [251881ms] -> socket$packet(0x11, 0x0, 0x300) #0 [251881ms] <- socket$packet=0xffffffffffffffff errno=94 cover=734 #0 [251881ms] -> ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0x3, 0x54a2) #0 [251881ms] <- ioctl$SNDRV_TIMER_IOCTL_CONTINUE=0xffffffffffffffff errno=16 cover=134 15:09:07 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5420, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5423) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) socket$packet(0x11, 0x0, 0x300) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2021/11/11 15:09:07 result hanged=false: [251903ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31078 #0 [251915ms] -> openat$sndtimer(0xffffffffffffff9c, 0x20000000, 0x0) #0 [251915ms] <- openat$sndtimer=0x3 errno=14 cover=1375 #0 [251916ms] -> ioctl$SNDRV_TIMER_IOCTL_SELECT(0x3, 0x40345410, 0x20000080) #0 [251916ms] <- ioctl$SNDRV_TIMER_IOCTL_SELECT=0x0 errno=14 cover=428 #0 [251916ms] -> ioctl$SNDRV_TIMER_IOCTL_SELECT(0x3, 0x5420, 0x0) #0 [251916ms] <- ioctl$SNDRV_TIMER_IOCTL_SELECT=0x0 errno=14 cover=230 #0 [251917ms] -> ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0x3, 0x5423) #0 [251917ms] <- ioctl$SNDRV_TIMER_IOCTL_CONTINUE=0x0 errno=14 cover=187 #0 [251918ms] -> ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0x3, 0x54a2) #0 [251918ms] <- ioctl$SNDRV_TIMER_IOCTL_CONTINUE=0x0 errno=14 cover=210 #0 [251918ms] -> socket$packet(0x11, 0x0, 0x300) #0 [251918ms] <- socket$packet=0xffffffffffffffff errno=94 cover=723 #0 [251919ms] -> ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0x3, 0x54a2) #0 [251919ms] <- ioctl$SNDRV_TIMER_IOCTL_CONTINUE=0xffffffffffffffff errno=16 cover=134 15:09:07 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5420, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5423) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) socket$packet(0x11, 0x0, 0x300) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2021/11/11 15:09:07 result hanged=false: [251942ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31080 #0 [251953ms] -> openat$sndtimer(0xffffffffffffff9c, 0x20000000, 0x0) #0 [251956ms] <- openat$sndtimer=0x3 errno=14 cover=1436 #0 [251956ms] -> ioctl$SNDRV_TIMER_IOCTL_SELECT(0x3, 0x40345410, 0x20000080) #0 [251956ms] <- ioctl$SNDRV_TIMER_IOCTL_SELECT=0x0 errno=14 cover=417 #0 [251956ms] -> ioctl$SNDRV_TIMER_IOCTL_SELECT(0x3, 0x5420, 0x0) #0 [251957ms] <- ioctl$SNDRV_TIMER_IOCTL_SELECT=0x0 errno=14 cover=232 #0 [251957ms] -> ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0x3, 0x5423) #0 [251957ms] <- ioctl$SNDRV_TIMER_IOCTL_CONTINUE=0x0 errno=14 cover=188 #0 [251957ms] -> ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0x3, 0x54a2) #0 [251957ms] <- ioctl$SNDRV_TIMER_IOCTL_CONTINUE=0x0 errno=14 cover=207 #0 [251957ms] -> socket$packet(0x11, 0x0, 0x300) #0 [251957ms] <- socket$packet=0xffffffffffffffff errno=94 cover=734 #0 [251957ms] -> ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0x3, 0x54a2) #0 [251957ms] <- ioctl$SNDRV_TIMER_IOCTL_CONTINUE=0xffffffffffffffff errno=16 cover=134 2021/11/11 15:09:07 result hanged=false: 2021/11/11 15:09:07 added new input for call #1 ioctl$SNDRV_TIMER_IOCTL_SELECT to corpus: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5420, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5423) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) socket$packet(0x11, 0x0, 0x300) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 15:09:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x2, 0x4) [251980ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31082 #0 [251991ms] -> socket$netlink(0x10, 0x3, 0x4) #0 [251991ms] <- socket$netlink=0x3 errno=14 cover=1403 #0 [251992ms] -> bind$netlink(0x3, 0x20000000, 0xc) #0 [251993ms] <- bind$netlink=0x0 errno=14 cover=486 #0 [251993ms] -> setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0x3, 0x10e, 0x1, 0x200000c0, 0x4) #0 [252012ms] <- setsockopt$netlink_NETLINK_ADD_MEMBERSHIP=0x0 errno=14 cover=1373 enabling collider #0 [252012ms] -> socket$netlink(0x10, 0x3, 0x4) #0 [252013ms] <- socket$netlink=0x3 errno=14 cover=1512 #0 [252013ms] -> bind$netlink(0x3, 0x20000000, 0xc) #0 [252016ms] <- bind$netlink=0x0 errno=14 cover=2159 pthread_create failed (errno 11) 15:09:07 executing program 0: renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000900)=[&(0x7f0000000780)='/dev/vcs\x00'], 0x0) 2021/11/11 15:09:07 result hanged=false: [252078ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31184 #0 [252089ms] -> renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [252089ms] <- renameat=0xffffffffffffffff errno=14 cover=628 #0 [252090ms] -> syz_genetlink_get_family_id$nbd(0x20000400, 0xffffffffffffffff) syz_genetlink_get_family_id(nbd, -1) netlink: failed to get family id for nbd: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [252107ms] <- syz_genetlink_get_family_id$nbd=0xffffffffffffffff errno=2 cover=8212 #0 [252108ms] -> execveat(0xffffffffffffffff, 0x20000500, 0x0, 0x20000900, 0x0) #0 [252109ms] <- execveat=0xffffffffffffffff errno=9 cover=6322 enabling collider #0 [252110ms] -> renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [252111ms] <- renameat=0xffffffffffffffff errno=14 cover=651 #0 [252111ms] -> syz_genetlink_get_family_id$nbd(0x20000400, 0xffffffffffffffff) syz_genetlink_get_family_id(nbd, -1) netlink: failed to get family id for nbd: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [252135ms] <- syz_genetlink_get_family_id$nbd=0xffffffffffffffff errno=2 cover=7762 pthread_create failed (errno 11) 15:09:07 executing program 0: renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000900)=[&(0x7f0000000780)='/dev/vcs\x00'], 0x0) 2021/11/11 15:09:07 result hanged=false: 2021/11/11 15:09:07 #0: triaging type=7 2021/11/11 15:09:07 triaging input for call #1 syz_genetlink_get_family_id$nbd (new signal=1) [252181ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31286 #0 [252193ms] -> renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [252193ms] <- renameat=0xffffffffffffffff errno=14 cover=596 #0 [252194ms] -> syz_genetlink_get_family_id$nbd(0x20000400, 0xffffffffffffffff) syz_genetlink_get_family_id(nbd, -1) netlink: failed to get family id for nbd: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [252213ms] <- syz_genetlink_get_family_id$nbd=0xffffffffffffffff errno=2 cover=8286 #0 [252214ms] -> execveat(0xffffffffffffffff, 0x20000500, 0x0, 0x20000900, 0x0) #0 [252215ms] <- execveat=0xffffffffffffffff errno=9 cover=6358 2021/11/11 15:09:07 result hanged=false: 15:09:07 executing program 0: renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000900)=[&(0x7f0000000780)='/dev/vcs\x00'], 0x0) [252242ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31288 #0 [252252ms] -> renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [252254ms] <- renameat=0xffffffffffffffff errno=14 cover=596 #0 [252255ms] -> syz_genetlink_get_family_id$nbd(0x20000400, 0xffffffffffffffff) syz_genetlink_get_family_id(nbd, -1) netlink: failed to get family id for nbd: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [252272ms] <- syz_genetlink_get_family_id$nbd=0xffffffffffffffff errno=2 cover=8142 #0 [252273ms] -> execveat(0xffffffffffffffff, 0x20000500, 0x0, 0x20000900, 0x0) #0 [252274ms] <- execveat=0xffffffffffffffff errno=9 cover=6194 2021/11/11 15:09:07 result hanged=false: 15:09:07 executing program 0: renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000900)=[&(0x7f0000000780)='/dev/vcs\x00'], 0x0) [252299ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31290 #0 [252312ms] -> renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [252312ms] <- renameat=0xffffffffffffffff errno=14 cover=594 #0 [252313ms] -> syz_genetlink_get_family_id$nbd(0x20000400, 0xffffffffffffffff) syz_genetlink_get_family_id(nbd, -1) netlink: failed to get family id for nbd: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [252332ms] <- syz_genetlink_get_family_id$nbd=0xffffffffffffffff errno=2 cover=8268 #0 [252334ms] -> execveat(0xffffffffffffffff, 0x20000500, 0x0, 0x20000900, 0x0) #0 [252336ms] <- execveat=0xffffffffffffffff errno=9 cover=6472 2021/11/11 15:09:07 result hanged=false: 2021/11/11 15:09:07 added new input for call #1 syz_genetlink_get_family_id$nbd to corpus: renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000900)=[&(0x7f0000000780)='/dev/vcs\x00'], 0x0) 15:09:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xffffffffffff0303}}]}, 0x34}}, 0x0) [252369ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31292 #0 [252378ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [252379ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6278 #0 [252380ms] -> syz_genetlink_get_family_id$ieee802154(0x20000140, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) #0 [252381ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5532 #0 [252383ms] -> sendmsg$IEEE802154_ADD_IFACE(0x4, 0x20000100, 0x0) #0 [252423ms] <- sendmsg$IEEE802154_ADD_IFACE=0x34 errno=14 cover=83616 enabling collider #0 [252425ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [252427ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5513 #0 [252428ms] -> syz_genetlink_get_family_id$ieee802154(0x20000140, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) #0 [252431ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5104 pthread_create failed (errno 11) 2021/11/11 15:09:07 result hanged=false: 2021/11/11 15:09:07 #0: triaging type=7 15:09:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xffffffffffff0303}}]}, 0x34}}, 0x0) 2021/11/11 15:09:07 triaging input for call #2 sendmsg$IEEE802154_ADD_IFACE (new signal=3) [252502ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31394 #0 [252514ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [252517ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6334 #0 [252518ms] -> syz_genetlink_get_family_id$ieee802154(0x20000140, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) #0 [252519ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5444 #0 [252520ms] -> sendmsg$IEEE802154_ADD_IFACE(0x4, 0x20000100, 0x0) #0 [252544ms] <- sendmsg$IEEE802154_ADD_IFACE=0x34 errno=14 cover=68322 15:09:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xffffffffffff0303}}]}, 0x34}}, 0x0) 2021/11/11 15:09:07 result hanged=false: [252578ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31396 #0 [252592ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [252594ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6266 #0 [252595ms] -> syz_genetlink_get_family_id$ieee802154(0x20000140, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) #0 [252596ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5602 #0 [252598ms] -> sendmsg$IEEE802154_ADD_IFACE(0x4, 0x20000100, 0x0) #0 [252629ms] <- sendmsg$IEEE802154_ADD_IFACE=0x34 errno=14 cover=69037 15:09:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xffffffffffff0303}}]}, 0x34}}, 0x0) [252669ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 15:09:07 result hanged=false: spawned worker pid 31398 #0 [252680ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [252681ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6248 #0 [252683ms] -> syz_genetlink_get_family_id$ieee802154(0x20000140, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) #0 [252683ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5465 #0 [252684ms] -> sendmsg$IEEE802154_ADD_IFACE(0x4, 0x20000100, 0x0) #0 [252710ms] <- sendmsg$IEEE802154_ADD_IFACE=0x34 errno=14 cover=68461 2021/11/11 15:09:08 result hanged=false: 2021/11/11 15:09:08 added new input for call #2 sendmsg$IEEE802154_ADD_IFACE to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xffffffffffff0303}}]}, 0x34}}, 0x0) 15:09:08 executing program 0: syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) [252799ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31400 #0 [252808ms] -> syz_80211_inject_frame(0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [252809ms] <- syz_80211_inject_frame=0xffffffffffffffff errno=22 cover=9030 #0 [252810ms] -> syz_80211_inject_frame(0x0, 0x0, 0x0) [ 322.724735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium hwsim_register_device failed: Device or resource busy syz_80211_inject_frame: failed to register socket, ret -16 #0 [252811ms] <- syz_80211_inject_frame=0xffffffffffffffff errno=16 cover=9026 enabling collider [ 323.028653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium #0 [253114ms] -> syz_80211_inject_frame(0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [253115ms] <- syz_80211_inject_frame=0xffffffffffffffff errno=22 cover=8283 #0 [253116ms] -> syz_80211_inject_frame(0x0, 0x0, 0x0) hwsim_register_device failed: Device or resource busy syz_80211_inject_frame: failed to register socket, ret -16 [ 323.029655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:09:08 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003040)) 2021/11/11 15:09:08 result hanged=false: [253154ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31402 #0 [253165ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [253166ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11684 #0 [253166ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20003040) #0 [253167ms] <- socketpair$unix=0x0 errno=14 cover=3142 enabling collider #0 [253168ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [253168ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11209 15:09:08 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffffffffffff7, 0x102) mq_timedreceive(r0, &(0x7f0000000040)=""/168, 0xa8, 0xd, &(0x7f0000000100)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@private0, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x100, 0x6, 0x4100087}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8922, &(0x7f0000000000)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2021/11/11 15:09:08 result hanged=false: [253191ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31404 #0 [253201ms] -> syz_open_dev$vcsu(0x200001c0, 0xfffffffffffffff7, 0x102) #0 [253202ms] <- syz_open_dev$vcsu=0xffffffffffffffff errno=2 cover=5720 #0 [253203ms] -> mq_timedreceive(0xffffffffffffffff, 0x20000040, 0xa8, 0xd, 0x20000100) #0 [253203ms] <- mq_timedreceive=0xffffffffffffffff errno=9 cover=75 #0 [253203ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [253203ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1686 #0 [253203ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [253203ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1710 #0 [253204ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [253204ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=1677 #0 [253204ms] -> ioctl$sock_inet6_SIOCADDRT(0x4, 0x890b, 0x20000000) #0 [253204ms] <- ioctl$sock_inet6_SIOCADDRT=0xffffffffffffffff errno=19 cover=363 #0 [253204ms] -> setsockopt$inet6_IPV6_PKTINFO(0x3, 0x29, 0x32, 0x20000180, 0x14) #0 [253204ms] <- setsockopt$inet6_IPV6_PKTINFO=0x0 errno=14 cover=171 #0 [253204ms] -> ioctl$sock_SIOCGIFINDEX(0x3, 0x8922, 0x20000000) #0 [253205ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=3196 #0 [253205ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [253205ms] <- socket$inet6_icmp_raw=0x6 errno=14 cover=1665 enabling collider #0 [253206ms] -> syz_open_dev$vcsu(0x200001c0, 0xfffffffffffffff7, 0x102) #0 [253206ms] <- syz_open_dev$vcsu=0xffffffffffffffff errno=2 cover=1390 #0 [253207ms] -> mq_timedreceive(0xffffffffffffffff, 0x20000040, 0xa8, 0xd, 0x20000100) #0 [253207ms] <- mq_timedreceive=0xffffffffffffffff errno=9 cover=75 pthread_create failed (errno 11) 15:09:08 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffffffffffff7, 0x102) mq_timedreceive(r0, &(0x7f0000000040)=""/168, 0xa8, 0xd, &(0x7f0000000100)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@private0, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x100, 0x6, 0x4100087}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8922, &(0x7f0000000000)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2021/11/11 15:09:08 result hanged=false: 2021/11/11 15:09:08 #0: triaging type=7 2021/11/11 15:09:08 triaging input for call #7 ioctl$sock_SIOCGIFINDEX (new signal=4) [253278ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31506 #0 [253292ms] -> syz_open_dev$vcsu(0x200001c0, 0xfffffffffffffff7, 0x102) #0 [253293ms] <- syz_open_dev$vcsu=0xffffffffffffffff errno=2 cover=1405 #0 [253296ms] -> mq_timedreceive(0xffffffffffffffff, 0x20000040, 0xa8, 0xd, 0x20000100) #0 [253296ms] <- mq_timedreceive=0xffffffffffffffff errno=9 cover=75 #0 [253296ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [253297ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1801 #0 [253298ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [253298ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1677 #0 [253299ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [253299ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=1691 #0 [253301ms] -> ioctl$sock_inet6_SIOCADDRT(0x4, 0x890b, 0x20000000) #0 [253301ms] <- ioctl$sock_inet6_SIOCADDRT=0xffffffffffffffff errno=19 cover=341 #0 [253301ms] -> setsockopt$inet6_IPV6_PKTINFO(0x3, 0x29, 0x32, 0x20000180, 0x14) #0 [253301ms] <- setsockopt$inet6_IPV6_PKTINFO=0x0 errno=14 cover=171 #0 [253302ms] -> ioctl$sock_SIOCGIFINDEX(0x3, 0x8922, 0x20000000) #0 [253302ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=231 #0 [253303ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [253303ms] <- socket$inet6_icmp_raw=0x6 errno=14 cover=1687 15:09:08 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffffffffffff7, 0x102) mq_timedreceive(r0, &(0x7f0000000040)=""/168, 0xa8, 0xd, &(0x7f0000000100)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@private0, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x100, 0x6, 0x4100087}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8922, &(0x7f0000000000)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2021/11/11 15:09:08 result hanged=false: [253336ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31508 #0 [253350ms] -> syz_open_dev$vcsu(0x200001c0, 0xfffffffffffffff7, 0x102) #0 [253351ms] <- syz_open_dev$vcsu=0xffffffffffffffff errno=2 cover=1424 #0 [253352ms] -> mq_timedreceive(0xffffffffffffffff, 0x20000040, 0xa8, 0xd, 0x20000100) #0 [253352ms] <- mq_timedreceive=0xffffffffffffffff errno=9 cover=75 #0 [253354ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [253354ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1790 #0 [253356ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [253356ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1792 #0 [253357ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [253357ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=1808 #0 [253357ms] -> ioctl$sock_inet6_SIOCADDRT(0x4, 0x890b, 0x20000000) #0 [253357ms] <- ioctl$sock_inet6_SIOCADDRT=0xffffffffffffffff errno=19 cover=330 #0 [253358ms] -> setsockopt$inet6_IPV6_PKTINFO(0x3, 0x29, 0x32, 0x20000180, 0x14) #0 [253358ms] <- setsockopt$inet6_IPV6_PKTINFO=0x0 errno=14 cover=175 #0 [253358ms] -> ioctl$sock_SIOCGIFINDEX(0x3, 0x8922, 0x20000000) #0 [253358ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=231 #0 [253358ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [253359ms] <- socket$inet6_icmp_raw=0x6 errno=14 cover=1871 15:09:08 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffffffffffff7, 0x102) mq_timedreceive(r0, &(0x7f0000000040)=""/168, 0xa8, 0xd, &(0x7f0000000100)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@private0, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x100, 0x6, 0x4100087}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8922, &(0x7f0000000000)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2021/11/11 15:09:08 result hanged=false: [253389ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31510 #0 [253404ms] -> syz_open_dev$vcsu(0x200001c0, 0xfffffffffffffff7, 0x102) #0 [253404ms] <- syz_open_dev$vcsu=0xffffffffffffffff errno=2 cover=1402 #0 [253407ms] -> mq_timedreceive(0xffffffffffffffff, 0x20000040, 0xa8, 0xd, 0x20000100) #0 [253407ms] <- mq_timedreceive=0xffffffffffffffff errno=9 cover=75 #0 [253408ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [253408ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1762 #0 [253409ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [253409ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1786 #0 [253410ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [253410ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=1788 #0 [253411ms] -> ioctl$sock_inet6_SIOCADDRT(0x4, 0x890b, 0x20000000) #0 [253411ms] <- ioctl$sock_inet6_SIOCADDRT=0xffffffffffffffff errno=19 cover=330 #0 [253413ms] -> setsockopt$inet6_IPV6_PKTINFO(0x3, 0x29, 0x32, 0x20000180, 0x14) #0 [253413ms] <- setsockopt$inet6_IPV6_PKTINFO=0x0 errno=14 cover=171 #0 [253413ms] -> ioctl$sock_SIOCGIFINDEX(0x3, 0x8922, 0x20000000) #0 [253414ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=231 #0 [253414ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [253415ms] <- socket$inet6_icmp_raw=0x6 errno=14 cover=1791 2021/11/11 15:09:08 result hanged=false: 2021/11/11 15:09:08 added new input for call #7 ioctl$sock_SIOCGIFINDEX to corpus: r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffffffffffff7, 0x102) mq_timedreceive(r0, &(0x7f0000000040)=""/168, 0xa8, 0xd, &(0x7f0000000100)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@private0, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x100, 0x6, 0x4100087}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8922, &(0x7f0000000000)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 15:09:08 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x80000000, 0x9, 0x0, 0x0, 0xffffffffffffffff}) [253451ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 15:09:08 poll: candidates=8 inputs=0 signal=0 spawned worker pid 31512 #0 [253466ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [253466ms] <- mknod$loop=0x0 errno=14 cover=5824 #0 [253468ms] -> creat(0x20000040, 0x0) #0 [253468ms] <- creat=0x3 errno=14 cover=1337 #0 [253470ms] -> ioctl$BLKTRACESETUP(0x3, 0xc0481273, 0x20000180) #0 [253471ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=5 cover=5596 enabling collider #0 [253471ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [253471ms] <- mknod$loop=0xffffffffffffffff errno=17 cover=585 #0 [253472ms] -> creat(0x20000040, 0x0) #0 [253472ms] <- creat=0x3 errno=14 cover=1296 pthread_create failed (errno 11) 2021/11/11 15:09:08 result hanged=false: 2021/11/11 15:09:08 #0: triaging type=7 15:09:08 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x80000000, 0x9, 0x0, 0x0, 0xffffffffffffffff}) 2021/11/11 15:09:08 triaging input for call #2 ioctl$BLKTRACESETUP (new signal=1) [253552ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31614 #0 [253569ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [253569ms] <- mknod$loop=0x0 errno=14 cover=5955 #0 [253573ms] -> creat(0x20000040, 0x0) #0 [253573ms] <- creat=0x3 errno=14 cover=1310 #0 [253574ms] -> ioctl$BLKTRACESETUP(0x3, 0xc0481273, 0x20000180) #0 [253575ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=5 cover=5527 15:09:08 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x80000000, 0x9, 0x0, 0x0, 0xffffffffffffffff}) 2021/11/11 15:09:08 result hanged=false: [253613ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31616 #0 [253625ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [253626ms] <- mknod$loop=0x0 errno=14 cover=5873 #0 [253627ms] -> creat(0x20000040, 0x0) #0 [253627ms] <- creat=0x3 errno=14 cover=1255 #0 [253627ms] -> ioctl$BLKTRACESETUP(0x3, 0xc0481273, 0x20000180) #0 [253629ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=5 cover=5559 15:09:08 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x80000000, 0x9, 0x0, 0x0, 0xffffffffffffffff}) 2021/11/11 15:09:08 result hanged=false: [253653ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31618 #0 [253663ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [253663ms] <- mknod$loop=0x0 errno=14 cover=5942 #0 [253665ms] -> creat(0x20000040, 0x0) #0 [253665ms] <- creat=0x3 errno=14 cover=1232 #0 [253666ms] -> ioctl$BLKTRACESETUP(0x3, 0xc0481273, 0x20000180) #0 [253667ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=5 cover=5448 2021/11/11 15:09:09 result hanged=false: 2021/11/11 15:09:09 added new input for call #2 ioctl$BLKTRACESETUP to corpus: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x80000000, 0x9, 0x0, 0x0, 0xffffffffffffffff}) 2021/11/11 15:09:09 #0: triaging type=7 15:09:09 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x80000000, 0x9, 0x0, 0x0, 0xffffffffffffffff}) [253696ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 15:09:09 triaging input for call #1 creat (new signal=4) spawned worker pid 31620 #0 [253705ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [253706ms] <- mknod$loop=0x0 errno=14 cover=5859 #0 [253708ms] -> creat(0x20000040, 0x0) #0 [253708ms] <- creat=0x3 errno=14 cover=1255 #0 [253709ms] -> ioctl$BLKTRACESETUP(0x3, 0xc0481273, 0x20000180) #0 [253710ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=5 cover=5524 15:09:09 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x80000000, 0x9, 0x0, 0x0, 0xffffffffffffffff}) 2021/11/11 15:09:09 result hanged=false: [253733ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31622 #0 [253744ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [253744ms] <- mknod$loop=0x0 errno=14 cover=5797 #0 [253745ms] -> creat(0x20000040, 0x0) #0 [253745ms] <- creat=0x3 errno=14 cover=1233 #0 [253745ms] -> ioctl$BLKTRACESETUP(0x3, 0xc0481273, 0x20000180) #0 [253746ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=5 cover=5455 15:09:09 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x80000000, 0x9, 0x0, 0x0, 0xffffffffffffffff}) 2021/11/11 15:09:09 result hanged=false: [253768ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31624 #0 [253778ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [253781ms] <- mknod$loop=0x0 errno=14 cover=5859 #0 [253783ms] -> creat(0x20000040, 0x0) #0 [253783ms] <- creat=0x3 errno=14 cover=1232 #0 [253784ms] -> ioctl$BLKTRACESETUP(0x3, 0xc0481273, 0x20000180) #0 [253786ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=5 cover=5487 2021/11/11 15:09:09 result hanged=false: 2021/11/11 15:09:09 added new input for call #1 creat to corpus: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x80000000, 0x9, 0x0, 0x0, 0xffffffffffffffff}) 15:09:09 executing program 0: listen(0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f00000002c0)='./file0\x00', 0x9, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000300)="71aeea0472825e3ffc685493b0854b1c4e9ccc5ade3519b0776b42dc0f3aa78930196a7be372279d92ed0c5f231af0f70637637cb50a267bd1dd30c0bce8fe3d1460f02fac243dd4a80f76ea6564094b2810d5a3bd55e7825c99632a5727a8d3200fb8829e691a6a1ee4ea8aa8b4365dacb15050", 0x74, 0x9}], 0x0, &(0x7f0000000400)={[{@hide}], [{@subj_role}]}) socket$nl_generic(0x10, 0x3, 0x10) [253815ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31626 #0 [253825ms] -> listen(0xffffffffffffffff, 0x0) #0 [253826ms] <- listen=0xffffffffffffffff errno=9 cover=48 #0 [253831ms] -> syz_mount_image$iso9660(0x0, 0x200002c0, 0x9, 0x1, 0x200003c0, 0x0, 0x20000400) SIGSEGV on (nil), skipping #0 [253833ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=14 cover=20484 #0 [253836ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [253836ms] <- socket$nl_generic=0x5 errno=14 cover=1488 enabling collider #0 [253841ms] -> listen(0xffffffffffffffff, 0x0) #0 [253841ms] <- listen=0xffffffffffffffff errno=9 cover=48 #0 [253841ms] -> syz_mount_image$iso9660(0x0, 0x200002c0, 0x9, 0x1, 0x200003c0, 0x0, 0x20000400) SIGSEGV on (nil), skipping #0 [253848ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=17 cover=16288 pthread_create failed (errno 11) 15:09:09 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, 0x0) 2021/11/11 15:09:09 result hanged=false: [253920ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31728 #0 [253931ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [253932ms] <- socket$inet_udp=0x3 errno=14 cover=1726 #0 [253932ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [253933ms] <- socket$nl_netfilter=0x4 errno=14 cover=1419 #0 [253934ms] -> ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0x4, 0x8982, 0x0) #0 [253952ms] <- ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD=0xffffffffffffffff errno=65 cover=940 enabling collider #0 [253952ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [253952ms] <- socket$inet_udp=0x3 errno=14 cover=1783 #0 [253953ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [253956ms] <- socket$nl_netfilter=0x4 errno=14 cover=1471 pthread_create failed (errno 11) 15:09:09 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x1f, 0x0) 2021/11/11 15:09:09 result hanged=false: [254020ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31830 #0 [254031ms] -> pipe(0x20000040) #0 [254034ms] <- pipe=0x0 errno=14 cover=1859 #0 [254035ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [254036ms] <- socket$inet_tcp=0x5 errno=14 cover=1750 #0 [254036ms] -> listen(0x5, 0x0) #0 [254036ms] <- listen=0x0 errno=14 cover=296 #0 [254036ms] -> splice(0x5, 0x0, 0x4, 0x0, 0x1f, 0x0) #0 [254037ms] <- splice=0xffffffffffffffff errno=107 cover=4193 enabling collider #0 [254038ms] -> pipe(0x20000040) #0 [254040ms] <- pipe=0x0 errno=14 cover=1189 #0 [254042ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [254044ms] <- socket$inet_tcp=0x5 errno=14 cover=1956 pthread_create failed (errno 11) 15:09:09 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140), 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) 2021/11/11 15:09:09 result hanged=false: [254102ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 31932 #0 [254112ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) #0 [254116ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6473 #0 [254118ms] -> bind$bt_l2cap(0x4, 0x20000140, 0xe) #0 [254119ms] <- bind$bt_l2cap=0x0 errno=14 cover=1816 #0 [254119ms] -> connect$bt_l2cap(0x4, 0x20000000, 0xe) #0 [254119ms] <- connect$bt_l2cap=0xffffffffffffffff errno=22 cover=222 enabling collider #0 [254120ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) #0 [254120ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=5508 #0 [254122ms] -> bind$bt_l2cap(0x4, 0x20000140, 0xe) #0 [254122ms] <- bind$bt_l2cap=0x0 errno=14 cover=203 pthread_create failed (errno 11) 15:09:09 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140), 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) 2021/11/11 15:09:09 result hanged=false: 2021/11/11 15:09:09 #0: triaging type=7 2021/11/11 15:09:09 triaging input for call #2 connect$bt_l2cap (new signal=3) [254192ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32034 #0 [254202ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) #0 [254206ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6281 #0 [254208ms] -> bind$bt_l2cap(0x4, 0x20000140, 0xe) #0 [254209ms] <- bind$bt_l2cap=0x0 errno=14 cover=164 #0 [254210ms] -> connect$bt_l2cap(0x4, 0x20000000, 0xe) #0 [254210ms] <- connect$bt_l2cap=0xffffffffffffffff errno=22 cover=222 15:09:09 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140), 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) 2021/11/11 15:09:09 result hanged=false: [254233ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32036 #0 [254245ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) #0 [254247ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6442 #0 [254249ms] -> bind$bt_l2cap(0x4, 0x20000140, 0xe) #0 [254250ms] <- bind$bt_l2cap=0x0 errno=14 cover=164 #0 [254250ms] -> connect$bt_l2cap(0x4, 0x20000000, 0xe) #0 [254250ms] <- connect$bt_l2cap=0xffffffffffffffff errno=22 cover=222 15:09:09 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140), 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) 2021/11/11 15:09:09 result hanged=false: [254272ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32038 #0 [254280ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) #0 [254282ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6407 #0 [254284ms] -> bind$bt_l2cap(0x4, 0x20000140, 0xe) #0 [254284ms] <- bind$bt_l2cap=0x0 errno=14 cover=164 #0 [254284ms] -> connect$bt_l2cap(0x4, 0x20000000, 0xe) #0 [254284ms] <- connect$bt_l2cap=0xffffffffffffffff errno=22 cover=222 2021/11/11 15:09:09 result hanged=false: 2021/11/11 15:09:09 added new input for call #2 connect$bt_l2cap to corpus: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140), 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) 15:09:09 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140), 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) 2021/11/11 15:09:09 #0: triaging type=7 2021/11/11 15:09:09 triaging input for call #0 syz_init_net_socket$bt_l2cap (new signal=2) [254303ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32040 #0 [254316ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) #0 [254317ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6412 #0 [254323ms] -> bind$bt_l2cap(0x4, 0x20000140, 0xe) #0 [254323ms] <- bind$bt_l2cap=0x0 errno=14 cover=164 #0 [254323ms] -> connect$bt_l2cap(0x4, 0x20000000, 0xe) #0 [254323ms] <- connect$bt_l2cap=0xffffffffffffffff errno=22 cover=222 15:09:09 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140), 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) 2021/11/11 15:09:09 result hanged=false: [254353ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32042 #0 [254360ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) #0 [254361ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6316 #0 [254363ms] -> bind$bt_l2cap(0x4, 0x20000140, 0xe) #0 [254363ms] <- bind$bt_l2cap=0x0 errno=14 cover=164 #0 [254363ms] -> connect$bt_l2cap(0x4, 0x20000000, 0xe) #0 [254363ms] <- connect$bt_l2cap=0xffffffffffffffff errno=22 cover=222 15:09:09 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140), 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) 2021/11/11 15:09:09 result hanged=false: [254382ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32044 #0 [254391ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) #0 [254392ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6299 #0 [254393ms] -> bind$bt_l2cap(0x4, 0x20000140, 0xe) #0 [254393ms] <- bind$bt_l2cap=0x0 errno=14 cover=164 #0 [254393ms] -> connect$bt_l2cap(0x4, 0x20000000, 0xe) #0 [254393ms] <- connect$bt_l2cap=0xffffffffffffffff errno=22 cover=222 2021/11/11 15:09:09 result hanged=false: 2021/11/11 15:09:09 added new input for call #0 syz_init_net_socket$bt_l2cap to corpus: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140), 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) 15:09:09 executing program 0: syz_80211_inject_frame(0x0, 0x0, 0x0) read$ptp(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key$user(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, &(0x7f0000000980)='F', 0x1, 0xfffffffffffffffc) [254428ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 [ 324.356495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium spawned worker pid 32046 #0 [254436ms] -> syz_80211_inject_frame(0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [254437ms] <- syz_80211_inject_frame=0xffffffffffffffff errno=22 cover=9079 #0 [254438ms] -> read$ptp(0xffffffffffffffff, 0x0, 0x0) #0 [254438ms] <- read$ptp=0xffffffffffffffff errno=9 cover=47 #0 [254441ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [254441ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=6311 #0 [254443ms] -> add_key$user(0x20000900, 0x20000940, 0x20000980, 0x1, 0xfffffffffffffffc) #0 [254443ms] <- add_key$user=0x284503fa errno=14 cover=2363 enabling collider #0 [254747ms] -> syz_80211_inject_frame(0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [254748ms] <- syz_80211_inject_frame=0xffffffffffffffff errno=22 cover=8362 #0 [254749ms] -> read$ptp(0xffffffffffffffff, 0x0, 0x0) #0 [254749ms] <- read$ptp=0xffffffffffffffff errno=9 cover=47 pthread_create failed (errno 11) [ 324.717012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:09:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) 2021/11/11 15:09:10 result hanged=false: [254816ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32148 #0 [254827ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [254828ms] <- openat=0x3 errno=14 cover=6784 #0 [254828ms] -> openat$vcsu(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [254828ms] <- openat$vcsu=0x4 errno=14 cover=1139 #0 [254828ms] -> copy_file_range(0x3, 0x0, 0x4, 0x0, 0x0, 0x0) #0 [254828ms] <- copy_file_range=0xffffffffffffffff errno=22 cover=92 enabling collider #0 [254830ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [254830ms] <- openat=0xffffffffffffffff errno=17 cover=1003 #0 [254831ms] -> openat$vcsu(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [254832ms] <- openat$vcsu=0x3 errno=14 cover=1177 pthread_create failed (errno 11) 2021/11/11 15:09:10 result hanged=false: 2021/11/11 15:09:10 #0: triaging type=7 2021/11/11 15:09:10 triaging input for call #2 copy_file_range (new signal=1) 15:09:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) [254898ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32250 #0 [254907ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [254910ms] <- openat=0x3 errno=14 cover=6660 #0 [254912ms] -> openat$vcsu(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [254913ms] <- openat$vcsu=0x4 errno=14 cover=1248 #0 [254913ms] -> copy_file_range(0x3, 0x0, 0x4, 0x0, 0x0, 0x0) #0 [254914ms] <- copy_file_range=0xffffffffffffffff errno=22 cover=92 15:09:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) 2021/11/11 15:09:10 result hanged=false: [254939ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32252 #0 [254947ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [254949ms] <- openat=0x3 errno=14 cover=6930 #0 [254952ms] -> openat$vcsu(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [254952ms] <- openat$vcsu=0x4 errno=14 cover=1216 #0 [254954ms] -> copy_file_range(0x3, 0x0, 0x4, 0x0, 0x0, 0x0) #0 [254954ms] <- copy_file_range=0xffffffffffffffff errno=22 cover=92 15:09:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) 2021/11/11 15:09:10 result hanged=false: [254985ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32254 2021/11/11 15:09:10 poll: candidates=0 inputs=0 signal=0 #0 [254998ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [254999ms] <- openat=0x3 errno=14 cover=6923 #0 [255005ms] -> openat$vcsu(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [255005ms] <- openat$vcsu=0x4 errno=14 cover=1215 #0 [255006ms] -> copy_file_range(0x3, 0x0, 0x4, 0x0, 0x0, 0x0) #0 [255006ms] <- copy_file_range=0xffffffffffffffff errno=22 cover=92 2021/11/11 15:09:10 result hanged=false: 2021/11/11 15:09:10 added new input for call #2 copy_file_range to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) 15:09:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='coredump_filter\x00') write$cgroup_pid(r0, &(0x7f0000000040)=0xffffffffffffffff, 0x12) [255034ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32256 #0 [255046ms] -> syz_open_procfs(0x0, 0x20000500) #0 [255048ms] <- syz_open_procfs=0x3 errno=14 cover=2533 #0 [255049ms] -> write$cgroup_pid(0x3, 0x20000040, 0x12) #0 [255049ms] <- write$cgroup_pid=0xffffffffffffffff errno=34 cover=277 enabling collider #0 [255049ms] -> syz_open_procfs(0x0, 0x20000500) #0 [255050ms] <- syz_open_procfs=0x3 errno=14 cover=1894 2021/11/11 15:09:10 result hanged=false: 2021/11/11 15:09:10 #0: triaging type=7 2021/11/11 15:09:10 triaging input for call #1 write$cgroup_pid (new signal=3) 15:09:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='coredump_filter\x00') write$cgroup_pid(r0, &(0x7f0000000040)=0xffffffffffffffff, 0x12) [255073ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32258 #0 [255083ms] -> syz_open_procfs(0x0, 0x20000500) #0 [255083ms] <- syz_open_procfs=0x3 errno=14 cover=2544 #0 [255088ms] -> write$cgroup_pid(0x3, 0x20000040, 0x12) #0 [255088ms] <- write$cgroup_pid=0xffffffffffffffff errno=34 cover=277 15:09:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='coredump_filter\x00') write$cgroup_pid(r0, &(0x7f0000000040)=0xffffffffffffffff, 0x12) 2021/11/11 15:09:10 result hanged=false: [255116ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32260 #0 [255125ms] -> syz_open_procfs(0x0, 0x20000500) #0 [255126ms] <- syz_open_procfs=0x3 errno=14 cover=2558 #0 [255128ms] -> write$cgroup_pid(0x3, 0x20000040, 0x12) #0 [255128ms] <- write$cgroup_pid=0xffffffffffffffff errno=34 cover=277 2021/11/11 15:09:10 result hanged=false: 15:09:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='coredump_filter\x00') write$cgroup_pid(r0, &(0x7f0000000040)=0xffffffffffffffff, 0x12) [255151ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32262 #0 [255163ms] -> syz_open_procfs(0x0, 0x20000500) #0 [255165ms] <- syz_open_procfs=0x3 errno=14 cover=2558 #0 [255167ms] -> write$cgroup_pid(0x3, 0x20000040, 0x12) #0 [255168ms] <- write$cgroup_pid=0xffffffffffffffff errno=34 cover=277 2021/11/11 15:09:10 result hanged=false: 2021/11/11 15:09:10 added new input for call #1 write$cgroup_pid to corpus: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='coredump_filter\x00') write$cgroup_pid(r0, &(0x7f0000000040)=0xffffffffffffffff, 0x12) 15:09:10 executing program 0: syz_emit_ethernet(0xbe, &(0x7f0000000280)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x2, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "73df9be84242973f9031f32893f865b25e1b396d72ad179494623258cfd4a8dc", "49308ad0218755aa37d036cc185aeccf7200e30e8cf9fe4512c72379754150782e00", "83847fcef563bf7e9de3dd67615ed05bda4b6f6d28339ceba2f808bf", {"b0fa74d5942cb87598729401dc2fc1c3", "db665a68402ad527c706a5afbdc027de"}}}}}}}, 0x0) 2021/11/11 15:09:10 poll: candidates=8 inputs=0 signal=0 [255193ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32264 #0 [255203ms] -> syz_emit_ethernet(0xbe, 0x20000280, 0x0) aa aa aa aa aa aa 31 f5 26 99 46 4f 08 00 25 00 00 b0 00 00 00 00 00 11 da 3e 00 00 00 00 00 00 00 00 00 00 00 00 00 9c 72 d3 01 00 00 00 00 00 00 00 73 df 9b e8 42 42 97 3f 90 31 f3 28 93 f8 65 b2 5e 1b 39 6d 72 ad 17 94 94 62 32 58 cf d4 a8 dc 49 30 8a d0 21 87 55 aa 37 d0 36 cc 18 5a ec cf 72 00 e3 0e 8c f9 fe 45 12 c7 23 79 75 41 50 78 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 84 7f ce f5 63 bf 7e 9d e3 dd 67 61 5e d0 5b da 4b 6f 6d 28 33 9c eb a2 f8 08 bf b0 fa 74 d5 94 2c b8 75 98 72 94 01 dc 2f c1 c3 db 66 5a 68 40 2a d5 27 c7 06 a5 af bd c0 27 de #0 [255205ms] <- syz_emit_ethernet=0xbe errno=14 cover=54860 enabling collider #0 [255206ms] -> syz_emit_ethernet(0xbe, 0x20000280, 0x0) aa aa aa aa aa aa 31 f5 26 99 46 4f 08 00 25 00 00 b0 00 00 00 00 00 11 da 3e 00 00 00 00 00 00 00 00 00 00 00 00 00 9c 72 d3 01 00 00 00 00 00 00 00 73 df 9b e8 42 42 97 3f 90 31 f3 28 93 f8 65 b2 5e 1b 39 6d 72 ad 17 94 94 62 32 58 cf d4 a8 dc 49 30 8a d0 21 87 55 aa 37 d0 36 cc 18 5a ec cf 72 00 e3 0e 8c f9 fe 45 12 c7 23 79 75 41 50 78 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 84 7f ce f5 63 bf 7e 9d e3 dd 67 61 5e d0 5b da 4b 6f 6d 28 33 9c eb a2 f8 08 bf b0 fa 74 d5 94 2c b8 75 98 72 94 01 dc 2f c1 c3 db 66 5a 68 40 2a d5 27 c7 06 a5 af bd c0 27 de #0 [255209ms] <- syz_emit_ethernet=0xbe errno=14 cover=54063 15:09:10 executing program 0: rt_sigtimedwait(&(0x7f0000000000)={[0x4]}, &(0x7f0000000040), 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000100), 0x0, 0x0, 0x8) keyctl$clear(0x7, 0xfffffffffffffffe) io_setup(0x81, &(0x7f0000000480)=0x0) io_cancel(r0, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2021/11/11 15:09:10 result hanged=false: [255232ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32266 #0 [255244ms] -> rt_sigtimedwait(0x20000000, 0x20000040, 0x0, 0x8) pthread_create failed (errno 11) 2021/11/11 15:09:11 result hanged=false: 15:09:11 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/psched\x00') writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)="fa", 0x1}], 0x1) [256306ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32368 #0 [256316ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000040) #0 [256320ms] <- syz_open_procfs=0x3 errno=14 cover=5316 #0 [256322ms] -> writev(0x3, 0x200003c0, 0x1) #0 [256322ms] <- writev=0xffffffffffffffff errno=5 cover=174 enabling collider #0 [256322ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000040) #0 [256322ms] <- syz_open_procfs=0x3 errno=14 cover=2803 15:09:11 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f45000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8800}], 0x0, &(0x7f0000000040)={[{@check_relaxed}]}) 2021/11/11 15:09:11 result hanged=false: [256347ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32370 #0 [256358ms] -> syz_mount_image$iso9660(0x20000000, 0x20000100, 0x0, 0x1, 0x20000200, 0x0, 0x20000040) syz_mount_image: size=0 segs=1 loop='/dev/loop0' dir='./file0' fs='iso9660' flags=1 opts='check=relaxed,' [ 326.280139] isofs_fill_super: root inode is not a directory. Corrupted media? syz_mount_image > mount error: 22 #0 [256376ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=22 cover=44507 enabling collider #0 [256377ms] -> syz_mount_image$iso9660(0x20000000, 0x20000100, 0x0, 0x1, 0x20000200, 0x0, 0x20000040) syz_mount_image: size=0 segs=1 loop='/dev/loop0' dir='./file0' fs='iso9660' flags=1 opts='check=relaxed,' [ 326.307959] isofs_fill_super: root inode is not a directory. Corrupted media? syz_mount_image > mount error: 22 #0 [256398ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=22 cover=33489 2021/11/11 15:09:11 result hanged=false: 2021/11/11 15:09:11 #0: triaging type=7 15:09:11 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f45000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8800}], 0x0, &(0x7f0000000040)={[{@check_relaxed}]}) 2021/11/11 15:09:11 triaging input for call #0 syz_mount_image$iso9660 (new signal=18) [256426ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32372 #0 [256440ms] -> syz_mount_image$iso9660(0x20000000, 0x20000100, 0x0, 0x1, 0x20000200, 0x0, 0x20000040) syz_mount_image: size=0 segs=1 loop='/dev/loop0' dir='./file0' fs='iso9660' flags=1 opts='check=relaxed,' [ 326.362982] isofs_fill_super: root inode is not a directory. Corrupted media? syz_mount_image > mount error: 22 #0 [256459ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=22 cover=39192 15:09:11 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f45000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8800}], 0x0, &(0x7f0000000040)={[{@check_relaxed}]}) 2021/11/11 15:09:11 result hanged=false: [256497ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32374 #0 [256509ms] -> syz_mount_image$iso9660(0x20000000, 0x20000100, 0x0, 0x1, 0x20000200, 0x0, 0x20000040) syz_mount_image: size=0 segs=1 loop='/dev/loop0' dir='./file0' fs='iso9660' flags=1 opts='check=relaxed,' [ 326.429279] isofs_fill_super: root inode is not a directory. Corrupted media? syz_mount_image > mount error: 22 #0 [256520ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=22 cover=30720 2021/11/11 15:09:11 result hanged=false: 15:09:11 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f45000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8800}], 0x0, &(0x7f0000000040)={[{@check_relaxed}]}) [256555ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32376 #0 [256564ms] -> syz_mount_image$iso9660(0x20000000, 0x20000100, 0x0, 0x1, 0x20000200, 0x0, 0x20000040) syz_mount_image: size=0 segs=1 loop='/dev/loop0' dir='./file0' fs='iso9660' flags=1 opts='check=relaxed,' [ 326.485790] isofs_fill_super: root inode is not a directory. Corrupted media? syz_mount_image > mount error: 22 #0 [256581ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=22 cover=38971 2021/11/11 15:09:11 result hanged=false: 2021/11/11 15:09:11 added new input for call #0 syz_mount_image$iso9660 to corpus: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f45000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8800}], 0x0, &(0x7f0000000040)={[{@check_relaxed}]}) 15:09:12 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='}[\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000030c0)='net/unix\x00') preadv(r1, &(0x7f0000001380)=[{&(0x7f0000000000)=""/56, 0x38}], 0x1, 0xfefffffa, 0x0) [256694ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32378 #0 [256705ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [256705ms] <- perf_event_open=0x3 errno=14 cover=3996 #0 [256706ms] -> ioctl$PERF_EVENT_IOC_SET_FILTER(0x3, 0x40082406, 0x200000c0) #0 [256706ms] <- ioctl$PERF_EVENT_IOC_SET_FILTER=0xffffffffffffffff errno=1 cover=2630 #0 [256706ms] -> syz_open_procfs(0xffffffffffffffff, 0x200030c0) #0 [256707ms] <- syz_open_procfs=0x4 errno=13 cover=9340 #0 [256708ms] -> preadv(0x4, 0x20001380, 0x1, 0xfefffffa, 0x0) #0 [256708ms] <- preadv=0x0 errno=14 cover=1626 enabling collider #0 [256708ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [256708ms] <- perf_event_open=0x3 errno=14 cover=3877 #0 [256709ms] -> ioctl$PERF_EVENT_IOC_SET_FILTER(0x3, 0x40082406, 0x200000c0) #0 [256711ms] <- ioctl$PERF_EVENT_IOC_SET_FILTER=0xffffffffffffffff errno=1 cover=2954 pthread_create failed (errno 11) 2021/11/11 15:09:12 result hanged=false: 15:09:12 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f00000000c0), 0x4) [256796ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32480 #0 [256807ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [256809ms] <- socket$inet6_udp=0x3 errno=14 cover=1676 #0 [256809ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x0, 0x200000c0, 0x4) #0 [256810ms] <- setsockopt$inet6_udp_int=0xffffffffffffffff errno=92 cover=104 enabling collider #0 [256811ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [256812ms] <- socket$inet6_udp=0x3 errno=14 cover=1739 #0 [256813ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x0, 0x200000c0, 0x4) #0 [256813ms] <- setsockopt$inet6_udp_int=0xffffffffffffffff errno=9 cover=51 2021/11/11 15:09:12 result hanged=false: 15:09:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000240)) [256836ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32482 #0 [256848ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [256848ms] <- socket$inet_tcp=0x3 errno=14 cover=1764 #0 [256849ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000080, 0x4) #0 [256850ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [256850ms] -> getsockopt$inet_tcp_int(0x3, 0x6, 0x2, 0x0, 0x20000240) #0 [256850ms] <- getsockopt$inet_tcp_int=0x0 errno=14 cover=112 enabling collider #0 [256851ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [256852ms] <- socket$inet_tcp=0x3 errno=14 cover=1752 #0 [256853ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000080, 0x4) #0 [256854ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 pthread_create failed (errno 11) 2021/11/11 15:09:12 result hanged=false: 15:09:12 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000001180), &(0x7f0000001300)={'fscrypt:', @desc2}, &(0x7f0000001340)={0x0, "9efd48cf39d5722d2525343efebd8efe723aed05f0ffafa2734185fda322e061c85fc337d6a171a22ac50d831b4ecc5b3e0ece1c147db224728e0107261333ce"}, 0x48, r0) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) keyctl$setperm(0x5, r1, 0x0) [256925ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32584 #0 [256936ms] -> add_key$keyring(0x20000240, 0x20000080, 0x0, 0x0, 0xfffffffffffffffe) #0 [256937ms] <- add_key$keyring=0x1bf9d1b4 errno=14 cover=2130 #0 [256937ms] -> add_key$fscrypt_v1(0x20001180, 0x20001300, 0x20001340, 0x48, 0x1bf9d1b4) #0 [256940ms] <- add_key$fscrypt_v1=0x12b51995 errno=14 cover=1855 #0 [256940ms] -> stat(0x200001c0, 0x20001c00) #0 [256940ms] <- stat=0x0 errno=14 cover=554 #0 [256940ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [256940ms] <- setresuid=0x0 errno=14 cover=419 #0 [256940ms] -> keyctl$setperm(0x5, 0x12b51995, 0x0) #0 [256941ms] <- keyctl$setperm=0xffffffffffffffff errno=13 cover=465 enabling collider #0 [256941ms] -> add_key$keyring(0x20000240, 0x20000080, 0x0, 0x0, 0xfffffffffffffffe) #0 [256942ms] <- add_key$keyring=0x3b208c2b errno=14 cover=2837 #0 [256943ms] -> add_key$fscrypt_v1(0x20001180, 0x20001300, 0x20001340, 0x48, 0x3b208c2b) #0 [256946ms] <- add_key$fscrypt_v1=0x126c3896 errno=14 cover=1804 pthread_create failed (errno 11) 15:09:12 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000001180), &(0x7f0000001300)={'fscrypt:', @desc2}, &(0x7f0000001340)={0x0, "9efd48cf39d5722d2525343efebd8efe723aed05f0ffafa2734185fda322e061c85fc337d6a171a22ac50d831b4ecc5b3e0ece1c147db224728e0107261333ce"}, 0x48, r0) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) keyctl$setperm(0x5, r1, 0x0) 2021/11/11 15:09:12 result hanged=false: 2021/11/11 15:09:12 #0: triaging type=7 2021/11/11 15:09:12 triaging input for call #1 add_key$fscrypt_v1 (new signal=2) [257013ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32686 #0 [257024ms] -> add_key$keyring(0x20000240, 0x20000080, 0x0, 0x0, 0xfffffffffffffffe) #0 [257027ms] <- add_key$keyring=0x2b4d8d1a errno=14 cover=1873 #0 [257028ms] -> add_key$fscrypt_v1(0x20001180, 0x20001300, 0x20001340, 0x48, 0x2b4d8d1a) #0 [257028ms] <- add_key$fscrypt_v1=0x3fc49699 errno=14 cover=3503 #0 [257029ms] -> stat(0x200001c0, 0x20001c00) #0 [257029ms] <- stat=0x0 errno=14 cover=542 #0 [257030ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [257030ms] <- setresuid=0x0 errno=14 cover=419 #0 [257030ms] -> keyctl$setperm(0x5, 0x3fc49699, 0x0) #0 [257030ms] <- keyctl$setperm=0xffffffffffffffff errno=13 cover=450 15:09:12 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000001180), &(0x7f0000001300)={'fscrypt:', @desc2}, &(0x7f0000001340)={0x0, "9efd48cf39d5722d2525343efebd8efe723aed05f0ffafa2734185fda322e061c85fc337d6a171a22ac50d831b4ecc5b3e0ece1c147db224728e0107261333ce"}, 0x48, r0) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) keyctl$setperm(0x5, r1, 0x0) 2021/11/11 15:09:12 result hanged=false: [257054ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32688 #0 [257065ms] -> add_key$keyring(0x20000240, 0x20000080, 0x0, 0x0, 0xfffffffffffffffe) #0 [257068ms] <- add_key$keyring=0xd091bd3 errno=14 cover=1827 #0 [257069ms] -> add_key$fscrypt_v1(0x20001180, 0x20001300, 0x20001340, 0x48, 0xd091bd3) #0 [257069ms] <- add_key$fscrypt_v1=0x104365d2 errno=14 cover=1795 #0 [257070ms] -> stat(0x200001c0, 0x20001c00) #0 [257070ms] <- stat=0x0 errno=14 cover=598 #0 [257070ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [257070ms] <- setresuid=0x0 errno=14 cover=419 #0 [257071ms] -> keyctl$setperm(0x5, 0x104365d2, 0x0) #0 [257071ms] <- keyctl$setperm=0xffffffffffffffff errno=13 cover=450 15:09:12 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000001180), &(0x7f0000001300)={'fscrypt:', @desc2}, &(0x7f0000001340)={0x0, "9efd48cf39d5722d2525343efebd8efe723aed05f0ffafa2734185fda322e061c85fc337d6a171a22ac50d831b4ecc5b3e0ece1c147db224728e0107261333ce"}, 0x48, r0) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) keyctl$setperm(0x5, r1, 0x0) 2021/11/11 15:09:12 result hanged=false: [257095ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32690 #0 [257106ms] -> add_key$keyring(0x20000240, 0x20000080, 0x0, 0x0, 0xfffffffffffffffe) #0 [257107ms] <- add_key$keyring=0x9fc135e errno=14 cover=1766 #0 [257108ms] -> add_key$fscrypt_v1(0x20001180, 0x20001300, 0x20001340, 0x48, 0x9fc135e) #0 [257110ms] <- add_key$fscrypt_v1=0x3eec699f errno=14 cover=1756 #0 [257110ms] -> stat(0x200001c0, 0x20001c00) #0 [257110ms] <- stat=0x0 errno=14 cover=542 #0 [257110ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [257110ms] <- setresuid=0x0 errno=14 cover=419 #0 [257110ms] -> keyctl$setperm(0x5, 0x3eec699f, 0x0) #0 [257110ms] <- keyctl$setperm=0xffffffffffffffff errno=13 cover=450 2021/11/11 15:09:12 result hanged=false: 2021/11/11 15:09:12 added new input for call #1 add_key$fscrypt_v1 to corpus: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000001180), &(0x7f0000001300)={'fscrypt:', @desc2}, &(0x7f0000001340)={0x0, "9efd48cf39d5722d2525343efebd8efe723aed05f0ffafa2734185fda322e061c85fc337d6a171a22ac50d831b4ecc5b3e0ece1c147db224728e0107261333ce"}, 0x48, r0) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) keyctl$setperm(0x5, r1, 0x0) 15:09:12 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0xac) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') write$cgroup_int(r1, &(0x7f0000000040), 0x12) [257136ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32692 2021/11/11 15:09:12 poll: candidates=8 inputs=0 signal=0 #0 [257146ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000000) #0 [257146ms] <- syz_open_procfs=0x3 errno=14 cover=3997 [ 327.065991] syz-executor.0 (34234): /proc/34234/oom_adj is deprecated, please use /proc/34234/oom_score_adj instead. #0 [257153ms] -> write$binfmt_script(0x3, 0x20000080, 0xac) #0 [257156ms] <- write$binfmt_script=0xc errno=14 cover=12917 #0 [257158ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000000) #0 [257158ms] <- syz_open_procfs=0x4 errno=14 cover=2380 #0 [257159ms] -> write$cgroup_int(0x4, 0x20000040, 0x12) #0 [257159ms] <- write$cgroup_int=0xc errno=14 cover=278 enabling collider #0 [257160ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000000) #0 [257161ms] <- syz_open_procfs=0x3 errno=14 cover=2426 #0 [257161ms] -> write$binfmt_script(0x3, 0x20000080, 0xac) #0 [257162ms] <- write$binfmt_script=0xc errno=14 cover=285 pthread_create failed (errno 11) 15:09:12 executing program 0: syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r0) 2021/11/11 15:09:12 result hanged=false: [257227ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32794 #0 [257237ms] -> syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [257237ms] <- syz_genetlink_get_family_id$netlbl_calipso=0xffffffffffffffff errno=14 cover=3176 #0 [257238ms] -> syz_genetlink_get_family_id$ieee802154(0x200001c0, 0xffffffffffffffff) syz_genetlink_get_family_id(802.15.4 MAC, -1) netlink: failed to get family id for 802.15.4 MAC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [257239ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=2 cover=5662 #0 [257239ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [257240ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=6222 #0 [257240ms] -> sendmsg$IEEE802154_SET_MACPARAMS(0x5, 0x20000380, 0x0) #0 [257240ms] <- sendmsg$IEEE802154_SET_MACPARAMS=0x0 errno=14 cover=992 #0 [257240ms] -> syz_genetlink_get_family_id$nl802154(0x200003c0, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [257241ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=6982 #0 [257241ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [257242ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5467 #0 [257242ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [257243ms] <- syz_init_net_socket$nl_generic=0x7 errno=14 cover=5380 #0 [257243ms] -> syz_genetlink_get_family_id$nl802154(0x20000700, 0x5) syz_genetlink_get_family_id(nl802154, 5) #0 [257243ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=4488 enabling collider #0 [257244ms] -> syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [257244ms] <- syz_genetlink_get_family_id$netlbl_calipso=0xffffffffffffffff errno=14 cover=2436 #0 [257245ms] -> syz_genetlink_get_family_id$ieee802154(0x200001c0, 0xffffffffffffffff) syz_genetlink_get_family_id(802.15.4 MAC, -1) netlink: failed to get family id for 802.15.4 MAC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [257247ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=2 cover=5781 pthread_create failed (errno 11) 15:09:12 executing program 0: move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4) 2021/11/11 15:09:12 result hanged=false: [257306ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32896 #0 [257319ms] -> move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4) #0 [257321ms] <- move_pages=0xffffffffffffffff errno=1 cover=46 enabling collider #0 [257322ms] -> move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4) #0 [257322ms] <- move_pages=0xffffffffffffffff errno=1 cover=46 15:09:12 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000080), 0x0, 0x0) 2021/11/11 15:09:12 result hanged=false: [257349ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 32898 #0 [257362ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [257362ms] <- perf_event_open=0x3 errno=14 cover=3915 #0 [257364ms] -> socket$packet(0x11, 0x0, 0x300) #0 [257364ms] <- socket$packet=0xffffffffffffffff errno=94 cover=788 #0 [257366ms] -> ppoll(0x20000000, 0x0, 0x20000080, 0x0, 0x0) #0 [257366ms] <- ppoll=0x0 errno=14 cover=97 enabling collider #0 [257367ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [257368ms] <- perf_event_open=0x3 errno=14 cover=3860 #0 [257371ms] -> socket$packet(0x11, 0x0, 0x300) #0 [257371ms] <- socket$packet=0xffffffffffffffff errno=94 cover=788 pthread_create failed (errno 11) 15:09:12 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 2021/11/11 15:09:12 result hanged=false: [257429ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33000 #0 [257439ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [257440ms] <- perf_event_open=0x3 errno=14 cover=3933 #0 [257440ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [257441ms] <- syz_init_net_socket$bt_hci=0x5 errno=14 cover=6237 #0 [257441ms] -> bind$bt_hci(0x5, 0x20000000, 0x65) #0 [257441ms] <- bind$bt_hci=0x0 errno=14 cover=878 #0 [257442ms] -> write$bt_hci(0x5, 0x20000040, 0x6) #0 [257442ms] <- write$bt_hci=0x0 errno=14 cover=1823 enabling collider #0 [257443ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [257443ms] <- perf_event_open=0x3 errno=14 cover=3844 #0 [257443ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [257446ms] <- syz_init_net_socket$bt_hci=0x5 errno=14 cover=5612 pthread_create failed (errno 11) 2021/11/11 15:09:12 result hanged=false: 2021/11/11 15:09:12 #0: triaging type=7 15:09:12 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 2021/11/11 15:09:12 triaging input for call #3 write$bt_hci (new signal=3) [257511ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33102 #0 [257520ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [257522ms] <- perf_event_open=0x3 errno=14 cover=4232 #0 [257525ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [257528ms] <- syz_init_net_socket$bt_hci=0x5 errno=14 cover=46855 #0 [257536ms] -> bind$bt_hci(0x5, 0x20000000, 0x65) #0 [257536ms] <- bind$bt_hci=0x0 errno=14 cover=2256 #0 [257542ms] -> write$bt_hci(0x5, 0x20000040, 0x6) #0 [257542ms] <- write$bt_hci=0x0 errno=14 cover=5716 15:09:12 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 2021/11/11 15:09:12 result hanged=false: [257569ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33104 #0 [257581ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [257582ms] <- perf_event_open=0x3 errno=14 cover=3948 #0 [257583ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [257584ms] <- syz_init_net_socket$bt_hci=0x5 errno=14 cover=6388 #0 [257586ms] -> bind$bt_hci(0x5, 0x20000000, 0x65) #0 [257586ms] <- bind$bt_hci=0x0 errno=14 cover=806 #0 [257587ms] -> write$bt_hci(0x5, 0x20000040, 0x6) #0 [257588ms] <- write$bt_hci=0x0 errno=14 cover=1801 2021/11/11 15:09:12 result hanged=false: 15:09:12 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) [257613ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33106 #0 [257623ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [257623ms] <- perf_event_open=0x3 errno=14 cover=3956 #0 [257624ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [257625ms] <- syz_init_net_socket$bt_hci=0x5 errno=14 cover=6214 #0 [257626ms] -> bind$bt_hci(0x5, 0x20000000, 0x65) #0 [257626ms] <- bind$bt_hci=0x0 errno=14 cover=817 #0 [257626ms] -> write$bt_hci(0x5, 0x20000040, 0x6) #0 [257626ms] <- write$bt_hci=0x0 errno=14 cover=1812 2021/11/11 15:09:12 result hanged=false: 2021/11/11 15:09:12 added new input for call #3 write$bt_hci to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 15:09:12 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) [257651ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33108 #0 [257663ms] -> socket$packet(0x11, 0x3, 0x300) #0 [257664ms] <- socket$packet=0x3 errno=14 cover=1765 #0 [257665ms] -> setsockopt$packet_fanout(0x3, 0x107, 0x12, 0x20000000, 0x4) #0 [257665ms] <- setsockopt$packet_fanout=0x0 errno=14 cover=13137 #0 [257666ms] -> bind$packet(0x3, 0x20000180, 0x14) #0 [257666ms] <- bind$packet=0xffffffffffffffff errno=22 cover=147 enabling collider #0 [257671ms] -> socket$packet(0x11, 0x3, 0x300) #0 [257672ms] <- socket$packet=0x3 errno=14 cover=1776 #0 [257672ms] -> setsockopt$packet_fanout(0x3, 0x107, 0x12, 0x20000000, 0x4) #0 [257673ms] <- setsockopt$packet_fanout=0x0 errno=14 cover=234 pthread_create failed (errno 11) 2021/11/11 15:09:13 result hanged=false: 15:09:13 executing program 0: set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x5) r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) [257734ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33210 #0 [257745ms] -> set_mempolicy(0x3, 0x20000000, 0x5) #0 [257745ms] <- set_mempolicy=0x0 errno=14 cover=180 #0 [257745ms] -> creat(0x20000080, 0x0) #0 [257746ms] <- creat=0x3 errno=14 cover=6737 #0 [257746ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [258210ms] <- pwrite64=0xfff000 errno=14 cover=262143 enabling collider #0 [258214ms] -> set_mempolicy(0x3, 0x20000000, 0x5) #0 [258214ms] <- set_mempolicy=0x0 errno=14 cover=260 #0 [258215ms] -> creat(0x20000080, 0x0) pthread_create failed (errno 11) 2021/11/11 15:09:13 result hanged=false: 15:09:13 executing program 0: set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x5) r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) 2021/11/11 15:09:13 #0: triaging type=7 2021/11/11 15:09:13 triaging input for call #2 pwrite64 (new signal=2) [258382ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33312 #0 [258391ms] -> set_mempolicy(0x3, 0x20000000, 0x5) #0 [258392ms] <- set_mempolicy=0x0 errno=14 cover=158 #0 [258392ms] -> creat(0x20000080, 0x0) #0 [258392ms] <- creat=0x3 errno=14 cover=6652 #0 [258394ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [258889ms] <- pwrite64=0xfff000 errno=14 cover=262143 2021/11/11 15:09:14 result hanged=false: 15:09:14 executing program 0: set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x5) r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) [259046ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33314 #0 [259061ms] -> set_mempolicy(0x3, 0x20000000, 0x5) #0 [259061ms] <- set_mempolicy=0x0 errno=14 cover=169 #0 [259062ms] -> creat(0x20000080, 0x0) #0 [259062ms] <- creat=0x3 errno=14 cover=6901 #0 [259069ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [259546ms] <- pwrite64=0xfff000 errno=14 cover=262143 15:09:14 executing program 0: set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x5) r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) 2021/11/11 15:09:14 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [259708ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33316 #0 [259719ms] -> set_mempolicy(0x3, 0x20000000, 0x5) #0 [259719ms] <- set_mempolicy=0x0 errno=14 cover=158 #0 [259720ms] -> creat(0x20000080, 0x0) #0 [259720ms] <- creat=0x3 errno=14 cover=6761 #0 [259722ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [260173ms] <- pwrite64=0xfff000 errno=14 cover=262143 2021/11/11 15:09:15 result hanged=false: 2021/11/11 15:09:15 added new input for call #2 pwrite64 to corpus: set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x5) r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) 15:09:15 executing program 0: select(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x4}, 0x0, &(0x7f0000000180)={0x77359400}) [260304ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33318 #0 [260316ms] -> select(0x40, 0x200000c0, 0x20000100, 0x0, 0x20000180) #0 [260320ms] <- select=0x1 errno=14 cover=405 enabling collider #0 [260322ms] -> select(0x40, 0x200000c0, 0x20000100, 0x0, 0x20000180) #0 [260322ms] <- select=0x1 errno=14 cover=405 15:09:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)=@updsa={0x104, 0x1a, 0x9, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xd9}, [@coaddr={0x14, 0xe, @in=@private}]}, 0x104}}, 0x0) 2021/11/11 15:09:15 result hanged=false: 2021/11/11 15:09:15 poll: candidates=8 inputs=0 signal=0 [260350ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33320 #0 [260360ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [260360ms] <- socket$nl_xfrm=0x3 errno=14 cover=1463 #0 [260361ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) #0 [260361ms] <- sendmsg$nl_xfrm=0x104 errno=14 cover=1551 enabling collider #0 [260362ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [260363ms] <- socket$nl_xfrm=0x3 errno=14 cover=1439 15:09:15 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x2, &(0x7f00000002c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef38", 0x3b, 0x400}, {&(0x7f00000000c0)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000080)=ANY=[]) 2021/11/11 15:09:15 result hanged=false: [260386ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33322 #0 [260396ms] -> syz_mount_image$ext4(0x20000000, 0x20000040, 0x40000, 0x2, 0x200002c0, 0x0, 0x20000080) syz_mount_image: size=262144 segs=2 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 330.329674] EXT4-fs error (device loop0): ext4_fill_super:4960: inode #2: comm syz-executor.0: iget: root inode unallocated [ 330.333461] EXT4-fs (loop0): get root inode failed [ 330.334514] EXT4-fs (loop0): mount failed syz_mount_image > mount error: 117 #0 [260429ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=117 cover=49584 enabling collider #0 [260430ms] -> syz_mount_image$ext4(0x20000000, 0x20000040, 0x40000, 0x2, 0x200002c0, 0x0, 0x20000080) #0 [260432ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=16 cover=5965 15:09:15 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x2, &(0x7f00000002c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef38", 0x3b, 0x400}, {&(0x7f00000000c0)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000080)=ANY=[]) 2021/11/11 15:09:15 result hanged=false: 2021/11/11 15:09:15 #0: triaging type=7 2021/11/11 15:09:15 triaging input for call #0 syz_mount_image$ext4 (new signal=3) [260454ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33324 #0 [260466ms] -> syz_mount_image$ext4(0x20000000, 0x20000040, 0x40000, 0x2, 0x200002c0, 0x0, 0x20000080) syz_mount_image: size=262144 segs=2 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 330.390005] EXT4-fs error (device loop0): ext4_fill_super:4960: inode #2: comm syz-executor.0: iget: root inode unallocated [ 330.392820] EXT4-fs (loop0): get root inode failed [ 330.393975] EXT4-fs (loop0): mount failed syz_mount_image > mount error: 117 #0 [260491ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=117 cover=51753 15:09:15 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x2, &(0x7f00000002c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef38", 0x3b, 0x400}, {&(0x7f00000000c0)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000080)=ANY=[]) 2021/11/11 15:09:15 result hanged=false: [260521ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33326 #0 [260531ms] -> syz_mount_image$ext4(0x20000000, 0x20000040, 0x40000, 0x2, 0x200002c0, 0x0, 0x20000080) syz_mount_image: size=262144 segs=2 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 330.462900] EXT4-fs error (device loop0): ext4_fill_super:4960: inode #2: comm syz-executor.0: iget: root inode unallocated [ 330.465708] EXT4-fs (loop0): get root inode failed [ 330.466850] EXT4-fs (loop0): mount failed syz_mount_image > mount error: 117 #0 [260563ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=117 cover=48626 2021/11/11 15:09:15 result hanged=false: 15:09:15 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x2, &(0x7f00000002c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef38", 0x3b, 0x400}, {&(0x7f00000000c0)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000080)=ANY=[]) [260593ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33328 #0 [260605ms] -> syz_mount_image$ext4(0x20000000, 0x20000040, 0x40000, 0x2, 0x200002c0, 0x0, 0x20000080) syz_mount_image: size=262144 segs=2 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 330.525202] EXT4-fs error (device loop0): ext4_fill_super:4960: inode #2: comm syz-executor.0: iget: root inode unallocated [ 330.527923] EXT4-fs (loop0): get root inode failed [ 330.529093] EXT4-fs (loop0): mount failed syz_mount_image > mount error: 117 #0 [260623ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=117 cover=48721 2021/11/11 15:09:15 result hanged=false: 2021/11/11 15:09:15 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x2, &(0x7f00000002c0)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef38", 0x3b, 0x400}, {&(0x7f00000000c0)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000080)=ANY=[]) 15:09:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000000200)='./file0/file1/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) [260682ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33330 #0 [260690ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [260691ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12681 #0 [260692ms] -> mount(0x0, 0x200004c0, 0x20000500, 0x0, 0x0) #0 [260695ms] <- mount=0x0 errno=14 cover=11995 #0 [260695ms] -> syz_mount_image$ext4(0x0, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [260696ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=2495 #0 [260696ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [260696ms] <- perf_event_open=0x3 errno=14 cover=4075 #0 [260697ms] -> syz_mount_image$nfs4(0x0, 0x20000200, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [260697ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=5861 #0 [260697ms] -> umount2(0x20000000, 0x0) #0 [260700ms] <- umount2=0x0 errno=14 cover=34783 enabling collider #0 [260701ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [260701ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1357 #0 [260702ms] -> mount(0x0, 0x200004c0, 0x20000500, 0x0, 0x0) #0 [260710ms] <- mount=0x0 errno=14 cover=12447 pthread_create failed (errno 11) 15:09:16 executing program 0: syz_io_uring_setup(0x6894, &(0x7f0000000e40), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000ec0), &(0x7f0000000f00)) umount(./2050/file0) 2021/11/11 15:09:16 result hanged=false: [260763ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33432 #0 [260772ms] -> syz_io_uring_setup(0x6894, 0x20000e40, 0x20ffb000, 0x20ffc000, 0x20000ec0, 0x20000f00) #0 [260776ms] <- syz_io_uring_setup=0x3 errno=14 cover=21190 enabling collider #0 [260777ms] -> syz_io_uring_setup(0x6894, 0x20000e40, 0x20ffb000, 0x20ffc000, 0x20000ec0, 0x20000f00) #0 [260784ms] <- syz_io_uring_setup=0x3 errno=14 cover=28940 15:09:16 executing program 0: openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000dc0), 0x1, 0x0) 2021/11/11 15:09:16 result hanged=false: [260801ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33434 #0 [260815ms] -> openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) #0 [260815ms] <- openat$sndseq=0xffffffffffffffff errno=14 cover=616 #0 [260815ms] -> syz_open_dev$vcsu(0x20000dc0, 0x1, 0x0) #0 [260815ms] <- syz_open_dev$vcsu=0x3 errno=14 cover=1160 enabling collider #0 [260816ms] -> openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) #0 [260816ms] <- openat$sndseq=0xffffffffffffffff errno=14 cover=617 15:09:16 executing program 0: pause() 2021/11/11 15:09:16 result hanged=false: [260837ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33436 #0 [260847ms] -> pause() enabling collider pthread_create failed (errno 11) 15:09:17 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x1000000000000000}]) 2021/11/11 15:09:17 result hanged=false: [262013ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33538 #0 [262026ms] -> syz_read_part_table(0x0, 0x1, 0x20000300) #0 [262039ms] <- syz_read_part_table=0x0 errno=0 cover=20364 enabling collider #0 [262039ms] -> syz_read_part_table(0x0, 0x1, 0x20000300) #0 [262045ms] <- syz_read_part_table=0x0 errno=0 cover=10525 15:09:17 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x1000000000000000}]) 2021/11/11 15:09:17 result hanged=false: 2021/11/11 15:09:17 #0: triaging type=7 2021/11/11 15:09:17 triaging input for call #0 syz_read_part_table (new signal=5) [262072ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33540 #0 [262082ms] -> syz_read_part_table(0x0, 0x1, 0x20000300) #0 [262093ms] <- syz_read_part_table=0x0 errno=0 cover=10619 15:09:17 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x1000000000000000}]) 2021/11/11 15:09:17 result hanged=false: [262118ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33542 #0 [262128ms] -> syz_read_part_table(0x0, 0x1, 0x20000300) #0 [262140ms] <- syz_read_part_table=0x0 errno=0 cover=10366 15:09:17 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x1000000000000000}]) 2021/11/11 15:09:17 result hanged=false: [262166ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33544 #0 [262176ms] -> syz_read_part_table(0x0, 0x1, 0x20000300) #0 [262187ms] <- syz_read_part_table=0x0 errno=0 cover=10600 2021/11/11 15:09:17 result hanged=false: 2021/11/11 15:09:17 added new input for call #0 syz_read_part_table to corpus: syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x1000000000000000}]) 15:09:17 executing program 0: syz_emit_ethernet(0x86, &(0x7f0000000100)={@link_local, @random="b98aa9fcba76", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "a83dcc", 0x50, 0x2f, 0x0, @private1, @private2, {[@hopopts={0x0, 0x9, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0x0]}}, @enc_lim, @pad1, @ra, @generic, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}]}]}}}}}, 0x0) [262236ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33546 #0 [262246ms] -> syz_emit_ethernet(0x86, 0x20000100, 0x0) 01 80 c2 00 00 00 b9 8a a9 fc ba 76 86 dd 60 a8 3d cc 00 50 2f 00 fc 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 00 00 00 00 07 10 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 04 01 00 00 01 00 05 02 00 00 00 00 07 28 00 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 #0 [262248ms] <- syz_emit_ethernet=0x86 errno=14 cover=39455 enabling collider #0 [262250ms] -> syz_emit_ethernet(0x86, 0x20000100, 0x0) 01 80 c2 00 00 00 b9 8a a9 fc ba 76 86 dd 60 a8 3d cc 00 50 2f 00 fc 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 00 00 00 00 07 10 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 04 01 00 00 01 00 05 02 00 00 00 00 07 28 00 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 #0 [262254ms] <- syz_emit_ethernet=0x86 errno=14 cover=39172 2021/11/11 15:09:17 result hanged=false: 15:09:17 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4801) 2021/11/11 15:09:17 poll: candidates=8 inputs=0 signal=0 iptable mangle/10: resetting [262282ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33548 #0 [262293ms] -> syz_open_dev$loop(0x20000000, 0x0, 0x4801) #0 [262294ms] <- syz_open_dev$loop=0x3 errno=14 cover=1190 enabling collider #0 [262296ms] -> syz_open_dev$loop(0x20000000, 0x0, 0x4801) #0 [262296ms] <- syz_open_dev$loop=0x3 errno=14 cover=1134 15:09:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x4b4b, 0xffffffffffffffff) 2021/11/11 15:09:17 result hanged=false: [262327ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33550 #0 [262341ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [262342ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3422 #0 [262344ms] -> ioctl$TCGETA(0x3, 0x4b4b, 0xffffffffffffffff) #0 [262344ms] <- ioctl$TCGETA=0xffffffffffffffff errno=14 cover=171 enabling collider #0 [262344ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [262345ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3399 #0 [262345ms] -> ioctl$TCGETA(0x3, 0x4b4b, 0xffffffffffffffff) #0 [262346ms] <- ioctl$TCGETA=0xffffffffffffffff errno=9 cover=46 2021/11/11 15:09:17 result hanged=false: 15:09:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x4b4b, 0xffffffffffffffff) 2021/11/11 15:09:17 #0: triaging type=7 2021/11/11 15:09:17 triaging input for call #1 ioctl$TCGETA (new signal=1) [262376ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33552 #0 [262391ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [262391ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3575 #0 [262396ms] -> ioctl$TCGETA(0x3, 0x4b4b, 0xffffffffffffffff) #0 [262396ms] <- ioctl$TCGETA=0xffffffffffffffff errno=14 cover=171 15:09:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x4b4b, 0xffffffffffffffff) 2021/11/11 15:09:17 result hanged=false: [262423ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33554 #0 [262433ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [262435ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3438 #0 [262436ms] -> ioctl$TCGETA(0x3, 0x4b4b, 0xffffffffffffffff) #0 [262436ms] <- ioctl$TCGETA=0xffffffffffffffff errno=14 cover=171 15:09:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x4b4b, 0xffffffffffffffff) 2021/11/11 15:09:17 result hanged=false: [262458ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33556 #0 [262469ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [262471ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3460 #0 [262474ms] -> ioctl$TCGETA(0x3, 0x4b4b, 0xffffffffffffffff) #0 [262474ms] <- ioctl$TCGETA=0xffffffffffffffff errno=14 cover=171 2021/11/11 15:09:17 result hanged=false: 2021/11/11 15:09:17 added new input for call #1 ioctl$TCGETA to corpus: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x4b4b, 0xffffffffffffffff) 15:09:17 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x1b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) [262504ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33558 #0 [262514ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [262515ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1785 #0 [262516ms] -> sendto(0x3, 0x20000040, 0x4, 0x0, 0x200000c0, 0x1b) #0 [262516ms] <- sendto=0x4 errno=14 cover=2010 #0 [262516ms] -> setsockopt$SO_TIMESTAMPING(0x3, 0x1, 0x25, 0x20000000, 0x4) #0 [262516ms] <- setsockopt$SO_TIMESTAMPING=0x0 errno=14 cover=139 #0 [262517ms] -> recvmmsg(0x3, 0x20001a00, 0x300, 0x10062, 0x0) #0 [262522ms] <- recvmmsg=0x300 errno=14 cover=141425 enabling collider #0 [262524ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [262524ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1703 #0 [262525ms] -> sendto(0x3, 0x20000040, 0x4, 0x0, 0x200000c0, 0x1b) #0 [262527ms] <- sendto=0x4 errno=14 cover=2085 pthread_create failed (errno 11) 15:09:17 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x1b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 2021/11/11 15:09:17 result hanged=false: 2021/11/11 15:09:17 #0: triaging type=7 2021/11/11 15:09:17 triaging input for call #3 recvmmsg (new signal=4) iptable filter/10: resetting iptable mangle/10: resetting [262590ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33660 #0 [262600ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [262601ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1737 #0 [262601ms] -> sendto(0x3, 0x20000040, 0x4, 0x0, 0x200000c0, 0x1b) #0 [262602ms] <- sendto=0x4 errno=14 cover=2071 #0 [262602ms] -> setsockopt$SO_TIMESTAMPING(0x3, 0x1, 0x25, 0x20000000, 0x4) #0 [262602ms] <- setsockopt$SO_TIMESTAMPING=0x0 errno=14 cover=139 #0 [262602ms] -> recvmmsg(0x3, 0x20001a00, 0x300, 0x10062, 0x0) #0 [262609ms] <- recvmmsg=0x300 errno=14 cover=141446 15:09:17 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x1b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 2021/11/11 15:09:17 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [262647ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33662 #0 [262656ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [262656ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1687 #0 [262657ms] -> sendto(0x3, 0x20000040, 0x4, 0x0, 0x200000c0, 0x1b) #0 [262657ms] <- sendto=0x4 errno=14 cover=2095 #0 [262658ms] -> setsockopt$SO_TIMESTAMPING(0x3, 0x1, 0x25, 0x20000000, 0x4) #0 [262658ms] <- setsockopt$SO_TIMESTAMPING=0x0 errno=14 cover=139 #0 [262659ms] -> recvmmsg(0x3, 0x20001a00, 0x300, 0x10062, 0x0) #0 [262671ms] <- recvmmsg=0x300 errno=14 cover=140749 15:09:18 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x1b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 2021/11/11 15:09:18 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [262710ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33664 #0 [262718ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [262718ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1840 #0 [262723ms] -> sendto(0x3, 0x20000040, 0x4, 0x0, 0x200000c0, 0x1b) #0 [262724ms] <- sendto=0x4 errno=14 cover=2024 #0 [262725ms] -> setsockopt$SO_TIMESTAMPING(0x3, 0x1, 0x25, 0x20000000, 0x4) #0 [262725ms] <- setsockopt$SO_TIMESTAMPING=0x0 errno=14 cover=139 #0 [262726ms] -> recvmmsg(0x3, 0x20001a00, 0x300, 0x10062, 0x0) #0 [262731ms] <- recvmmsg=0x300 errno=14 cover=141307 iptable filter/10: resetting iptable mangle/10: resetting 2021/11/11 15:09:18 result hanged=false: 2021/11/11 15:09:18 added new input for call #3 recvmmsg to corpus: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x1b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 15:09:18 executing program 0: pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000001140)) [262783ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33666 #0 [262791ms] -> pkey_mprotect(0x20000000, 0x4000, 0x4, 0xffffffffffffffff) #0 [262792ms] <- pkey_mprotect=0x0 errno=14 cover=377 #0 [262793ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [262793ms] <- socket$nl_generic=0x3 errno=14 cover=1445 SIGSEGV on 0x20001140, skipping #0 [262793ms] -> getsockopt$netlink(0x3, 0x10e, 0x9, 0x0, 0x20001140) #0 [262793ms] <- getsockopt$netlink=0xffffffffffffffff errno=14 cover=629 enabling collider #0 [262794ms] -> pkey_mprotect(0x20000000, 0x4000, 0x4, 0xffffffffffffffff) #0 [262794ms] <- pkey_mprotect=0x0 errno=14 cover=119 SIGSEGV on 0x20001140, skipping #0 [262795ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [262795ms] <- socket$nl_generic=0x3 errno=14 cover=1411 pthread_create failed (errno 11) 15:09:18 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x3}, 0xe) 2021/11/11 15:09:18 result hanged=false: [262875ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33768 #0 [262884ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [262886ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6394 #0 [262886ms] -> connect$bt_l2cap(0x4, 0x20000000, 0xe) #0 [262886ms] <- connect$bt_l2cap=0xffffffffffffffff errno=22 cover=182 enabling collider #0 [262887ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [262887ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=5503 15:09:18 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x3}, 0xe) 2021/11/11 15:09:18 result hanged=false: 2021/11/11 15:09:18 #0: triaging type=7 2021/11/11 15:09:18 triaging input for call #1 connect$bt_l2cap (new signal=1) [262913ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33770 #0 [262922ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [262923ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6443 #0 [262925ms] -> connect$bt_l2cap(0x4, 0x20000000, 0xe) #0 [262925ms] <- connect$bt_l2cap=0xffffffffffffffff errno=22 cover=182 15:09:18 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x3}, 0xe) 2021/11/11 15:09:18 result hanged=false: [262948ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33772 #0 [262958ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [262959ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6478 #0 [262961ms] -> connect$bt_l2cap(0x4, 0x20000000, 0xe) #0 [262961ms] <- connect$bt_l2cap=0xffffffffffffffff errno=22 cover=182 15:09:18 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x3}, 0xe) 2021/11/11 15:09:18 result hanged=false: [262992ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33774 #0 [263000ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [263003ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=11474 #0 [263010ms] -> connect$bt_l2cap(0x4, 0x20000000, 0xe) #0 [263010ms] <- connect$bt_l2cap=0xffffffffffffffff errno=22 cover=182 2021/11/11 15:09:18 result hanged=false: 2021/11/11 15:09:18 added new input for call #1 connect$bt_l2cap to corpus: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x3}, 0xe) 15:09:18 executing program 0: keyctl$join(0x1, 0x0) prctl$PR_GET_DUMPABLE(0x3) mlockall(0x1) [263032ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33776 #0 [263042ms] -> keyctl$join(0x1, 0x0) #0 [263044ms] <- keyctl$join=0x144cdfd7 errno=14 cover=777 #0 [263045ms] -> prctl$PR_GET_DUMPABLE(0x3) #0 [263045ms] <- prctl$PR_GET_DUMPABLE=0x1 errno=22 cover=43 #0 [263046ms] -> mlockall(0x1) #0 [263276ms] <- mlockall=0x0 errno=14 cover=262143 enabling collider #0 [263280ms] -> keyctl$join(0x1, 0x0) #0 [263282ms] <- keyctl$join=0xaaf7dbc errno=14 cover=725 #0 [263283ms] -> prctl$PR_GET_DUMPABLE(0x3) #0 [263284ms] <- prctl$PR_GET_DUMPABLE=0x1 errno=22 cover=64 pthread_create failed (errno 11) 2021/11/11 15:09:18 result hanged=false: 2021/11/11 15:09:18 #0: triaging type=7 15:09:18 executing program 0: keyctl$join(0x1, 0x0) prctl$PR_GET_DUMPABLE(0x3) mlockall(0x1) 2021/11/11 15:09:18 triaging input for call #2 mlockall (new signal=3) [263448ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33878 #0 [263457ms] -> keyctl$join(0x1, 0x0) #0 [263457ms] <- keyctl$join=0x39daec28 errno=14 cover=683 #0 [263459ms] -> prctl$PR_GET_DUMPABLE(0x3) #0 [263459ms] <- prctl$PR_GET_DUMPABLE=0x1 errno=22 cover=43 #0 [263459ms] -> mlockall(0x1) #0 [263694ms] <- mlockall=0x0 errno=14 cover=262143 2021/11/11 15:09:19 result hanged=false: 15:09:19 executing program 0: keyctl$join(0x1, 0x0) prctl$PR_GET_DUMPABLE(0x3) mlockall(0x1) [263834ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33880 #0 [263845ms] -> keyctl$join(0x1, 0x0) #0 [263848ms] <- keyctl$join=0x1d993ed4 errno=14 cover=701 #0 [263849ms] -> prctl$PR_GET_DUMPABLE(0x3) #0 [263850ms] <- prctl$PR_GET_DUMPABLE=0x1 errno=22 cover=43 #0 [263850ms] -> mlockall(0x1) #0 [264073ms] <- mlockall=0x0 errno=14 cover=262143 2021/11/11 15:09:19 result hanged=false: 15:09:19 executing program 0: keyctl$join(0x1, 0x0) prctl$PR_GET_DUMPABLE(0x3) mlockall(0x1) [264212ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33882 #0 [264222ms] -> keyctl$join(0x1, 0x0) #0 [264224ms] <- keyctl$join=0x3efe81e6 errno=14 cover=855 #0 [264225ms] -> prctl$PR_GET_DUMPABLE(0x3) #0 [264226ms] <- prctl$PR_GET_DUMPABLE=0x1 errno=22 cover=43 #0 [264226ms] -> mlockall(0x1) #0 [264463ms] <- mlockall=0x0 errno=14 cover=262143 2021/11/11 15:09:19 result hanged=false: 2021/11/11 15:09:19 added new input for call #2 mlockall to corpus: keyctl$join(0x1, 0x0) prctl$PR_GET_DUMPABLE(0x3) mlockall(0x1) 15:09:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) [264608ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33884 #0 [264617ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [264617ms] <- perf_event_open=0x3 errno=14 cover=3899 #0 [264618ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [264618ms] <- socket$netlink=0x4 errno=14 cover=1406 #0 [264618ms] -> fcntl$dupfd(0x4, 0x0, 0x4) #0 [264618ms] <- fcntl$dupfd=0x5 errno=14 cover=111 #0 [264618ms] -> sendmsg$nl_generic(0x5, 0x20000280, 0x0) #0 [264619ms] <- sendmsg$nl_generic=0x14 errno=14 cover=1608 enabling collider #0 [264619ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [264619ms] <- perf_event_open=0x3 errno=14 cover=3864 #0 [264620ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [264621ms] <- socket$netlink=0x4 errno=14 cover=1575 pthread_create failed (errno 11) 15:09:20 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a40), 0x80200) [264689ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 15:09:20 result hanged=false: spawned worker pid 33986 #0 [264699ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000a40, 0x80200) #0 [264699ms] <- openat$sndseq=0x3 errno=14 cover=2202 enabling collider #0 [264703ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000a40, 0x80200) #0 [264703ms] <- openat$sndseq=0x3 errno=14 cover=2256 15:09:20 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @random="94a36045c978", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "afb6a5", 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 2021/11/11 15:09:20 result hanged=false: 2021/11/11 15:09:20 poll: candidates=8 inputs=0 signal=0 [264730ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33988 #0 [264740ms] -> syz_emit_ethernet(0x5e, 0x20000000, 0x0) aa aa aa aa aa aa 94 a3 60 45 c9 78 86 dd 60 af b6 a5 00 28 06 00 fe 88 00 00 00 00 00 00 00 00 00 00 00 00 00 01 fe 80 00 00 00 00 00 00 00 00 00 00 00 00 00 aa 00 00 00 00 44 43 42 41 44 43 42 41 a0 00 00 00 44 ff 00 00 08 0a 00 00 00 00 00 00 00 00 08 0a 00 00 00 00 00 00 00 00 #0 [264747ms] <- syz_emit_ethernet=0x5e errno=14 cover=27527 enabling collider #0 [264748ms] -> syz_emit_ethernet(0x5e, 0x20000000, 0x0) aa aa aa aa aa aa 94 a3 60 45 c9 78 86 dd 60 af b6 a5 00 28 06 00 fe 88 00 00 00 00 00 00 00 00 00 00 00 00 00 01 fe 80 00 00 00 00 00 00 00 00 00 00 00 00 00 aa 00 00 00 00 44 43 42 41 44 43 42 41 a0 00 00 00 44 ff 00 00 08 0a 00 00 00 00 00 00 00 00 08 0a 00 00 00 00 00 00 00 00 #0 [264751ms] <- syz_emit_ethernet=0x5e errno=14 cover=27411 15:09:20 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000002a00010d00ecffffff002d9eaa52cee402"], 0x28}}, 0x0) 2021/11/11 15:09:20 result hanged=false: [264772ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 33990 #0 [264783ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [264786ms] <- perf_event_open=0x3 errno=14 cover=4216 #0 [264787ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [264787ms] <- socket$netlink=0x4 errno=14 cover=4179 #0 [264788ms] -> sendmsg$nl_generic(0x4, 0x20000000, 0x0) #0 [264789ms] <- sendmsg$nl_generic=0x28 errno=14 cover=4397 enabling collider #0 [264790ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [264790ms] <- perf_event_open=0x3 errno=14 cover=4137 #0 [264791ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [264791ms] <- socket$netlink=0x4 errno=14 cover=4218 pthread_create failed (errno 11) 2021/11/11 15:09:20 result hanged=false: 15:09:20 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x101040) [264854ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34092 #0 [264863ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000400, 0x101040) #0 [264864ms] <- openat$sndseq=0x3 errno=14 cover=2279 enabling collider #0 [264864ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000400, 0x101040) #0 [264864ms] <- openat$sndseq=0x3 errno=14 cover=2263 15:09:20 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000027c0)) 2021/11/11 15:09:20 result hanged=false: [264889ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34094 #0 [264901ms] -> sendmmsg$inet(0xffffffffffffffff, 0x20002280, 0x1, 0x0) #0 [264903ms] <- sendmmsg$inet=0xffffffffffffffff errno=9 cover=51 #0 [264904ms] -> socketpair$nbd(0x1, 0x1, 0x0, 0x200027c0) #0 [264904ms] <- socketpair$nbd=0x0 errno=14 cover=2886 enabling collider #0 [264905ms] -> sendmmsg$inet(0xffffffffffffffff, 0x20002280, 0x1, 0x0) #0 [264906ms] <- sendmmsg$inet=0xffffffffffffffff errno=9 cover=51 15:09:20 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) 2021/11/11 15:09:20 result hanged=false: [264930ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34096 #0 [264940ms] -> openat$null(0xffffffffffffff9c, 0x20000200, 0x400, 0x0) #0 [264941ms] <- openat$null=0x3 errno=14 cover=1074 enabling collider #0 [264942ms] -> openat$null(0xffffffffffffff9c, 0x20000200, 0x400, 0x0) #0 [264942ms] <- openat$null=0x3 errno=14 cover=1073 15:09:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)) 2021/11/11 15:09:20 result hanged=false: [264964ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34098 #0 [264976ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [264976ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3388 #0 [264977ms] -> openat(0xffffffffffffff9c, 0x20000080, 0x42, 0x0) #0 [264978ms] <- openat=0x4 errno=14 cover=6889 #0 [264978ms] -> ioctl$VT_RESIZE(0x3, 0x5609, 0x20000000) #0 [264978ms] <- ioctl$VT_RESIZE=0x0 errno=14 cover=525 enabling collider #0 [264979ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [264979ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3426 #0 [264980ms] -> openat(0xffffffffffffff9c, 0x20000080, 0x42, 0x0) #0 [264980ms] <- openat=0x4 errno=14 cover=1128 pthread_create failed (errno 11) 2021/11/11 15:09:20 result hanged=false: 15:09:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x21, 0xc21, 0x0, 0x0, {0x2, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) [265045ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34200 #0 [265055ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [265058ms] <- socket$netlink=0x3 errno=14 cover=1373 #0 [265059ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [265059ms] <- sendmsg$nl_generic=0x1c errno=14 cover=1590 enabling collider #0 [265060ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [265060ms] <- socket$netlink=0x3 errno=14 cover=1405 2021/11/11 15:09:20 result hanged=false: 15:09:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f80100200040000000000000000000800029c76292f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e20202020202020202020100098ea70325132510000ea7032510300000000002e2e202020202020202020100098ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200098ea70325132510000ea70325104001a040000", 0x80, 0x10e00}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x20e00}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x30e00}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x50e00}], 0x0, &(0x7f0000010d00)) [265084ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34202 #0 [265094ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x80000, 0x8, 0x20000200, 0x0, 0x20010d00) syz_mount_image: size=524288 segs=8 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [265111ms] <- syz_mount_image$vfat=0x5 errno=0 cover=23402 enabling collider #0 [265111ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x80000, 0x8, 0x20000200, 0x0, 0x20010d00) #0 [265114ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=16 cover=13788 2021/11/11 15:09:20 result hanged=false: 2021/11/11 15:09:20 #0: triaging type=7 15:09:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f80100200040000000000000000000800029c76292f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e20202020202020202020100098ea70325132510000ea7032510300000000002e2e202020202020202020100098ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200098ea70325132510000ea70325104001a040000", 0x80, 0x10e00}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x20e00}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x30e00}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x50e00}], 0x0, &(0x7f0000010d00)) umount(./2086/file0) 2021/11/11 15:09:20 triaging input for call #0 syz_mount_image$vfat (new signal=1) [265156ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34204 #0 [265165ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x80000, 0x8, 0x20000200, 0x0, 0x20010d00) syz_mount_image: size=524288 segs=8 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [265186ms] <- syz_mount_image$vfat=0x5 errno=0 cover=22952 2021/11/11 15:09:20 result hanged=false: 15:09:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f80100200040000000000000000000800029c76292f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e20202020202020202020100098ea70325132510000ea7032510300000000002e2e202020202020202020100098ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200098ea70325132510000ea70325104001a040000", 0x80, 0x10e00}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x20e00}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x30e00}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x50e00}], 0x0, &(0x7f0000010d00)) umount(./2087/file0) [265218ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34206 #0 [265229ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x80000, 0x8, 0x20000200, 0x0, 0x20010d00) syz_mount_image: size=524288 segs=8 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [265238ms] <- syz_mount_image$vfat=0x5 errno=0 cover=22843 2021/11/11 15:09:20 result hanged=false: 15:09:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f80100200040000000000000000000800029c76292f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e20202020202020202020100098ea70325132510000ea7032510300000000002e2e202020202020202020100098ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200098ea70325132510000ea70325104001a040000", 0x80, 0x10e00}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x20e00}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x30e00}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x50e00}], 0x0, &(0x7f0000010d00)) umount(./2088/file0) [265270ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34208 #0 [265281ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x80000, 0x8, 0x20000200, 0x0, 0x20010d00) syz_mount_image: size=524288 segs=8 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [265291ms] <- syz_mount_image$vfat=0x5 errno=0 cover=23118 2021/11/11 15:09:20 result hanged=false: 2021/11/11 15:09:20 added new input for call #0 syz_mount_image$vfat to corpus: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f80100200040000000000000000000800029c76292f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e20202020202020202020100098ea70325132510000ea7032510300000000002e2e202020202020202020100098ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200098ea70325132510000ea70325104001a040000", 0x80, 0x10e00}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x20e00}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x30e00}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x50e00}], 0x0, &(0x7f0000010d00)) umount(./2089/file0) 15:09:20 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) [265352ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 15:09:20 poll: candidates=8 inputs=0 signal=0 spawned worker pid 34210 #0 [265362ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [265362ms] <- socket$inet6_udplite=0x3 errno=14 cover=1635 #0 [265363ms] -> setsockopt$inet6_MCAST_MSFILTER(0x3, 0x29, 0x30, 0x0, 0x0) #0 [265363ms] <- setsockopt$inet6_MCAST_MSFILTER=0xffffffffffffffff errno=22 cover=142 enabling collider #0 [265364ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [265364ms] <- socket$inet6_udplite=0x3 errno=14 cover=1645 15:09:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 2021/11/11 15:09:20 result hanged=false: [265386ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34212 #0 [265398ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [265399ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6176 #0 [265400ms] -> sendmsg$NL802154_CMD_SET_TX_POWER(0x4, 0x20000540, 0x0) #0 [265400ms] <- sendmsg$NL802154_CMD_SET_TX_POWER=0x14 errno=14 cover=1061 enabling collider #0 [265400ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [265401ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5390 2021/11/11 15:09:20 result hanged=false: 15:09:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600000000408000000000000003003e0001000000000000000000000040000000"], 0xa78) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [265428ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34214 #0 [265437ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [265438ms] <- openat=0x3 errno=14 cover=6725 #0 [265439ms] -> write$binfmt_elf64(0x3, 0x20000180, 0xa78) #0 [265439ms] <- write$binfmt_elf64=0xa78 errno=14 cover=2880 #0 [265439ms] -> close(0x3) #0 [265439ms] <- close=0x0 errno=14 cover=313 #0 [265439ms] -> clone3(0x200008c0, 0x58) #0 [265440ms] <- clone3=0xffffffffffffffff errno=11 cover=4722 #0 [265440ms] -> execveat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0, 0x0) #0 [265456ms] <- execveat=0xffffffffffffffff errno=8 cover=15712 enabling collider #0 [265458ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [265458ms] <- openat=0x3 errno=14 cover=1075 #0 [265459ms] -> write$binfmt_elf64(0x3, 0x20000180, 0xa78) #0 [265459ms] <- write$binfmt_elf64=0xa78 errno=14 cover=1355 pthread_create failed (errno 11) 15:09:20 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x14800, 0xf, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="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"/1408, 0x580, 0x8800}, {&(0x7f0000010c00)="ff43443030310100"/32, 0x20, 0x9000}, {&(0x7f0000010d00)="01001c0000000100000005001d000000010046494c4530000000000000000000", 0x20, 0xa000}, {&(0x7f0000010e00)="01000000001c0001000005000000001d000146494c4530000000000000000000", 0x20, 0xb000}, {&(0x7f0000010f00)="01001e000000010000000a001f000000010000660069006c0065003000000000", 0x20, 0xc000}, {&(0x7f0000011000)="01000000001e000100000a000000001f000100660069006c0065003000000000", 0x20, 0xd000}, {&(0x7f0000011100)="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", 0x380, 0xe000}, {&(0x7f0000011500)="66001d0000000000001d00080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080066001c0000000000001c00080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800860028000000000000281a0400000000041a7809140b2a3a08000000010000010846494c45302e3b310041410e0254455854756e6978000052520501894e4d0a010066696c6530505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800a800290000000000002900000000000000007809140b2a3a08000000010000010846494c45312e3b3100525205018d4e4d0a010066696c6531505824016da100000000a16d010000000000000100000000000000000000000000000000534c31010008000003746d70001573797a2d696d61676567656e393632343934303438000566696c6530000566696c653054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08000000000000", 0x200, 0xe800}, {&(0x7f0000011700)="22001e0000000000001e00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101013400210000000000002164000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c001f0000000000001f00080000000008007809140b2a3a08020000010000010a00660069006c00650030002c0022000000000000220a0000000000000a7809140b2a3a08000000010000010a00660069006c00650031002c00230000000000002328230000000023287809140b2a3a08000000010000010a00660069006c00650032002c00230000000000002328230000000023287809140b2a3a08000000010000010a00660069006c0065003300"/320, 0x140, 0xf000}, {&(0x7f0000011900)="22001f0000000000001f00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101012c0028000000000000281a0400000000041a7809140b2a3a08000000010000010a00660069006c00650030002c00290000000000002900000000000000007809140b2a3a08000000010000010a00660069006c006500310000000000", 0xa0, 0xf800}, {&(0x7f0000011a00)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0x10000}, {&(0x7f0000011b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x10800}, {&(0x7f0000011c00)='syzkallers\x00'/32, 0x20, 0x11000}, {&(0x7f0000011d00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x14000}], 0x0, &(0x7f0000012200)) 2021/11/11 15:09:20 result hanged=false: [265521ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34317 #0 [265532ms] -> syz_mount_image$iso9660(0x20000000, 0x20000100, 0x14800, 0xf, 0x20000200, 0x0, 0x20012200) syz_mount_image: size=83968 segs=15 loop='/dev/loop0' dir='./file0' fs='iso9660' flags=1 opts='' #0 [265542ms] <- syz_mount_image$iso9660=0x5 errno=0 cover=27186 enabling collider #0 [265546ms] -> syz_mount_image$iso9660(0x20000000, 0x20000100, 0x14800, 0xf, 0x20000200, 0x0, 0x20012200) #0 [265548ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=16 cover=18087 2021/11/11 15:09:20 result hanged=false: 15:09:20 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000080)) umount(./2093/file0) [265587ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34319 #0 [265596ms] -> timer_create(0x0, 0x0, 0x20000080) #0 [265597ms] <- timer_create=0x0 errno=14 cover=909 enabling collider #0 [265599ms] -> timer_create(0x0, 0x0, 0x20000080) #0 [265599ms] <- timer_create=0x0 errno=14 cover=229 2021/11/11 15:09:20 result hanged=false: 15:09:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x30}}, 0x0) [265629ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34321 #0 [265639ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [265643ms] <- socket$nl_generic=0x3 errno=14 cover=1531 #0 [265644ms] -> syz_genetlink_get_family_id$ethtool(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [265644ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=7820 #0 [265645ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [265645ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1686 #0 [265645ms] -> ioctl$sock_SIOCGIFINDEX(0x4, 0x8933, 0x20000140) #0 [265645ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [265645ms] -> sendmsg$ETHTOOL_MSG_FEATURES_SET(0x3, 0x20000000, 0x0) #0 [265646ms] <- sendmsg$ETHTOOL_MSG_FEATURES_SET=0x30 errno=14 cover=1927 enabling collider #0 [265647ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [265647ms] <- socket$nl_generic=0x3 errno=14 cover=1411 #0 [265648ms] -> syz_genetlink_get_family_id$ethtool(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [265652ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=7610 pthread_create failed (errno 11) 15:09:21 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) 2021/11/11 15:09:21 result hanged=false: [265712ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34423 #0 [265721ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [265721ms] <- socket$nl_generic=0x3 errno=14 cover=1401 #0 [265723ms] -> syz_genetlink_get_family_id$nl80211(0x20000a40, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [265724ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11689 #0 [265724ms] -> sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x20000b00, 0x0) #0 [265724ms] <- sendmsg$NL80211_CMD_GET_MPP=0xffffffffffffffff errno=9 cover=52 enabling collider #0 [265724ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [265725ms] <- socket$nl_generic=0x3 errno=14 cover=1411 #0 [265725ms] -> syz_genetlink_get_family_id$nl80211(0x20000a40, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [265728ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11401 pthread_create failed (errno 11) 15:09:21 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000200)=@ethtool_sfeatures={0x3b, 0x2, [{0x9, 0xfffffffd}, {}]}}) 2021/11/11 15:09:21 result hanged=false: [265795ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34525 #0 [265804ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [265804ms] <- socket$inet6_udplite=0x3 errno=14 cover=1635 #0 [265805ms] -> ioctl$sock_SIOCETHTOOL(0x3, 0x8946, 0x20000000) #0 [265805ms] <- ioctl$sock_SIOCETHTOOL=0x2 errno=14 cover=311 enabling collider #0 [265805ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [265806ms] <- socket$inet6_udplite=0x3 errno=14 cover=1637 2021/11/11 15:09:21 result hanged=false: 15:09:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) [265830ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 15:09:21 poll: candidates=8 inputs=0 signal=0 spawned worker pid 34527 #0 [265841ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [265842ms] <- socket$nl_generic=0x3 errno=14 cover=1513 #0 [265845ms] -> sendmsg$MPTCP_PM_CMD_SET_LIMITS(0x3, 0x20000140, 0x0) #0 [265845ms] <- sendmsg$MPTCP_PM_CMD_SET_LIMITS=0x0 errno=14 cover=956 #0 [265845ms] -> syz_genetlink_get_family_id$nl802154(0x200002c0, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [265849ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=18485 enabling collider #0 [265849ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [265850ms] <- socket$nl_generic=0x3 errno=14 cover=1556 #0 [265851ms] -> sendmsg$MPTCP_PM_CMD_SET_LIMITS(0x3, 0x20000140, 0x0) #0 [265851ms] <- sendmsg$MPTCP_PM_CMD_SET_LIMITS=0x0 errno=14 cover=978 pthread_create failed (errno 11) 15:09:21 executing program 0: waitid(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 2021/11/11 15:09:21 result hanged=false: [265915ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34629 #0 [265924ms] -> waitid(0x0, 0x0, 0x20000000, 0x0, 0x0) #0 [265924ms] <- waitid=0xffffffffffffffff errno=22 cover=741 #0 [265926ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) #0 [265927ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6523 enabling collider #0 [265928ms] -> waitid(0x0, 0x0, 0x20000000, 0x0, 0x0) #0 [265928ms] <- waitid=0xffffffffffffffff errno=22 cover=50 15:09:21 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) 2021/11/11 15:09:21 result hanged=false: [265951ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34631 #0 [265963ms] -> shmget$private(0x0, 0x2000, 0x0, 0x20ffe000) #0 [265963ms] <- shmget$private=0xa errno=14 cover=1108 #0 [265964ms] -> shmctl$IPC_RMID(0xa, 0x0) #0 [265964ms] <- shmctl$IPC_RMID=0x0 errno=14 cover=897 enabling collider #0 [265964ms] -> shmget$private(0x0, 0x2000, 0x0, 0x20ffe000) #0 [265965ms] <- shmget$private=0xb errno=14 cover=1064 15:09:21 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) 2021/11/11 15:09:21 result hanged=false: [265987ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34633 #0 [265997ms] -> syz_genetlink_get_family_id$batadv(0x20000340, 0xffffffffffffffff) syz_genetlink_get_family_id(batadv, -1) netlink: failed to get family id for batadv: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [266016ms] <- syz_genetlink_get_family_id$batadv=0xffffffffffffffff errno=2 cover=8154 enabling collider #0 [266018ms] -> syz_genetlink_get_family_id$batadv(0x20000340, 0xffffffffffffffff) syz_genetlink_get_family_id(batadv, -1) netlink: failed to get family id for batadv: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [266035ms] <- syz_genetlink_get_family_id$batadv=0xffffffffffffffff errno=2 cover=7707 15:09:21 executing program 0: syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0) 2021/11/11 15:09:21 result hanged=false: [266058ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34635 #0 [266070ms] -> syz_open_dev$mouse(0x20000040, 0x0, 0x0) #0 [266073ms] <- syz_open_dev$mouse=0xffffffffffffffff errno=2 cover=1465 enabling collider #0 [266074ms] -> syz_open_dev$mouse(0x20000040, 0x0, 0x0) #0 [266074ms] <- syz_open_dev$mouse=0xffffffffffffffff errno=2 cover=1475 15:09:21 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000040)=""/91, 0x5b) 2021/11/11 15:09:21 result hanged=false: [266099ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34637 #0 [266109ms] -> openat$sndtimer(0xffffffffffffff9c, 0x20000000, 0x0) #0 [266109ms] <- openat$sndtimer=0x3 errno=14 cover=1365 #0 [266111ms] -> read(0x3, 0x20000040, 0x5b) 2021/11/11 15:09:22 poll: candidates=0 inputs=0 signal=0 enabling collider pthread_create failed (errno 11) 2021/11/11 15:09:22 result hanged=false: 15:09:22 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000040)=""/91, 0x5b) 2021/11/11 15:09:22 #0: triaging type=7 2021/11/11 15:09:22 triaging input for call #1 read (new signal=2) [267280ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34739 #0 [267291ms] -> openat$sndtimer(0xffffffffffffff9c, 0x20000000, 0x0) #0 [267294ms] <- openat$sndtimer=0x3 errno=14 cover=1365 #0 [267296ms] -> read(0x3, 0x20000040, 0x5b) 15:09:23 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000040)=""/91, 0x5b) 2021/11/11 15:09:23 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [268424ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34741 #0 [268436ms] -> openat$sndtimer(0xffffffffffffff9c, 0x20000000, 0x0) #0 [268436ms] <- openat$sndtimer=0x3 errno=14 cover=1353 #0 [268437ms] -> read(0x3, 0x20000040, 0x5b) 15:09:24 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000040)=""/91, 0x5b) 2021/11/11 15:09:24 result hanged=false: [269561ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34743 #0 [269573ms] -> openat$sndtimer(0xffffffffffffff9c, 0x20000000, 0x0) #0 [269576ms] <- openat$sndtimer=0x3 errno=14 cover=1364 #0 [269577ms] -> read(0x3, 0x20000040, 0x5b) 2021/11/11 15:09:26 result hanged=false: 2021/11/11 15:09:26 added new input for call #1 read to corpus: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000040)=""/91, 0x5b) 15:09:26 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x800741, &(0x7f0000000000)) statfs(&(0x7f0000001c80)='./file0\x00', &(0x7f0000002e00)=""/255) [270702ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34745 #0 [270711ms] -> syz_mount_image$tmpfs(0x20000400, 0x20000080, 0x0, 0x0, 0x0, 0x800741, 0x20000000) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=8390465 opts='' #0 [270715ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=14424 #0 [270716ms] -> statfs(0x20001c80, 0x20002e00) #0 [270716ms] <- statfs=0x0 errno=14 cover=956 enabling collider #0 [270716ms] -> syz_mount_image$tmpfs(0x20000400, 0x20000080, 0x0, 0x0, 0x0, 0x800741, 0x20000000) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=8390465 opts='' #0 [270720ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=14753 2021/11/11 15:09:26 result hanged=false: 15:09:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000ac0), &(0x7f0000000b00)={'U+'}, 0x16, 0x0) umount(./2107/file0) umount(./2107/file0) [270753ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34747 #0 [270765ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [270765ms] <- socket$netlink=0x3 errno=14 cover=1417 #0 [270766ms] -> fsetxattr$trusted_overlay_nlink(0x3, 0x20000ac0, 0x20000b00, 0x16, 0x0) #0 [270766ms] <- fsetxattr$trusted_overlay_nlink=0xffffffffffffffff errno=95 cover=5444 enabling collider #0 [270767ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [270767ms] <- socket$netlink=0x3 errno=14 cover=1527 15:09:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 2021/11/11 15:09:26 result hanged=false: [270794ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 15:09:26 poll: candidates=8 inputs=0 signal=0 spawned worker pid 34749 #0 [270805ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [270808ms] <- socket$inet6_tcp=0x3 errno=14 cover=1733 #0 [270809ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [270809ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=375 #0 [270809ms] -> connect$inet6(0x3, 0x20000040, 0x1c) enabling collider pthread_create failed (errno 11) 2021/11/11 15:09:27 result hanged=false: 2021/11/11 15:09:27 #0: triaging type=7 2021/11/11 15:09:27 triaging input for call #2 connect$inet6 (new signal=14) 15:09:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) iptable filter/2: resetting iptable mangle/2: resetting [271978ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34851 #0 [271989ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [271990ms] <- socket$inet6_tcp=0x3 errno=14 cover=1733 #0 [271991ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [271991ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=232 #0 [271991ms] -> connect$inet6(0x3, 0x20000040, 0x1c) 2021/11/11 15:09:28 result hanged=false: 15:09:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) iptable filter/2: resetting iptable mangle/2: resetting [273122ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34853 #0 [273133ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [273133ms] <- socket$inet6_tcp=0x3 errno=14 cover=1730 #0 [273134ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [273135ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=232 #0 [273135ms] -> connect$inet6(0x3, 0x20000040, 0x1c) 2021/11/11 15:09:29 result hanged=false: 15:09:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) iptable filter/2: resetting iptable mangle/2: resetting [274264ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34855 #0 [274274ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [274277ms] <- socket$inet6_tcp=0x3 errno=14 cover=1722 #0 [274278ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [274278ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=232 #0 [274278ms] -> connect$inet6(0x3, 0x20000040, 0x1c) 2021/11/11 15:09:30 result hanged=false: 2021/11/11 15:09:30 added new input for call #2 connect$inet6 to corpus: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) iptable filter/2: resetting iptable mangle/2: resetting 15:09:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) [275412ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34857 #0 [275422ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [275424ms] <- socket$nl_generic=0x3 errno=14 cover=1466 #0 [275425ms] -> sendmsg$NL80211_CMD_JOIN_IBSS(0x3, 0x0, 0x0) #0 [275425ms] <- sendmsg$NL80211_CMD_JOIN_IBSS=0xffffffffffffffff errno=14 cover=431 #0 [275427ms] -> syz_genetlink_get_family_id$nl80211(0x20000800, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [275428ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11918 enabling collider #0 [275429ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [275430ms] <- socket$nl_generic=0x3 errno=14 cover=1534 #0 [275431ms] -> sendmsg$NL80211_CMD_JOIN_IBSS(0x3, 0x0, 0x0) #0 [275431ms] <- sendmsg$NL80211_CMD_JOIN_IBSS=0xffffffffffffffff errno=14 cover=432 pthread_create failed (errno 11) 15:09:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) 2021/11/11 15:09:30 result hanged=false: 2021/11/11 15:09:30 #0: triaging type=7 2021/11/11 15:09:30 triaging input for call #2 syz_genetlink_get_family_id$nl80211 (new signal=1) [275494ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34959 #0 [275504ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [275504ms] <- socket$nl_generic=0x3 errno=14 cover=1412 #0 [275505ms] -> sendmsg$NL80211_CMD_JOIN_IBSS(0x3, 0x0, 0x0) #0 [275505ms] <- sendmsg$NL80211_CMD_JOIN_IBSS=0xffffffffffffffff errno=14 cover=431 #0 [275505ms] -> syz_genetlink_get_family_id$nl80211(0x20000800, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [275506ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11713 15:09:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) 2021/11/11 15:09:30 result hanged=false: [275529ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34961 #0 [275540ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [275541ms] <- socket$nl_generic=0x3 errno=14 cover=1404 #0 [275541ms] -> sendmsg$NL80211_CMD_JOIN_IBSS(0x3, 0x0, 0x0) #0 [275541ms] <- sendmsg$NL80211_CMD_JOIN_IBSS=0xffffffffffffffff errno=14 cover=431 #0 [275542ms] -> syz_genetlink_get_family_id$nl80211(0x20000800, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [275543ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11680 15:09:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) 2021/11/11 15:09:30 result hanged=false: [275568ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34963 #0 [275579ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [275579ms] <- socket$nl_generic=0x3 errno=14 cover=1434 #0 [275581ms] -> sendmsg$NL80211_CMD_JOIN_IBSS(0x3, 0x0, 0x0) #0 [275581ms] <- sendmsg$NL80211_CMD_JOIN_IBSS=0xffffffffffffffff errno=14 cover=431 #0 [275582ms] -> syz_genetlink_get_family_id$nl80211(0x20000800, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [275584ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11769 2021/11/11 15:09:30 result hanged=false: 2021/11/11 15:09:30 added new input for call #2 syz_genetlink_get_family_id$nl80211 to corpus: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) 15:09:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') [275635ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 34965 #0 [275644ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [275645ms] <- perf_event_open=0x3 errno=14 cover=3985 #0 [275645ms] -> syz_mount_image$vfat(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [275647ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=12556 #0 [275647ms] -> chdir(0x20000040) #0 [275647ms] <- chdir=0x0 errno=14 cover=683 enabling collider #0 [275649ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [275649ms] <- perf_event_open=0x3 errno=14 cover=3838 #0 [275650ms] -> syz_mount_image$vfat(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [275652ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=11739 pthread_create failed (errno 11) 15:09:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}, @tfcpad={0x8, 0x16, 0x9}]}, 0x144}}, 0x0) 2021/11/11 15:09:31 result hanged=false: [275715ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35067 #0 [275725ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [275725ms] <- socket$nl_xfrm=0x3 errno=14 cover=1419 #0 [275727ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) #0 [275727ms] <- sendmsg$nl_xfrm=0x144 errno=14 cover=1528 enabling collider #0 [275732ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [275732ms] <- socket$nl_xfrm=0x3 errno=14 cover=1483 #0 [275733ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) #0 [275733ms] <- sendmsg$nl_xfrm=0xffffffffffffffff errno=9 cover=53 15:09:31 executing program 0: kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x8000000}], 0x0) 2021/11/11 15:09:31 result hanged=false: [275757ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35069 #0 [275766ms] -> kexec_load(0x0, 0x1, 0x200000c0, 0x0) #0 [275895ms] <- kexec_load=0x0 errno=14 cover=262143 enabling collider #0 [275900ms] -> kexec_load(0x0, 0x1, 0x200000c0, 0x0) #0 [276051ms] <- kexec_load=0x0 errno=14 cover=262143 2021/11/11 15:09:31 result hanged=false: 2021/11/11 15:09:31 #0: triaging type=7 2021/11/11 15:09:31 triaging input for call #0 kexec_load (new signal=1) 15:09:31 executing program 0: kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x8000000}], 0x0) [276075ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35071 #0 [276085ms] -> kexec_load(0x0, 0x1, 0x200000c0, 0x0) #0 [276231ms] <- kexec_load=0x0 errno=14 cover=262143 15:09:31 executing program 0: kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x8000000}], 0x0) 2021/11/11 15:09:31 result hanged=false: [276269ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35073 #0 [276280ms] -> kexec_load(0x0, 0x1, 0x200000c0, 0x0) #0 [276427ms] <- kexec_load=0x0 errno=14 cover=262143 15:09:31 executing program 0: kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x8000000}], 0x0) 2021/11/11 15:09:31 result hanged=false: [276465ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35075 #0 [276476ms] -> kexec_load(0x0, 0x1, 0x200000c0, 0x0) #0 [276624ms] <- kexec_load=0x0 errno=14 cover=262143 2021/11/11 15:09:31 result hanged=false: 2021/11/11 15:09:31 added new input for call #0 kexec_load to corpus: kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x8000000}], 0x0) 15:09:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140)) [276667ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35077 #0 [276678ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [276682ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=6199 #0 [276683ms] -> getsockopt$sock_buf(0x4, 0x1, 0x1c, 0x0, 0x20000140) #0 [276684ms] <- getsockopt$sock_buf=0xffffffffffffffff errno=107 cover=85 enabling collider #0 [276684ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [276685ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=5505 2021/11/11 15:09:32 result hanged=false: 15:09:32 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, 0x0, 0xfc, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0x80fe}, 0x80) [276711ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35079 #0 [276720ms] -> bind$bt_l2cap(0xffffffffffffffff, 0x20000140, 0xe) #0 [276720ms] <- bind$bt_l2cap=0xffffffffffffffff errno=9 cover=48 #0 [276720ms] -> socket$inet(0xa, 0x3, 0xff) #0 [276721ms] <- socket$inet=0x3 errno=14 cover=1741 #0 [276722ms] -> sendto(0x3, 0x0, 0xfc, 0x0, 0x20000140, 0x80) #0 [276722ms] <- sendto=0xffffffffffffffff errno=101 cover=1975 enabling collider #0 [276722ms] -> bind$bt_l2cap(0xffffffffffffffff, 0x20000140, 0xe) #0 [276722ms] <- bind$bt_l2cap=0xffffffffffffffff errno=9 cover=48 #0 [276723ms] -> socket$inet(0xa, 0x3, 0xff) #0 [276724ms] <- socket$inet=0x3 errno=14 cover=1855 pthread_create failed (errno 11) 15:09:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x53, 0xffffffffffffffff, 0x106, 0x0, @buffer={0x300, 0x99, &(0x7f00000000c0)=""/153}, &(0x7f00000003c0)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) 2021/11/11 15:09:32 result hanged=false: [276785ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35181 #0 [276793ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [276795ms] <- syz_open_dev$sg=0x3 errno=14 cover=1444 #0 [276795ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [276795ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [276795ms] -> ioctl$SG_IO(0x4, 0x2285, 0x20000340) #0 [276795ms] <- ioctl$SG_IO=0x0 errno=14 cover=852 enabling collider #0 [276796ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [276796ms] <- syz_open_dev$sg=0x3 errno=14 cover=1440 #0 [276796ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [276797ms] <- fcntl$dupfd=0x4 errno=14 cover=110 pthread_create failed (errno 11) 15:09:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x53, 0xffffffffffffffff, 0x106, 0x0, @buffer={0x300, 0x99, &(0x7f00000000c0)=""/153}, &(0x7f00000003c0)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) 2021/11/11 15:09:32 result hanged=false: 2021/11/11 15:09:32 #0: triaging type=7 2021/11/11 15:09:32 triaging input for call #0 syz_open_dev$sg (new signal=1) [276862ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35283 #0 [276873ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [276875ms] <- syz_open_dev$sg=0x3 errno=14 cover=1390 #0 [276877ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [276877ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [276877ms] -> ioctl$SG_IO(0x4, 0x2285, 0x20000340) #0 [276878ms] <- ioctl$SG_IO=0x0 errno=14 cover=833 15:09:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x53, 0xffffffffffffffff, 0x106, 0x0, @buffer={0x300, 0x99, &(0x7f00000000c0)=""/153}, &(0x7f00000003c0)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) 2021/11/11 15:09:32 result hanged=false: [276902ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35285 #0 [276913ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [276915ms] <- syz_open_dev$sg=0x3 errno=14 cover=1369 #0 [276916ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [276916ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [276916ms] -> ioctl$SG_IO(0x4, 0x2285, 0x20000340) #0 [276917ms] <- ioctl$SG_IO=0x0 errno=14 cover=809 15:09:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x53, 0xffffffffffffffff, 0x106, 0x0, @buffer={0x300, 0x99, &(0x7f00000000c0)=""/153}, &(0x7f00000003c0)="8f7b2bdc77686f23157fabec65c734595c17dea298c0b55765d83becbf20926a3eef47303a4fb62fa07a92a1ca1db494000ddeb19d40b4afec29adc55389a9af8811f29d51622a3aa3fbb3d340d5cf1c411b506cf854966094a62b0fb577bfee3352e0360ec27d5badd7ee75f3f3c2254c605d824c8dd9cf6dae1456ead1f86a2e9926a1654a1c0ef2d0c15b7cbbb0dbd74f1f72ff05fcefa0b19759b91de9157b167fe381467f5d2183662100316b28373f17502e6af0af766ebf9829cebaab752620a926a70de890a039fa2f6d66230c2475b71d9161eff42eb600adda25b6128418719a95b441c7e3c761ed503ddc0b6d12611bc9e35b04bd29cdccb26186c81ee3bf7690", 0x0, 0x0, 0x0, 0x0, 0x0}) 2021/11/11 15:09:32 result hanged=false: [276941ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35287 #0 [276954ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [276956ms] <- syz_open_dev$sg=0x3 errno=14 cover=1422 #0 [276957ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [276957ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [276957ms] -> ioctl$SG_IO(0x4, 0x2285, 0x20000340) #0 [276958ms] <- ioctl$SG_IO=0x0 errno=14 cover=833 2021/11/11 15:09:32 result hanged=false: 2021/11/11 15:09:32 added new input for call #0 syz_open_dev$sg to corpus: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x53, 0xffffffffffffffff, 0x106, 0x0, @buffer={0x300, 0x99, &(0x7f00000000c0)=""/153}, &(0x7f00000003c0)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) 15:09:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x3, 0x6, 0x3}, 0x14}}, 0x0) [276994ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35289 2021/11/11 15:09:32 poll: candidates=8 inputs=0 signal=0 #0 [277003ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [277003ms] <- socket$nl_netfilter=0x3 errno=14 cover=1441 #0 [277004ms] -> sendmsg$IPSET_CMD_DESTROY(0x3, 0x200007c0, 0x0) #0 [277021ms] <- sendmsg$IPSET_CMD_DESTROY=0x14 errno=14 cover=2310 enabling collider #0 [277021ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [277022ms] <- socket$nl_netfilter=0x3 errno=14 cover=1505 15:09:32 executing program 0: openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 2021/11/11 15:09:32 result hanged=false: [277046ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35291 #0 [277056ms] -> openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [277056ms] <- openat$bsg=0xffffffffffffffff errno=14 cover=627 #0 [277057ms] -> syz_genetlink_get_family_id$nl80211(0x20000140, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [277058ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11680 enabling collider #0 [277063ms] -> openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [277063ms] <- openat$bsg=0xffffffffffffffff errno=14 cover=616 #0 [277063ms] -> syz_genetlink_get_family_id$nl80211(0x20000140, 0xffffffffffffffff) 2021/11/11 15:09:32 result hanged=false: 15:09:32 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000f40), r1) creat(&(0x7f0000001040)='./file0\x00', 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}}, 0x0) syz_open_dev$vcsn(&(0x7f0000001400), 0x0, 0x0) creat(&(0x7f0000001440)='./file0\x00', 0x0) [277088ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35293 #0 [277097ms] -> openat$procfs(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [277098ms] <- openat$procfs=0x3 errno=14 cover=1446 #0 [277099ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [277099ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=6222 #0 [277102ms] -> ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0x3, 0xc080661a, 0x0) #0 [277102ms] <- ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS=0xffffffffffffffff errno=25 cover=103 #0 [277102ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [277102ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5440 #0 [277103ms] -> syz_genetlink_get_family_id$nl802154(0x20000f40, 0x5) syz_genetlink_get_family_id(nl802154, 5) #0 [277103ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=5057 #0 [277103ms] -> creat(0x20001040, 0x0) #0 [277104ms] <- creat=0x4 errno=14 cover=6683 #0 [277104ms] -> sendmsg$NLBL_MGMT_C_LISTALL(0x6, 0x20001380, 0x0) #0 [277104ms] <- sendmsg$NLBL_MGMT_C_LISTALL=0x0 errno=14 cover=1046 #0 [277105ms] -> syz_open_dev$vcsn(0x20001400, 0x0, 0x0) #0 [277105ms] <- syz_open_dev$vcsn=0x7 errno=14 cover=1080 #0 [277105ms] -> creat(0x20001440, 0x0) #0 [277105ms] <- creat=0x8 errno=14 cover=4944 enabling collider #0 [277106ms] -> openat$procfs(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [277106ms] <- openat$procfs=0x3 errno=14 cover=1496 #0 [277107ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [277107ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5501 pthread_create failed (errno 11) 15:09:32 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000001040)) io_setup(0x1, &(0x7f0000001180)) 2021/11/11 15:09:32 result hanged=false: [277174ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35395 #0 [277183ms] -> socketpair(0x0, 0x0, 0x0, 0x20001040) #0 [277203ms] <- socketpair=0xffffffffffffffff errno=97 cover=2386 #0 [277204ms] -> io_setup(0x1, 0x20001180) #0 [277204ms] <- io_setup=0x0 errno=14 cover=2486 enabling collider #0 [277205ms] -> socketpair(0x0, 0x0, 0x0, 0x20001040) #0 [277221ms] <- socketpair=0xffffffffffffffff errno=97 cover=1582 2021/11/11 15:09:32 result hanged=false: 15:09:32 executing program 0: r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$FITRIM(r0, 0xc020660b, &(0x7f0000000000)={0x0, 0xfffffffffffffffc, 0x6ce7}) [277254ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35397 #0 [277264ms] -> creat(0x20000040, 0x0) #0 [277267ms] <- creat=0x3 errno=14 cover=6796 #0 [277269ms] -> ioctl$FITRIM(0x3, 0xc020660b, 0x20000000) #0 [277269ms] <- ioctl$FITRIM=0xffffffffffffffff errno=53 cover=161 enabling collider #0 [277269ms] -> creat(0x20000040, 0x0) #0 [277269ms] <- creat=0x3 errno=14 cover=4933 2021/11/11 15:09:32 result hanged=false: 15:09:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bind$inet(r0, &(0x7f0000001740)={0x2, 0x4e21, @dev}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) [277296ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35399 #0 [277306ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [277309ms] <- socket$inet_tcp=0x3 errno=14 cover=6158 #0 [277310ms] -> setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) #0 [277310ms] <- setsockopt$inet_tcp_TCP_REPAIR=0xffffffffffffffff errno=9 cover=50 #0 [277312ms] -> bind$inet(0x3, 0x20001740, 0x10) #0 [277312ms] <- bind$inet=0x0 errno=14 cover=576 #0 [277314ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [277314ms] <- socket$inet6_tcp=0x4 errno=14 cover=1773 #0 [277315ms] -> bind$inet6(0x4, 0x200000c0, 0x1c) #0 [277315ms] <- bind$inet6=0x0 errno=14 cover=513 enabling collider #0 [277316ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [277317ms] <- socket$inet_tcp=0x3 errno=14 cover=1799 #0 [277318ms] -> setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) #0 [277318ms] <- setsockopt$inet_tcp_TCP_REPAIR=0xffffffffffffffff errno=9 cover=50 pthread_create failed (errno 11) 2021/11/11 15:09:32 result hanged=false: 15:09:32 executing program 0: syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) [277385ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35501 #0 [277395ms] -> syz_genetlink_get_family_id$nl802154(0x200007c0, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [277399ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=7568 enabling collider #0 [277400ms] -> syz_genetlink_get_family_id$nl802154(0x200007c0, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [277401ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=6990 2021/11/11 15:09:32 result hanged=false: 15:09:32 executing program 0: setregid(0xffffffffffffffff, 0xee01) r0 = getegid() stat(&(0x7f0000000580)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) setgid(r0) [277424ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35503 #0 [277435ms] -> setregid(0xffffffffffffffff, 0xee01) #0 [277436ms] <- setregid=0x0 errno=14 cover=367 #0 [277437ms] -> getegid() #0 [277437ms] <- getegid=0xee01 errno=14 cover=43 #0 [277441ms] -> stat(0x20000580, 0x20001c00) #0 [277441ms] <- stat=0x0 errno=14 cover=879 #0 [277441ms] -> setresuid(0xffffffffffffffff, 0x41ed, 0x0) #0 [277441ms] <- setresuid=0x0 errno=14 cover=465 #0 [277441ms] -> setgid(0xee01) #0 [277441ms] <- setgid=0x0 errno=14 cover=381 enabling collider #0 [277442ms] -> setregid(0xffffffffffffffff, 0xee01) #0 [277442ms] <- setregid=0x0 errno=14 cover=373 #0 [277442ms] -> getegid() #0 [277442ms] <- getegid=0xee01 errno=14 cover=43 pthread_create failed (errno 11) 2021/11/11 15:09:32 result hanged=false: 15:09:32 executing program 0: io_setup(0x9, &(0x7f0000000480)) 2021/11/11 15:09:32 poll: candidates=8 inputs=0 signal=0 [277510ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35605 #0 [277519ms] -> io_setup(0x9, 0x20000480) #0 [277520ms] <- io_setup=0x0 errno=14 cover=3442 enabling collider #0 [277521ms] -> io_setup(0x9, 0x20000480) #0 [277521ms] <- io_setup=0xffffffffffffffff errno=22 cover=40 15:09:32 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0xc, 0x0, &(0x7f0000001d80)) 2021/11/11 15:09:32 result hanged=false: [277573ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35607 #0 [277583ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [277584ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1752 #0 [277585ms] -> getsockopt$IP_SET_OP_VERSION(0x3, 0x1, 0xc, 0x0, 0x20001d80) #0 [277585ms] <- getsockopt$IP_SET_OP_VERSION=0x0 errno=14 cover=107 enabling collider #0 [277585ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [277586ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1720 15:09:32 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0xc, 0x0, &(0x7f0000001d80)) 2021/11/11 15:09:32 result hanged=false: 2021/11/11 15:09:32 #0: triaging type=7 2021/11/11 15:09:32 triaging input for call #0 socket$inet6_icmp_raw (new signal=2) [277609ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35609 #0 [277619ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [277621ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1676 #0 [277621ms] -> getsockopt$IP_SET_OP_VERSION(0x3, 0x1, 0xc, 0x0, 0x20001d80) #0 [277622ms] <- getsockopt$IP_SET_OP_VERSION=0x0 errno=14 cover=107 2021/11/11 15:09:32 result hanged=false: 15:09:32 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0xc, 0x0, &(0x7f0000001d80)) [277647ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35611 #0 [277657ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [277658ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1698 #0 [277659ms] -> getsockopt$IP_SET_OP_VERSION(0x3, 0x1, 0xc, 0x0, 0x20001d80) #0 [277659ms] <- getsockopt$IP_SET_OP_VERSION=0x0 errno=14 cover=107 15:09:33 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0xc, 0x0, &(0x7f0000001d80)) 2021/11/11 15:09:33 result hanged=false: [277686ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35613 #0 [277695ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [277695ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1745 #0 [277696ms] -> getsockopt$IP_SET_OP_VERSION(0x3, 0x1, 0xc, 0x0, 0x20001d80) #0 [277697ms] <- getsockopt$IP_SET_OP_VERSION=0x0 errno=14 cover=107 2021/11/11 15:09:33 result hanged=false: 2021/11/11 15:09:33 added new input for call #0 socket$inet6_icmp_raw to corpus: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0xc, 0x0, &(0x7f0000001d80)) 15:09:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {0x0, 0x0, 0x20000000006c00}], 0x0, &(0x7f0000014a00)) [277729ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35615 #0 [277737ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x7, 0x20000200, 0x0, 0x20014a00) syz_mount_image: size=0 segs=7 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 347.662146] EXT4-fs error (device loop0): ext4_quota_enable:6390: comm syz-executor.0: Bad quota inode # 3 [ 347.665275] EXT4-fs warning (device loop0): ext4_enable_quotas:6427: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 347.672093] EXT4-fs (loop0): mount failed syz_mount_image > mount error: 116 #0 [277766ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=116 cover=172944 enabling collider #0 [277772ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x7, 0x20000200, 0x0, 0x20014a00) #0 [277778ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=16 cover=9834 15:09:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {0x0, 0x0, 0x20000000006c00}], 0x0, &(0x7f0000014a00)) 2021/11/11 15:09:33 result hanged=false: 2021/11/11 15:09:33 #0: triaging type=7 2021/11/11 15:09:33 triaging input for call #0 syz_mount_image$ext4 (new signal=15) [277802ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35617 #0 [277812ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x7, 0x20000200, 0x0, 0x20014a00) syz_mount_image: size=0 segs=7 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 347.739206] EXT4-fs error (device loop0): ext4_quota_enable:6390: comm syz-executor.0: Bad quota inode # 3 [ 347.742452] EXT4-fs warning (device loop0): ext4_enable_quotas:6427: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 347.747274] EXT4-fs (loop0): mount failed syz_mount_image > mount error: 116 #0 [277841ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=116 cover=92830 2021/11/11 15:09:33 result hanged=false: 15:09:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {0x0, 0x0, 0x20000000006c00}], 0x0, &(0x7f0000014a00)) [277886ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35619 #0 [277895ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x7, 0x20000200, 0x0, 0x20014a00) syz_mount_image: size=0 segs=7 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 347.826857] EXT4-fs error (device loop0): ext4_quota_enable:6390: comm syz-executor.0: Bad quota inode # 3 [ 347.830113] EXT4-fs warning (device loop0): ext4_enable_quotas:6427: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 347.835243] EXT4-fs (loop0): mount failed syz_mount_image > mount error: 116 #0 [277927ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=116 cover=87735 2021/11/11 15:09:33 result hanged=false: 15:09:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {0x0, 0x0, 0x20000000006c00}], 0x0, &(0x7f0000014a00)) [277961ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35621 #0 [277971ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x7, 0x20000200, 0x0, 0x20014a00) syz_mount_image: size=0 segs=7 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 347.894635] EXT4-fs error (device loop0): ext4_quota_enable:6390: comm syz-executor.0: Bad quota inode # 3 [ 347.896985] EXT4-fs warning (device loop0): ext4_enable_quotas:6427: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 347.902573] EXT4-fs (loop0): mount failed syz_mount_image > mount error: 116 #0 [277997ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=116 cover=90772 2021/11/11 15:09:33 result hanged=false: 2021/11/11 15:09:33 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {0x0, 0x0, 0x20000000006c00}], 0x0, &(0x7f0000014a00)) 15:09:33 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x5, 0x0) [278116ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35623 #0 [278125ms] -> syz_mount_image$ext4(0x0, 0x20000300, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [278127ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12409 #0 [278129ms] -> mount(0x0, 0x20000000, 0x20000040, 0x0, 0x0) #0 [278129ms] <- mount=0x0 errno=14 cover=2109 #0 [278129ms] -> openat$dir(0xffffffffffffff9c, 0x200000c0, 0x0, 0x0) #0 [278130ms] <- openat$dir=0x3 errno=14 cover=1169 #0 [278131ms] -> dup(0x3) #0 [278131ms] <- dup=0x4 errno=14 cover=87 #0 [278131ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [278132ms] <- perf_event_open=0x5 errno=14 cover=4068 #0 [278132ms] -> lseek(0x4, 0x5, 0x0) #0 [278132ms] <- lseek=0x5 errno=14 cover=1886 enabling collider #0 [278133ms] -> syz_mount_image$ext4(0x0, 0x20000300, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [278134ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1393 #0 [278135ms] -> mount(0x0, 0x20000000, 0x20000040, 0x0, 0x0) #0 [278135ms] <- mount=0xffffffffffffffff errno=16 cover=2183 pthread_create failed (errno 11) umount(./2146/file0) 15:09:33 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x5, 0x0) 2021/11/11 15:09:33 result hanged=false: 2021/11/11 15:09:33 #0: triaging type=7 2021/11/11 15:09:33 triaging input for call #0 syz_mount_image$ext4 (new signal=2) [278199ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35725 #0 [278210ms] -> syz_mount_image$ext4(0x0, 0x20000300, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [278213ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12444 #0 [278215ms] -> mount(0x0, 0x20000000, 0x20000040, 0x0, 0x0) #0 [278217ms] <- mount=0x0 errno=14 cover=2137 #0 [278217ms] -> openat$dir(0xffffffffffffff9c, 0x200000c0, 0x0, 0x0) #0 [278217ms] <- openat$dir=0x3 errno=14 cover=1072 #0 [278218ms] -> dup(0x3) #0 [278218ms] <- dup=0x4 errno=14 cover=87 #0 [278218ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [278218ms] <- perf_event_open=0x5 errno=14 cover=4076 #0 [278219ms] -> lseek(0x4, 0x5, 0x0) #0 [278219ms] <- lseek=0x5 errno=14 cover=162 2021/11/11 15:09:33 result hanged=false: 15:09:33 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x5, 0x0) umount(./2147/file0) [278248ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35727 #0 [278258ms] -> syz_mount_image$ext4(0x0, 0x20000300, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [278260ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12158 #0 [278263ms] -> mount(0x0, 0x20000000, 0x20000040, 0x0, 0x0) #0 [278265ms] <- mount=0x0 errno=14 cover=9116 #0 [278270ms] -> openat$dir(0xffffffffffffff9c, 0x200000c0, 0x0, 0x0) #0 [278270ms] <- openat$dir=0x3 errno=14 cover=1126 #0 [278271ms] -> dup(0x3) #0 [278271ms] <- dup=0x4 errno=14 cover=87 #0 [278272ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [278273ms] <- perf_event_open=0x5 errno=14 cover=4188 #0 [278274ms] -> lseek(0x4, 0x5, 0x0) #0 [278274ms] <- lseek=0x5 errno=14 cover=162 umount(./2148/file0) 15:09:33 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x5, 0x0) 2021/11/11 15:09:33 result hanged=false: [278299ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35729 #0 [278309ms] -> syz_mount_image$ext4(0x0, 0x20000300, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [278310ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12816 #0 [278313ms] -> mount(0x0, 0x20000000, 0x20000040, 0x0, 0x0) #0 [278315ms] <- mount=0x0 errno=14 cover=10182 #0 [278316ms] -> openat$dir(0xffffffffffffff9c, 0x200000c0, 0x0, 0x0) #0 [278316ms] <- openat$dir=0x3 errno=14 cover=1083 #0 [278316ms] -> dup(0x3) #0 [278316ms] <- dup=0x4 errno=14 cover=87 #0 [278316ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [278317ms] <- perf_event_open=0x5 errno=14 cover=4145 #0 [278317ms] -> lseek(0x4, 0x5, 0x0) #0 [278317ms] <- lseek=0x5 errno=14 cover=162 umount(./2149/file0) 2021/11/11 15:09:33 result hanged=false: 2021/11/11 15:09:33 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x5, 0x0) 15:09:33 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000001b40)) [278361ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35731 #0 [278370ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [278371ms] <- perf_event_open=0x3 errno=14 cover=4286 #0 [278372ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [278372ms] <- socket$inet_tcp=0x4 errno=14 cover=1750 #0 [278372ms] -> getsockopt$inet_mreqn(0x4, 0x0, 0x20, 0x0, 0x20001b40) #0 [278372ms] <- getsockopt$inet_mreqn=0x0 errno=14 cover=151 enabling collider #0 [278373ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [278373ms] <- perf_event_open=0x3 errno=14 cover=3855 #0 [278374ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [278374ms] <- socket$inet_tcp=0x4 errno=14 cover=1727 pthread_create failed (errno 11) 15:09:33 executing program 0: getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 2021/11/11 15:09:33 result hanged=false: [278425ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35833 #0 [278435ms] -> getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x20000080) #0 [278435ms] <- getsockopt$IP_SET_OP_VERSION=0xffffffffffffffff errno=9 cover=49 #0 [278437ms] -> socketpair$nbd(0x1, 0x1, 0x0, 0x200000c0) #0 [278437ms] <- socketpair$nbd=0x0 errno=14 cover=2923 enabling collider #0 [278439ms] -> getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x20000080) #0 [278439ms] <- getsockopt$IP_SET_OP_VERSION=0xffffffffffffffff errno=9 cover=49 #0 [278442ms] -> socketpair$nbd(0x1, 0x12021/11/11 15:09:33 result hanged=false: 15:09:33 executing program 0: io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) [278463ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35835 #0 [278470ms] -> io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) #0 [278470ms] <- io_uring_register$IORING_REGISTER_EVENTFD=0xffffffffffffffff errno=9 cover=46 enabling collider #0 [278471ms] -> io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) #0 [278471ms] <- io_uring_register$IORING_REGISTER_EVENTFD=0xffffffffffffffff errno=9 cover=46 15:09:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x10018c6, &(0x7f0000000240)=ANY=[@ANYRES16]) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0xc8a, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r1, r0, 0x0, 0x7ffffff9) 2021/11/11 15:09:33 result hanged=false: [278489ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35837 #0 [278495ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [278496ms] <- openat=0x3 errno=14 cover=6706 #0 [278496ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [278496ms] <- socket$inet_udplite=0x4 errno=14 cover=1832 #0 [278496ms] -> syz_mount_image$iso9660(0x20000040, 0x20000080, 0x0, 0x0, 0x20000200, 0x10018c6, 0x20000240) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file1' fs='iso9660' flags=16783559 opts='ÿÿ' syz_mount_image > open error: 20 #0 [278498ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=20 cover=5201 #0 [278499ms] -> close(0x3) #0 [278499ms] <- close=0x0 errno=14 cover=304 #0 [278499ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [278499ms] <- openat=0x3 errno=14 cover=1086 #0 [278499ms] -> syz_mount_image$iso9660(0x20000000, 0x20000140, 0x0, 0xc8a, 0x20000200, 0x0, 0x20000240) #0 [278514ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=16 cover=262143 #0 [278515ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [278515ms] <- openat=0x5 errno=14 cover=1230 #0 [278515ms] -> sendfile(0x5, 0x3, 0x0, 0x7ffffff9) #0 [278516ms] <- sendfile=0x0 errno=14 cover=5011 enabling collider #0 [278516ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [278516ms] <- openat=0x3 errno=14 cover=1241 #0 [278517ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [278518ms] <- socket$inet_udplite=0x4 errno=14 cover=1800 pthread_create failed (errno 11) 2021/11/11 15:09:33 result hanged=false: 15:09:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x10018c6, &(0x7f0000000240)=ANY=[@ANYRES16]) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0xc8a, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r1, r0, 0x0, 0x7ffffff9) 2021/11/11 15:09:33 #0: triaging type=7 2021/11/11 15:09:33 triaging input for call #7 sendfile (new signal=2) umount(./2153/file1) [278576ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35939 #0 [278583ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [278584ms] <- openat=0x3 errno=14 cover=6687 #0 [278585ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [278585ms] <- socket$inet_udplite=0x4 errno=14 cover=1613 #0 [278585ms] -> syz_mount_image$iso9660(0x20000040, 0x20000080, 0x0, 0x0, 0x20000200, 0x10018c6, 0x20000240) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file1' fs='iso9660' flags=16783559 opts='ÿÿ' syz_mount_image > open error: 20 #0 [278597ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=20 cover=10841 #0 [278598ms] -> close(0x3) #0 [278598ms] <- close=0x0 errno=14 cover=304 #0 [278598ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [278598ms] <- openat=0x3 errno=14 cover=1173 #0 [278598ms] -> syz_mount_image$iso9660(0x20000000, 0x20000140, 0x0, 0xc8a, 0x20000200, 0x0, 0x20000240) syz_mount_image: size=0 segs=3210 loop='/dev/loop0' dir='./file0' fs='iso9660' flags=1 opts='ÿÿ' syz_mount_image > mount error: 22 #0 [278622ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=22 cover=22658 #0 [278623ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [278623ms] <- openat=0x5 errno=14 cover=1342 #0 [278624ms] -> sendfile(0x5, 0x3, 0x0, 0x7ffffff9) #0 [278627ms] <- sendfile=0x1fe00 errno=14 cover=33441 15:09:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x10018c6, &(0x7f0000000240)=ANY=[@ANYRES16]) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0xc8a, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r1, r0, 0x0, 0x7ffffff9) 2021/11/11 15:09:33 result hanged=false: umount(./2154/file1) [278658ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35941 #0 [278669ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [278671ms] <- openat=0x3 errno=14 cover=6771 #0 [278672ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [278673ms] <- socket$inet_udplite=0x4 errno=14 cover=1656 #0 [278673ms] -> syz_mount_image$iso9660(0x20000040, 0x20000080, 0x0, 0x0, 0x20000200, 0x10018c6, 0x20000240) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file1' fs='iso9660' flags=16783559 opts='ÿÿ' syz_mount_image > open error: 20 #0 [278677ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=20 cover=5720 #0 [278678ms] -> close(0x3) #0 [278678ms] <- close=0x0 errno=14 cover=304 #0 [278678ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [278679ms] <- openat=0x3 errno=14 cover=1254 #0 [278679ms] -> syz_mount_image$iso9660(0x20000000, 0x20000140, 0x0, 0xc8a, 0x20000200, 0x0, 0x20000240) #0 [278700ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=16 cover=262143 #0 [278720ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [278720ms] <- openat=0x5 errno=14 cover=1296 #0 [278721ms] -> sendfile(0x5, 0x3, 0x0, 0x7ffffff9) #0 [278721ms] <- sendfile=0x0 errno=14 cover=634 umount(./2155/file1) 15:09:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x10018c6, &(0x7f0000000240)=ANY=[@ANYRES16]) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0xc8a, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r1, r0, 0x0, 0x7ffffff9) 2021/11/11 15:09:34 result hanged=false: [278746ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35943 #0 [278758ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [278758ms] <- openat=0x3 errno=14 cover=6753 #0 [278764ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [278764ms] <- socket$inet_udplite=0x4 errno=14 cover=1700 #0 [278765ms] -> syz_mount_image$iso9660(0x20000040, 0x20000080, 0x0, 0x0, 0x20000200, 0x10018c6, 0x20000240) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file1' fs='iso9660' flags=16783559 opts='ÿÿ' syz_mount_image > open error: 20 #0 [278772ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=20 cover=11087 #0 [278775ms] -> close(0x3) #0 [278775ms] <- close=0x0 errno=14 cover=304 #0 [278778ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [278778ms] <- openat=0x3 errno=14 cover=1196 #0 [278778ms] -> syz_mount_image$iso9660(0x20000000, 0x20000140, 0x0, 0xc8a, 0x20000200, 0x0, 0x20000240) syz_mount_image: size=0 segs=3210 loop='/dev/loop0' dir='./file0' fs='iso9660' flags=1 opts='ÿÿ' syz_mount_image > mount error: 22 #0 [278805ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=22 cover=22405 #0 [278808ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [278809ms] <- openat=0x5 errno=14 cover=1276 #0 [278810ms] -> sendfile(0x5, 0x3, 0x0, 0x7ffffff9) #0 [278813ms] <- sendfile=0x1fe00 errno=14 cover=33471 2021/11/11 15:09:34 result hanged=false: 2021/11/11 15:09:34 added new input for call #7 sendfile to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x10018c6, &(0x7f0000000240)=ANY=[@ANYRES16]) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0xc8a, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r1, r0, 0x0, 0x7ffffff9) umount(./2156/file1) 2021/11/11 15:09:34 #0: triaging type=7 2021/11/11 15:09:34 triaging input for call #5 syz_mount_image$iso9660 (new signal=2) 15:09:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x10018c6, &(0x7f0000000240)=ANY=[@ANYRES16]) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0xc8a, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r1, r0, 0x0, 0x7ffffff9) [278856ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35945 #0 [278865ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [278866ms] <- openat=0x3 errno=14 cover=6751 #0 [278867ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [278867ms] <- socket$inet_udplite=0x4 errno=14 cover=1642 #0 [278867ms] -> syz_mount_image$iso9660(0x20000040, 0x20000080, 0x0, 0x0, 0x20000200, 0x10018c6, 0x20000240) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file1' fs='iso9660' flags=16783559 opts='ÿÿ' syz_mount_image > open error: 20 #0 [278878ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=20 cover=10820 #0 [278881ms] -> close(0x3) #0 [278881ms] <- close=0x0 errno=14 cover=304 #0 [278881ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [278882ms] <- openat=0x3 errno=14 cover=1176 #0 [278884ms] -> syz_mount_image$iso9660(0x20000000, 0x20000140, 0x0, 0xc8a, 0x20000200, 0x0, 0x20000240) syz_mount_image: size=0 segs=3210 loop='/dev/loop0' dir='./file0' fs='iso9660' flags=1 opts='ÿÿ' syz_mount_image > mount error: 22 #0 [278905ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=22 cover=22717 #0 [278907ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [278909ms] <- openat=0x5 errno=14 cover=1353 #0 [278909ms] -> sendfile(0x5, 0x3, 0x0, 0x7ffffff9) #0 [278911ms] <- sendfile=0x1fe00 errno=14 cover=32932 15:09:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x10018c6, &(0x7f0000000240)=ANY=[@ANYRES16]) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0xc8a, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r1, r0, 0x0, 0x7ffffff9) 2021/11/11 15:09:34 result hanged=false: umount(./2157/file1) [278954ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35947 #0 [278961ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [278964ms] <- openat=0x3 errno=14 cover=6906 #0 [278967ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [278968ms] <- socket$inet_udplite=0x4 errno=14 cover=1703 #0 [278969ms] -> syz_mount_image$iso9660(0x20000040, 0x20000080, 0x0, 0x0, 0x20000200, 0x10018c6, 0x20000240) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file1' fs='iso9660' flags=16783559 opts='ÿÿ' syz_mount_image > open error: 20 #0 [278973ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=20 cover=5227 #0 [278976ms] -> close(0x3) #0 [278976ms] <- close=0x0 errno=14 cover=304 #0 [278976ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [278977ms] <- openat=0x3 errno=14 cover=1212 #0 [278978ms] -> syz_mount_image$iso9660(0x20000000, 0x20000140, 0x0, 0xc8a, 0x20000200, 0x0, 0x20000240) 2021/11/11 15:09:34 poll: candidates=0 inputs=0 signal=0 #0 [279011ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=16 cover=262143 #0 [279037ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [279038ms] <- openat=0x5 errno=14 cover=1283 #0 [279039ms] -> sendfile(0x5, 0x3, 0x0, 0x7ffffff9) #0 [279039ms] <- sendfile=0x0 errno=14 cover=678 15:09:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x10018c6, &(0x7f0000000240)=ANY=[@ANYRES16]) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0xc8a, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r1, r0, 0x0, 0x7ffffff9) 2021/11/11 15:09:34 result hanged=false: umount(./2158/file1) [279065ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35949 #0 [279071ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [279072ms] <- openat=0x3 errno=14 cover=6717 #0 [279073ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [279073ms] <- socket$inet_udplite=0x4 errno=14 cover=1635 #0 [279074ms] -> syz_mount_image$iso9660(0x20000040, 0x20000080, 0x0, 0x0, 0x20000200, 0x10018c6, 0x20000240) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file1' fs='iso9660' flags=16783559 opts='ÿÿ' syz_mount_image > open error: 20 #0 [279080ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=20 cover=10772 #0 [279081ms] -> close(0x3) #0 [279081ms] <- close=0x0 errno=14 cover=304 #0 [279081ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [279081ms] <- openat=0x3 errno=14 cover=1261 #0 [279081ms] -> syz_mount_image$iso9660(0x20000000, 0x20000140, 0x0, 0xc8a, 0x20000200, 0x0, 0x20000240) syz_mount_image: size=0 segs=3210 loop='/dev/loop0' dir='./file0' fs='iso9660' flags=1 opts='ÿÿ' syz_mount_image > mount error: 22 #0 [279103ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=22 cover=22316 #0 [279105ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [279105ms] <- openat=0x5 errno=14 cover=1295 #0 [279106ms] -> sendfile(0x5, 0x3, 0x0, 0x7ffffff9) #0 [279108ms] <- sendfile=0x1fe00 errno=14 cover=32970 2021/11/11 15:09:34 result hanged=false: 2021/11/11 15:09:34 added new input for call #5 syz_mount_image$iso9660 to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x10018c6, &(0x7f0000000240)=ANY=[@ANYRES16]) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0xc8a, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r1, r0, 0x0, 0x7ffffff9) umount(./2159/file1) 2021/11/11 15:09:34 #0: triaging type=7 15:09:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x10018c6, &(0x7f0000000240)=ANY=[@ANYRES16]) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0xc8a, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r1, r0, 0x0, 0x7ffffff9) [279154ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 15:09:34 triaging input for call #2 syz_mount_image$iso9660 (new signal=4) spawned worker pid 35951 #0 [279161ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [279162ms] <- openat=0x3 errno=14 cover=6843 #0 [279167ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [279167ms] <- socket$inet_udplite=0x4 errno=14 cover=1678 #0 [279168ms] -> syz_mount_image$iso9660(0x20000040, 0x20000080, 0x0, 0x0, 0x20000200, 0x10018c6, 0x20000240) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file1' fs='iso9660' flags=16783559 opts='ÿÿ' syz_mount_image > open error: 20 #0 [279170ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=20 cover=5226 #0 [279173ms] -> close(0x3) #0 [279173ms] <- close=0x0 errno=14 cover=304 #0 [279174ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [279177ms] <- openat=0x3 errno=14 cover=1282 #0 [279178ms] -> syz_mount_image$iso9660(0x20000000, 0x20000140, 0x0, 0xc8a, 0x20000200, 0x0, 0x20000240) syz_mount_image: size=0 segs=3210 loop='/dev/loop0' dir='./file0' fs='iso9660' flags=1 opts='ÿÿ' syz_mount_image > mount error: 22 #0 [279206ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=22 cover=22972 #0 [279207ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [279207ms] <- openat=0x5 errno=14 cover=1300 #0 [279207ms] -> sendfile(0x5, 0x3, 0x0, 0x7ffffff9) #0 [279211ms] <- sendfile=0x1fe00 errno=14 cover=32692 umount(./2160/file1) 15:09:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x10018c6, &(0x7f0000000240)=ANY=[@ANYRES16]) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0xc8a, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r1, r0, 0x0, 0x7ffffff9) 2021/11/11 15:09:34 result hanged=false: [279238ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35953 #0 [279249ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [279251ms] <- openat=0x3 errno=14 cover=7409 #0 [279252ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [279253ms] <- socket$inet_udplite=0x4 errno=14 cover=1660 #0 [279254ms] -> syz_mount_image$iso9660(0x20000040, 0x20000080, 0x0, 0x0, 0x20000200, 0x10018c6, 0x20000240) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file1' fs='iso9660' flags=16783559 opts='ÿÿ' syz_mount_image > open error: 20 #0 [279263ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=20 cover=10908 #0 [279267ms] -> close(0x3) #0 [279267ms] <- close=0x0 errno=14 cover=304 #0 [279270ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [279270ms] <- openat=0x3 errno=14 cover=1190 #0 [279273ms] -> syz_mount_image$iso9660(0x20000000, 0x20000140, 0x0, 0xc8a, 0x20000200, 0x0, 0x20000240) syz_mount_image: size=0 segs=3210 loop='/dev/loop0' dir='./file0' fs='iso9660' flags=1 opts='ÿÿ' syz_mount_image > mount error: 22 #0 [279297ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=22 cover=22455 #0 [279300ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [279302ms] <- openat=0x5 errno=14 cover=1327 #0 [279303ms] -> sendfile(0x5, 0x3, 0x0, 0x7ffffff9) #0 [279307ms] <- sendfile=0x1fe00 errno=14 cover=31178 15:09:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x10018c6, &(0x7f0000000240)=ANY=[@ANYRES16]) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0xc8a, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r1, r0, 0x0, 0x7ffffff9) 2021/11/11 15:09:34 result hanged=false: umount(./2161/file1) [279340ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35955 #0 [279350ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [279351ms] <- openat=0x3 errno=14 cover=6718 #0 [279352ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [279353ms] <- socket$inet_udplite=0x4 errno=14 cover=1641 #0 [279354ms] -> syz_mount_image$iso9660(0x20000040, 0x20000080, 0x0, 0x0, 0x20000200, 0x10018c6, 0x20000240) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file1' fs='iso9660' flags=16783559 opts='ÿÿ' syz_mount_image > open error: 20 #0 [279358ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=20 cover=5347 #0 [279360ms] -> close(0x3) #0 [279360ms] <- close=0x0 errno=14 cover=304 #0 [279360ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [279361ms] <- openat=0x3 errno=14 cover=1192 #0 [279361ms] -> syz_mount_image$iso9660(0x20000000, 0x20000140, 0x0, 0xc8a, 0x20000200, 0x0, 0x20000240) #0 [279385ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=16 cover=262143 #0 [279403ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [279403ms] <- openat=0x5 errno=14 cover=1323 #0 [279404ms] -> sendfile(0x5, 0x3, 0x0, 0x7ffffff9) #0 [279404ms] <- sendfile=0x0 errno=14 cover=715 2021/11/11 15:09:34 result hanged=false: 2021/11/11 15:09:34 added new input for call #2 syz_mount_image$iso9660 to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x10018c6, &(0x7f0000000240)=ANY=[@ANYRES16]) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0xc8a, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r1, r0, 0x0, 0x7ffffff9) umount(./2162/file1) 15:09:34 executing program 0: futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000200), 0x4000000) [279446ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35957 2021/11/11 15:09:34 poll: candidates=8 inputs=0 signal=0 #0 [279459ms] -> futex(0x20000180, 0x5, 0x0, 0x0, 0x20000200, 0x4000000) #0 [279459ms] <- futex=0x0 errno=14 cover=300 enabling collider #0 [279460ms] -> futex(0x20000180, 0x5, 0x0, 0x0, 0x20000200, 0x4000000) #0 [279460ms] <- futex=0x0 errno=14 cover=300 15:09:34 executing program 0: syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), 0xffffffffffffffff) 2021/11/11 15:09:34 result hanged=false: [279484ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 35959 #0 [279495ms] -> syz_genetlink_get_family_id$SEG6(0x200005c0, 0xffffffffffffffff) syz_genetlink_get_family_id(SEG6, -1) #0 [279497ms] <- syz_genetlink_get_family_id$SEG6=0x1f errno=14 cover=7105 enabling collider #0 [279498ms] -> syz_genetlink_get_family_id$SEG6(0x200005c0, 0xffffffffffffffff) syz_genetlink_get_family_id(SEG6, -1) #0 [279499ms] <- syz_genetlink_get_family_id$SEG6=0x1f errno=14 cover=6646 15:09:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000004d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x5c, r3, 0x80b, 0x0, 0x800, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "9e0887706f"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "db3e31bc76a6bf23"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0xd, 0x4, "db87294e9ace3f5f36"}]}]}, 0x5c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = dup(r6) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = fcntl$dupfd(r7, 0x0, r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0b0800000000000800000c00000008000300", @ANYRES32=r10, @ANYBLOB="38005080090001009e0887706f0000000400050005000900010000000400060008000700010000000d000400db87294e9ace3f5f36000000"], 0x54}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000004cc0)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004c80)={&(0x7f0000004c40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012dbd7000fedbdf257900000008000300", @ANYRES32=r10, @ANYBLOB="0c0099001f000000660000000400f4002000f4000400f4000400f4000400f400"], 0x3c}, 0x1, 0x0, 0x0, 0x20004801}, 0x20000000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r11 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r12, r11, 0x0) [279520ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 15:09:34 result hanged=false: spawned worker pid 35961 #0 [279529ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [279530ms] <- socket$nl_generic=0x3 errno=14 cover=1448 #0 [279530ms] -> dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [279531ms] <- dup3=0xffffffffffffffff errno=22 cover=36 #0 [279531ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [279531ms] <- socket$nl_generic=0x4 errno=14 cover=1401 #0 [279531ms] -> dup(0x4) #0 [279531ms] <- dup=0x5 errno=14 cover=87 #0 [279531ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [279534ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11710 #0 [279534ms] -> fcntl$dupfd(0x5, 0x0, 0x5) #0 [279534ms] <- fcntl$dupfd=0x6 errno=14 cover=110 #0 [279534ms] -> ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x20004d00) #0 [279535ms] <- ioctl$sock_SIOCGIFINDEX_80211=0xffffffffffffffff errno=9 cover=45 #0 [279535ms] -> sendmsg$NL80211_CMD_DEL_KEY(0x6, 0x20000180, 0x0) #0 [279536ms] <- sendmsg$NL80211_CMD_DEL_KEY=0x5c errno=14 cover=1804 #0 [279536ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [279537ms] <- socket$nl_generic=0x7 errno=14 cover=1447 #0 [279537ms] -> dup(0x7) #0 [279537ms] <- dup=0x8 errno=14 cover=86 #0 [279537ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [279539ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11162 #0 [279539ms] -> fcntl$dupfd(0x8, 0x0, 0x8) #0 [279539ms] <- fcntl$dupfd=0x9 errno=14 cover=110 #0 [279540ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x8, 0x8933, 0x20000080) #0 [279540ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [279540ms] -> sendmsg$NL80211_CMD_DEL_KEY(0x9, 0x20000180, 0x0) #0 [279541ms] <- sendmsg$NL80211_CMD_DEL_KEY=0x54 errno=14 cover=2060 #0 [279541ms] -> sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x20004cc0, 0x20000000) #0 [279541ms] <- sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST=0xffffffffffffffff errno=9 cover=52 #0 [279541ms] -> setsockopt$SO_BINDTODEVICE(0x3, 0x1, 0x19, 0x0, 0x0) #0 [279542ms] <- setsockopt$SO_BINDTODEVICE=0x0 errno=14 cover=143 #0 [279542ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [279545ms] <- perf_event_open=0xa errno=14 cover=68948 #0 [279546ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000140) #0 [279547ms] <- syz_open_procfs=0xb errno=13 cover=9477 #0 [279548ms] -> dup3(0xb, 0xa, 0x0) #0 [279557ms] <- dup3=0xa errno=14 cover=2608 enabling collider #0 [279558ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [279559ms] <- socket$nl_generic=0x3 errno=14 cover=1392 #0 [279560ms] -> dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [279561ms] <- dup3=0xffffffffffffffff errno=22 cover=36 pthread_create failed (errno 11) 2021/11/11 15:09:34 result hanged=false: 2021/11/11 15:09:34 #0: triaging type=7 2021/11/11 15:09:34 triaging input for call #7 sendmsg$NL80211_CMD_DEL_KEY (new signal=1) 15:09:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000004d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x5c, r3, 0x80b, 0x0, 0x800, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "9e0887706f"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "db3e31bc76a6bf23"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0xd, 0x4, "db87294e9ace3f5f36"}]}]}, 0x5c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = dup(r6) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = fcntl$dupfd(r7, 0x0, r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0b0800000000000800000c00000008000300", @ANYRES32=r10, @ANYBLOB="38005080090001009e0887706f0000000400050005000900010000000400060008000700010000000d000400db87294e9ace3f5f36000000"], 0x54}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000004cc0)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004c80)={&(0x7f0000004c40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012dbd7000fedbdf257900000008000300", @ANYRES32=r10, @ANYBLOB="0c0099001f000000660000000400f4002000f4000400f4000400f4000400f400"], 0x3c}, 0x1, 0x0, 0x0, 0x20004801}, 0x20000000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r11 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r12, r11, 0x0) [279627ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36063 #0 [279639ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [279639ms] <- socket$nl_generic=0x3 errno=14 cover=1423 #0 [279639ms] -> dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [279640ms] <- dup3=0xffffffffffffffff errno=22 cover=36 #0 [279640ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [279641ms] <- socket$nl_generic=0x4 errno=14 cover=1437 #0 [279642ms] -> dup(0x4) #0 [279642ms] <- dup=0x5 errno=14 cover=87 #0 [279642ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [279644ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11692 #0 [279645ms] -> fcntl$dupfd(0x5, 0x0, 0x5) #0 [279646ms] <- fcntl$dupfd=0x6 errno=14 cover=110 #0 [279646ms] -> ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x20004d00) #0 [279646ms] <- ioctl$sock_SIOCGIFINDEX_80211=0xffffffffffffffff errno=9 cover=45 #0 [279646ms] -> sendmsg$NL80211_CMD_DEL_KEY(0x6, 0x20000180, 0x0) #0 [279646ms] <- sendmsg$NL80211_CMD_DEL_KEY=0x5c errno=14 cover=1787 #0 [279646ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [279646ms] <- socket$nl_generic=0x7 errno=14 cover=1575 #0 [279646ms] -> dup(0x7) #0 [279647ms] <- dup=0x8 errno=14 cover=86 #0 [279647ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [279647ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11199 #0 [279648ms] -> fcntl$dupfd(0x8, 0x0, 0x8) #0 [279648ms] <- fcntl$dupfd=0x9 errno=14 cover=110 #0 [279648ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x8, 0x8933, 0x20000080) #0 [279648ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [279648ms] -> sendmsg$NL80211_CMD_DEL_KEY(0x9, 0x20000180, 0x0) #0 [279648ms] <- sendmsg$NL80211_CMD_DEL_KEY=0x54 errno=14 cover=2012 #0 [279649ms] -> sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x20004cc0, 0x20000000) #0 [279649ms] <- sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST=0xffffffffffffffff errno=9 cover=52 #0 [279649ms] -> setsockopt$SO_BINDTODEVICE(0x3, 0x1, 0x19, 0x0, 0x0) #0 [279649ms] <- setsockopt$SO_BINDTODEVICE=0x0 errno=14 cover=143 #0 [279649ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [279651ms] <- perf_event_open=0xa errno=14 cover=77593 #0 [279654ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000140) #0 [279655ms] <- syz_open_procfs=0xb errno=13 cover=9311 #0 [279656ms] -> dup3(0xb, 0xa, 0x0) #0 [279665ms] <- dup3=0xa errno=14 cover=2924 15:09:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000004d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x5c, r3, 0x80b, 0x0, 0x800, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "9e0887706f"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "db3e31bc76a6bf23"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0xd, 0x4, "db87294e9ace3f5f36"}]}]}, 0x5c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = dup(r6) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = fcntl$dupfd(r7, 0x0, r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0b0800000000000800000c00000008000300", @ANYRES32=r10, @ANYBLOB="38005080090001009e0887706f0000000400050005000900010000000400060008000700010000000d000400db87294e9ace3f5f36000000"], 0x54}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000004cc0)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004c80)={&(0x7f0000004c40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012dbd7000fedbdf257900000008000300", @ANYRES32=r10, @ANYBLOB="0c0099001f000000660000000400f4002000f4000400f4000400f4000400f400"], 0x3c}, 0x1, 0x0, 0x0, 0x20004801}, 0x20000000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r11 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r12, r11, 0x0) 2021/11/11 15:09:35 result hanged=false: [279687ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36065 #0 [279696ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [279699ms] <- socket$nl_generic=0x3 errno=14 cover=1448 #0 [279699ms] -> dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [279699ms] <- dup3=0xffffffffffffffff errno=22 cover=36 #0 [279699ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [279700ms] <- socket$nl_generic=0x4 errno=14 cover=1390 #0 [279700ms] -> dup(0x4) #0 [279700ms] <- dup=0x5 errno=14 cover=87 #0 [279700ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [279701ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11709 #0 [279703ms] -> fcntl$dupfd(0x5, 0x0, 0x5) #0 [279703ms] <- fcntl$dupfd=0x6 errno=14 cover=110 #0 [279703ms] -> ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x20004d00) #0 [279703ms] <- ioctl$sock_SIOCGIFINDEX_80211=0xffffffffffffffff errno=9 cover=45 #0 [279703ms] -> sendmsg$NL80211_CMD_DEL_KEY(0x6, 0x20000180, 0x0) #0 [279703ms] <- sendmsg$NL80211_CMD_DEL_KEY=0x5c errno=14 cover=1789 #0 [279704ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [279705ms] <- socket$nl_generic=0x7 errno=14 cover=1520 #0 [279705ms] -> dup(0x7) #0 [279705ms] <- dup=0x8 errno=14 cover=86 #0 [279705ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [279706ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11130 #0 [279707ms] -> fcntl$dupfd(0x8, 0x0, 0x8) #0 [279708ms] <- fcntl$dupfd=0x9 errno=14 cover=110 #0 [279708ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x8, 0x8933, 0x20000080) #0 [279708ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [279708ms] -> sendmsg$NL80211_CMD_DEL_KEY(0x9, 0x20000180, 0x0) #0 [279708ms] <- sendmsg$NL80211_CMD_DEL_KEY=0x54 errno=14 cover=1989 #0 [279709ms] -> sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x20004cc0, 0x20000000) #0 [279709ms] <- sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST=0xffffffffffffffff errno=9 cover=52 #0 [279709ms] -> setsockopt$SO_BINDTODEVICE(0x3, 0x1, 0x19, 0x0, 0x0) #0 [279709ms] <- setsockopt$SO_BINDTODEVICE=0x0 errno=14 cover=143 #0 [279709ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [279711ms] <- perf_event_open=0xa errno=14 cover=69133 #0 [279713ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000140) #0 [279715ms] <- syz_open_procfs=0xb errno=13 cover=9184 #0 [279717ms] -> dup3(0xb, 0xa, 0x0) #0 [279735ms] <- dup3=0xa errno=14 cover=2537 15:09:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000004d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x5c, r3, 0x80b, 0x0, 0x800, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "9e0887706f"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "db3e31bc76a6bf23"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0xd, 0x4, "db87294e9ace3f5f36"}]}]}, 0x5c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = dup(r6) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = fcntl$dupfd(r7, 0x0, r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0b0800000000000800000c00000008000300", @ANYRES32=r10, @ANYBLOB="38005080090001009e0887706f0000000400050005000900010000000400060008000700010000000d000400db87294e9ace3f5f36000000"], 0x54}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000004cc0)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004c80)={&(0x7f0000004c40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012dbd7000fedbdf257900000008000300", @ANYRES32=r10, @ANYBLOB="0c0099001f000000660000000400f4002000f4000400f4000400f4000400f400"], 0x3c}, 0x1, 0x0, 0x0, 0x20004801}, 0x20000000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r11 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r12, r11, 0x0) 2021/11/11 15:09:35 result hanged=false: [279758ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36067 #0 [279769ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [279771ms] <- socket$nl_generic=0x3 errno=14 cover=1458 #0 [279771ms] -> dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [279771ms] <- dup3=0xffffffffffffffff errno=22 cover=36 #0 [279771ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [279772ms] <- socket$nl_generic=0x4 errno=14 cover=1445 #0 [279773ms] -> dup(0x4) #0 [279773ms] <- dup=0x5 errno=14 cover=87 #0 [279773ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [279776ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11783 #0 [279777ms] -> fcntl$dupfd(0x5, 0x0, 0x5) #0 [279778ms] <- fcntl$dupfd=0x6 errno=14 cover=110 #0 [279778ms] -> ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x20004d00) #0 [279778ms] <- ioctl$sock_SIOCGIFINDEX_80211=0xffffffffffffffff errno=9 cover=45 #0 [279778ms] -> sendmsg$NL80211_CMD_DEL_KEY(0x6, 0x20000180, 0x0) #0 [279779ms] <- sendmsg$NL80211_CMD_DEL_KEY=0x5c errno=14 cover=1787 #0 [279786ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [279786ms] <- socket$nl_generic=0x7 errno=14 cover=1465 #0 [279786ms] -> dup(0x7) #0 [279786ms] <- dup=0x8 errno=14 cover=86 #0 [279787ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [279787ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11143 #0 [279789ms] -> fcntl$dupfd(0x8, 0x0, 0x8) #0 [279789ms] <- fcntl$dupfd=0x9 errno=14 cover=110 #0 [279789ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x8, 0x8933, 0x20000080) #0 [279789ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [279789ms] -> sendmsg$NL80211_CMD_DEL_KEY(0x9, 0x20000180, 0x0) #0 [279790ms] <- sendmsg$NL80211_CMD_DEL_KEY=0x54 errno=14 cover=2015 #0 [279791ms] -> sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x20004cc0, 0x20000000) #0 [279791ms] <- sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST=0xffffffffffffffff errno=9 cover=52 #0 [279791ms] -> setsockopt$SO_BINDTODEVICE(0x3, 0x1, 0x19, 0x0, 0x0) #0 [279791ms] <- setsockopt$SO_BINDTODEVICE=0x0 errno=14 cover=143 #0 [279791ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [279793ms] <- perf_event_open=0xa errno=14 cover=70321 #0 [279796ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000140) #0 [279798ms] <- syz_open_procfs=0xb errno=13 cover=9373 #0 [279799ms] -> dup3(0xb, 0xa, 0x0) #0 [279822ms] <- dup3=0xa errno=14 cover=2583 2021/11/11 15:09:35 result hanged=false: 2021/11/11 15:09:35 added new input for call #7 sendmsg$NL80211_CMD_DEL_KEY to corpus: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000004d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x5c, r3, 0x80b, 0x0, 0x800, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "9e0887706f"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "db3e31bc76a6bf23"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0xd, 0x4, "db87294e9ace3f5f36"}]}]}, 0x5c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = dup(r6) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = fcntl$dupfd(r7, 0x0, r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0b0800000000000800000c00000008000300", @ANYRES32=r10, @ANYBLOB="38005080090001009e0887706f0000000400050005000900010000000400060008000700010000000d000400db87294e9ace3f5f36000000"], 0x54}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000004cc0)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004c80)={&(0x7f0000004c40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012dbd7000fedbdf257900000008000300", @ANYRES32=r10, @ANYBLOB="0c0099001f000000660000000400f4002000f4000400f4000400f4000400f400"], 0x3c}, 0x1, 0x0, 0x0, 0x20004801}, 0x20000000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r11 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r12, r11, 0x0) 15:09:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000004d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x5c, r3, 0x80b, 0x0, 0x800, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "9e0887706f"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "db3e31bc76a6bf23"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0xd, 0x4, "db87294e9ace3f5f36"}]}]}, 0x5c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = dup(r6) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = fcntl$dupfd(r7, 0x0, r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0b0800000000000800000c00000008000300", @ANYRES32=r10, @ANYBLOB="38005080090001009e0887706f0000000400050005000900010000000400060008000700010000000d000400db87294e9ace3f5f36000000"], 0x54}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000004cc0)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004c80)={&(0x7f0000004c40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012dbd7000fedbdf257900000008000300", @ANYRES32=r10, @ANYBLOB="0c0099001f000000660000000400f4002000f4000400f4000400f4000400f400"], 0x3c}, 0x1, 0x0, 0x0, 0x20004801}, 0x20000000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r11 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r12, r11, 0x0) [279847ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 15:09:35 #0: triaging type=7 2021/11/11 15:09:35 triaging input for call #4 syz_genetlink_get_family_id$nl80211 (new signal=1) spawned worker pid 36069 #0 [279858ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [279859ms] <- socket$nl_generic=0x3 errno=14 cover=1455 #0 [279860ms] -> dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [279860ms] <- dup3=0xffffffffffffffff errno=22 cover=36 #0 [279860ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [279861ms] <- socket$nl_generic=0x4 errno=14 cover=1448 #0 [279862ms] -> dup(0x4) #0 [279862ms] <- dup=0x5 errno=14 cover=87 #0 [279862ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [279863ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11734 #0 [279865ms] -> fcntl$dupfd(0x5, 0x0, 0x5) #0 [279865ms] <- fcntl$dupfd=0x6 errno=14 cover=110 #0 [279865ms] -> ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x20004d00) #0 [279865ms] <- ioctl$sock_SIOCGIFINDEX_80211=0xffffffffffffffff errno=9 cover=45 #0 [279865ms] -> sendmsg$NL80211_CMD_DEL_KEY(0x6, 0x20000180, 0x0) #0 [279866ms] <- sendmsg$NL80211_CMD_DEL_KEY=0x5c errno=14 cover=1767 #0 [279867ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [279868ms] <- socket$nl_generic=0x7 errno=14 cover=1414 #0 [279868ms] -> dup(0x7) #0 [279869ms] <- dup=0x8 errno=14 cover=86 #0 [279869ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [279871ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11296 #0 [279872ms] -> fcntl$dupfd(0x8, 0x0, 0x8) #0 [279872ms] <- fcntl$dupfd=0x9 errno=14 cover=110 #0 [279872ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x8, 0x8933, 0x20000080) #0 [279872ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [279872ms] -> sendmsg$NL80211_CMD_DEL_KEY(0x9, 0x20000180, 0x0) #0 [279872ms] <- sendmsg$NL80211_CMD_DEL_KEY=0x54 errno=14 cover=1987 #0 [279873ms] -> sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x20004cc0, 0x20000000) #0 [279873ms] <- sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST=0xffffffffffffffff errno=9 cover=52 #0 [279873ms] -> setsockopt$SO_BINDTODEVICE(0x3, 0x1, 0x19, 0x0, 0x0) #0 [279873ms] <- setsockopt$SO_BINDTODEVICE=0x0 errno=14 cover=143 #0 [279873ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [279875ms] <- perf_event_open=0xa errno=14 cover=68982 #0 [279878ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000140) #0 [279880ms] <- syz_open_procfs=0xb errno=13 cover=9343 #0 [279882ms] -> dup3(0xb, 0xa, 0x0) #0 [279894ms] <- dup3=0xa errno=14 cover=2226 15:09:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000004d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x5c, r3, 0x80b, 0x0, 0x800, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "9e0887706f"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "db3e31bc76a6bf23"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0xd, 0x4, "db87294e9ace3f5f36"}]}]}, 0x5c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = dup(r6) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = fcntl$dupfd(r7, 0x0, r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0b0800000000000800000c00000008000300", @ANYRES32=r10, @ANYBLOB="38005080090001009e0887706f0000000400050005000900010000000400060008000700010000000d000400db87294e9ace3f5f36000000"], 0x54}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000004cc0)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004c80)={&(0x7f0000004c40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012dbd7000fedbdf257900000008000300", @ANYRES32=r10, @ANYBLOB="0c0099001f000000660000000400f4002000f4000400f4000400f4000400f400"], 0x3c}, 0x1, 0x0, 0x0, 0x20004801}, 0x20000000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r11 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r12, r11, 0x0) 2021/11/11 15:09:35 result hanged=false: [279919ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36071 #0 [279930ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [279931ms] <- socket$nl_generic=0x3 errno=14 cover=1466 #0 [279931ms] -> dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [279931ms] <- dup3=0xffffffffffffffff errno=22 cover=36 #0 [279932ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [279933ms] <- socket$nl_generic=0x4 errno=14 cover=1451 #0 [279934ms] -> dup(0x4) #0 [279934ms] <- dup=0x5 errno=14 cover=87 #0 [279934ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [279936ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11726 #0 [279937ms] -> fcntl$dupfd(0x5, 0x0, 0x5) #0 [279938ms] <- fcntl$dupfd=0x6 errno=14 cover=124 #0 [279938ms] -> ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x20004d00) #0 [279938ms] <- ioctl$sock_SIOCGIFINDEX_80211=0xffffffffffffffff errno=9 cover=45 #0 [279939ms] -> sendmsg$NL80211_CMD_DEL_KEY(0x6, 0x20000180, 0x0) #0 [279939ms] <- sendmsg$NL80211_CMD_DEL_KEY=0x5c errno=14 cover=1782 #0 [279940ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [279941ms] <- socket$nl_generic=0x7 errno=14 cover=5467 #0 [279941ms] -> dup(0x7) #0 [279941ms] <- dup=0x8 errno=14 cover=86 #0 [279941ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [279943ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11310 #0 [279944ms] -> fcntl$dupfd(0x8, 0x0, 0x8) #0 [279944ms] <- fcntl$dupfd=0x9 errno=14 cover=110 #0 [279944ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x8, 0x8933, 0x20000080) #0 [279944ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [279945ms] -> sendmsg$NL80211_CMD_DEL_KEY(0x9, 0x20000180, 0x0) #0 [279946ms] <- sendmsg$NL80211_CMD_DEL_KEY=0x54 errno=14 cover=2021 #0 [279946ms] -> sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x20004cc0, 0x20000000) #0 [279947ms] <- sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST=0xffffffffffffffff errno=9 cover=52 #0 [279947ms] -> setsockopt$SO_BINDTODEVICE(0x3, 0x1, 0x19, 0x0, 0x0) #0 [279947ms] <- setsockopt$SO_BINDTODEVICE=0x0 errno=14 cover=143 #0 [279947ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [279949ms] <- perf_event_open=0xa errno=14 cover=68964 #0 [279952ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000140) #0 [279954ms] <- syz_open_procfs=0xb errno=13 cover=9255 #0 [279955ms] -> dup3(0xb, 0xa, 0x0) #0 [279976ms] <- dup3=0xa errno=14 cover=3065 15:09:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000004d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x5c, r3, 0x80b, 0x0, 0x800, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "9e0887706f"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "db3e31bc76a6bf23"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0xd, 0x4, "db87294e9ace3f5f36"}]}]}, 0x5c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = dup(r6) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = fcntl$dupfd(r7, 0x0, r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0b0800000000000800000c00000008000300", @ANYRES32=r10, @ANYBLOB="38005080090001009e0887706f0000000400050005000900010000000400060008000700010000000d000400db87294e9ace3f5f36000000"], 0x54}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000004cc0)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004c80)={&(0x7f0000004c40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012dbd7000fedbdf257900000008000300", @ANYRES32=r10, @ANYBLOB="0c0099001f000000660000000400f4002000f4000400f4000400f4000400f400"], 0x3c}, 0x1, 0x0, 0x0, 0x20004801}, 0x20000000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r11 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r12, r11, 0x0) 2021/11/11 15:09:35 result hanged=false: [279996ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36073 #0 [280008ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [280009ms] <- socket$nl_generic=0x3 errno=14 cover=1480 #0 [280010ms] -> dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [280010ms] <- dup3=0xffffffffffffffff errno=22 cover=36 #0 [280010ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [280011ms] <- socket$nl_generic=0x4 errno=14 cover=1470 #0 [280012ms] -> dup(0x4) #0 [280012ms] <- dup=0x5 errno=14 cover=87 #0 [280012ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [280014ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11777 #0 [280016ms] -> fcntl$dupfd(0x5, 0x0, 0x5) #0 [280016ms] <- fcntl$dupfd=0x6 errno=14 cover=110 #0 [280016ms] -> ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x20004d00) #0 [280016ms] <- ioctl$sock_SIOCGIFINDEX_80211=0xffffffffffffffff errno=9 cover=45 #0 [280016ms] -> sendmsg$NL80211_CMD_DEL_KEY(0x6, 0x20000180, 0x0) #0 [280017ms] <- sendmsg$NL80211_CMD_DEL_KEY=0x5c errno=14 cover=1826 #0 [280018ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [280019ms] <- socket$nl_generic=0x7 errno=14 cover=1461 #0 [280019ms] -> dup(0x7) #0 [280019ms] <- dup=0x8 errno=14 cover=86 #0 [280020ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [280021ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11273 #0 [280021ms] -> fcntl$dupfd(0x8, 0x0, 0x8) #0 [280022ms] <- fcntl$dupfd=0x9 errno=14 cover=110 #0 [280022ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x8, 0x8933, 0x20000080) #0 [280022ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [280022ms] -> sendmsg$NL80211_CMD_DEL_KEY(0x9, 0x20000180, 0x0) #0 [280023ms] <- sendmsg$NL80211_CMD_DEL_KEY=0x54 errno=14 cover=1976 #0 [280024ms] -> sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x20004cc0, 0x20000000) #0 [280024ms] <- sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST=0xffffffffffffffff errno=9 cover=52 #0 [280024ms] -> setsockopt$SO_BINDTODEVICE(0x3, 0x1, 0x19, 0x0, 0x0) #0 [280024ms] <- setsockopt$SO_BINDTODEVICE=0x0 errno=14 cover=143 #0 [280024ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [280026ms] <- perf_event_open=0xa errno=14 cover=69000 #0 [280029ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000140) #0 [280031ms] <- syz_open_procfs=0xb errno=13 cover=12538 #0 [280033ms] -> dup3(0xb, 0xa, 0x0) #0 [280049ms] <- dup3=0xa errno=14 cover=2458 2021/11/11 15:09:35 result hanged=false: 2021/11/11 15:09:35 added new input for call #4 syz_genetlink_get_family_id$nl80211 to corpus: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000004d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x5c, r3, 0x80b, 0x0, 0x800, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "9e0887706f"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "db3e31bc76a6bf23"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0xd, 0x4, "db87294e9ace3f5f36"}]}]}, 0x5c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = dup(r6) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = fcntl$dupfd(r7, 0x0, r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0b0800000000000800000c00000008000300", @ANYRES32=r10, @ANYBLOB="38005080090001009e0887706f0000000400050005000900010000000400060008000700010000000d000400db87294e9ace3f5f36000000"], 0x54}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000004cc0)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004c80)={&(0x7f0000004c40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012dbd7000fedbdf257900000008000300", @ANYRES32=r10, @ANYBLOB="0c0099001f000000660000000400f4002000f4000400f4000400f4000400f400"], 0x3c}, 0x1, 0x0, 0x0, 0x20004801}, 0x20000000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r11 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r12, r11, 0x0) 15:09:35 executing program 0: inotify_init() r0 = inotify_init() r1 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8948, &(0x7f0000000000)={'veth0_to_bridge\x00', @ifru_hwaddr=@remote}) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x3ff, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x801) ioctl$sock_ifreq(r2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) io_uring_setup(0x4552, &(0x7f0000000200)={0x0, 0x4b63, 0xd, 0x0, 0x27a}) inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x10000080) syz_open_dev$mouse(&(0x7f0000000300), 0x8425, 0x206000) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000340), 0x4) r3 = getpgrp(0xffffffffffffffff) syz_open_procfs$userns(r3, &(0x7f0000000380)) [280085ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36075 #0 [280092ms] -> inotify_init() #0 [280092ms] <- inotify_init=0x3 errno=14 cover=593 #0 [280093ms] -> inotify_init() #0 [280093ms] <- inotify_init=0x4 errno=14 cover=680 #0 [280094ms] -> inotify_init() #0 [280094ms] <- inotify_init=0x5 errno=14 cover=626 #0 [280094ms] -> ioctl$INOTIFY_IOC_SETNEXTWD(0x5, 0x40044900, 0x0) #0 [280095ms] <- ioctl$INOTIFY_IOC_SETNEXTWD=0xffffffffffffffff errno=25 cover=74 #0 [280095ms] -> ioctl$sock_ifreq(0xffffffffffffffff, 0x8948, 0x20000000) #0 [280097ms] <- ioctl$sock_ifreq=0xffffffffffffffff errno=9 cover=45 #0 [280101ms] -> syz_open_dev$mouse(0x20000040, 0x3ff, 0x0) #0 [280101ms] <- syz_open_dev$mouse=0xffffffffffffffff errno=2 cover=1631 #0 [280101ms] -> sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x801) #0 [280102ms] <- sendmsg$SEG6_CMD_SETHMAC=0xffffffffffffffff errno=9 cover=52 #0 [280102ms] -> ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) #0 [280102ms] <- ioctl$sock_ifreq=0xffffffffffffffff errno=9 cover=45 #0 [280104ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [280104ms] <- socket$inet6_udp=0x6 errno=14 cover=1794 #0 [280104ms] -> ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x200001c0) #0 [280104ms] <- ioctl$ifreq_SIOCGIFINDEX_team=0xffffffffffffffff errno=9 cover=45 #0 [280105ms] -> io_uring_setup(0x4552, 0x20000200) #0 [280105ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=4122 #0 [280106ms] -> inotify_init1(0x80000) #0 [280106ms] <- inotify_init1=0x7 errno=14 cover=624 #0 [280107ms] -> inotify_add_watch(0x4, 0x200002c0, 0x10000080) #0 [280107ms] <- inotify_add_watch=0xffffffffffffffff errno=2 cover=956 #0 [280108ms] -> syz_open_dev$mouse(0x20000300, 0x8425, 0x206000) #0 [280108ms] <- syz_open_dev$mouse=0xffffffffffffffff errno=2 cover=1422 #0 [280109ms] -> setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x20000340, 0x4) #0 [280109ms] <- setsockopt$WPAN_WANTLQI=0xffffffffffffffff errno=9 cover=50 #0 [280109ms] -> getpgrp(0xffffffffffffffff) #0 [280109ms] <- getpgrp=0x8ceb errno=14 cover=48 #0 [280109ms] -> syz_open_procfs$userns(0x8ceb, 0x20000380) #0 [280110ms] <- syz_open_procfs$userns=0xffffffffffffffff errno=2 cover=4966 enabling collider #0 [280111ms] -> inotify_init() #0 [280112ms] <- inotify_init=0x3 errno=14 cover=628 #0 [280112ms] -> inotify_init() #0 [280112ms] <- inotify_init=0x4 errno=14 cover=603 pthread_create failed (errno 11) 2021/11/11 15:09:35 result hanged=false: 15:09:35 executing program 0: inotify_init() r0 = inotify_init() r1 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8948, &(0x7f0000000000)={'veth0_to_bridge\x00', @ifru_hwaddr=@remote}) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x3ff, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x801) ioctl$sock_ifreq(r2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) io_uring_setup(0x4552, &(0x7f0000000200)={0x0, 0x4b63, 0xd, 0x0, 0x27a}) inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x10000080) syz_open_dev$mouse(&(0x7f0000000300), 0x8425, 0x206000) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000340), 0x4) r3 = getpgrp(0xffffffffffffffff) syz_open_procfs$userns(r3, &(0x7f0000000380)) 2021/11/11 15:09:35 #0: triaging type=7 2021/11/11 15:09:35 triaging input for call #16 syz_open_procfs$userns (new signal=2) [280171ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36177 #0 [280181ms] -> inotify_init() #0 [280182ms] <- inotify_init=0x3 errno=14 cover=582 #0 [280184ms] -> inotify_init() #0 [280185ms] <- inotify_init=0x4 errno=14 cover=618 #0 [280185ms] -> inotify_init() #0 [280185ms] <- inotify_init=0x5 errno=14 cover=593 #0 [280185ms] -> ioctl$INOTIFY_IOC_SETNEXTWD(0x5, 0x40044900, 0x0) #0 [280185ms] <- ioctl$INOTIFY_IOC_SETNEXTWD=0xffffffffffffffff errno=25 cover=74 #0 [280185ms] -> ioctl$sock_ifreq(0xffffffffffffffff, 0x8948, 0x20000000) #0 [280185ms] <- ioctl$sock_ifreq=0xffffffffffffffff errno=9 cover=45 #0 [280186ms] -> syz_open_dev$mouse(0x20000040, 0x3ff, 0x0) #0 [280186ms] <- syz_open_dev$mouse=0xffffffffffffffff errno=2 cover=1454 #0 [280186ms] -> sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x801) #0 [280187ms] <- sendmsg$SEG6_CMD_SETHMAC=0xffffffffffffffff errno=9 cover=52 #0 [280187ms] -> ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) #0 [280187ms] <- ioctl$sock_ifreq=0xffffffffffffffff errno=9 cover=45 #0 [280187ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [280188ms] <- socket$inet6_udp=0x6 errno=14 cover=1737 #0 [280188ms] -> ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x200001c0) #0 [280188ms] <- ioctl$ifreq_SIOCGIFINDEX_team=0xffffffffffffffff errno=9 cover=45 #0 [280189ms] -> io_uring_setup(0x4552, 0x20000200) #0 [280189ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=4133 #0 [280190ms] -> inotify_init1(0x80000) #0 [280190ms] <- inotify_init1=0x7 errno=14 cover=620 #0 [280191ms] -> inotify_add_watch(0x4, 0x200002c0, 0x10000080) #0 [280191ms] <- inotify_add_watch=0xffffffffffffffff errno=2 cover=960 #0 [280191ms] -> syz_open_dev$mouse(0x20000300, 0x8425, 0x206000) #0 [280191ms] <- syz_open_dev$mouse=0xffffffffffffffff errno=2 cover=1445 #0 [280192ms] -> setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x20000340, 0x4) #0 [280192ms] <- setsockopt$WPAN_WANTLQI=0xffffffffffffffff errno=9 cover=50 #0 [280192ms] -> getpgrp(0xffffffffffffffff) #0 [280193ms] <- getpgrp=0x8d51 errno=14 cover=62 #0 [280193ms] -> syz_open_procfs$userns(0x8d51, 0x20000380) #0 [280193ms] <- syz_open_procfs$userns=0xffffffffffffffff errno=2 cover=4932 15:09:35 executing program 0: inotify_init() r0 = inotify_init() r1 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8948, &(0x7f0000000000)={'veth0_to_bridge\x00', @ifru_hwaddr=@remote}) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x3ff, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x801) ioctl$sock_ifreq(r2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) io_uring_setup(0x4552, &(0x7f0000000200)={0x0, 0x4b63, 0xd, 0x0, 0x27a}) inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x10000080) syz_open_dev$mouse(&(0x7f0000000300), 0x8425, 0x206000) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000340), 0x4) r3 = getpgrp(0xffffffffffffffff) syz_open_procfs$userns(r3, &(0x7f0000000380)) 2021/11/11 15:09:35 result hanged=false: [280214ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36179 #0 [280222ms] -> inotify_init() #0 [280223ms] <- inotify_init=0x3 errno=14 cover=593 #0 [280223ms] -> inotify_init() #0 [280223ms] <- inotify_init=0x4 errno=14 cover=626 #0 [280223ms] -> inotify_init() #0 [280223ms] <- inotify_init=0x5 errno=14 cover=571 #0 [280223ms] -> ioctl$INOTIFY_IOC_SETNEXTWD(0x5, 0x40044900, 0x0) #0 [280223ms] <- ioctl$INOTIFY_IOC_SETNEXTWD=0xffffffffffffffff errno=25 cover=74 #0 [280223ms] -> ioctl$sock_ifreq(0xffffffffffffffff, 0x8948, 0x20000000) #0 [280224ms] <- ioctl$sock_ifreq=0xffffffffffffffff errno=9 cover=45 #0 [280224ms] -> syz_open_dev$mouse(0x20000040, 0x3ff, 0x0) #0 [280224ms] <- syz_open_dev$mouse=0xffffffffffffffff errno=2 cover=1453 #0 [280225ms] -> sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x801) #0 [280225ms] <- sendmsg$SEG6_CMD_SETHMAC=0xffffffffffffffff errno=9 cover=52 #0 [280225ms] -> ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) #0 [280225ms] <- ioctl$sock_ifreq=0xffffffffffffffff errno=9 cover=45 #0 [280225ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [280225ms] <- socket$inet6_udp=0x6 errno=14 cover=1661 #0 [280225ms] -> ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x200001c0) #0 [280225ms] <- ioctl$ifreq_SIOCGIFINDEX_team=0xffffffffffffffff errno=9 cover=45 #0 [280225ms] -> io_uring_setup(0x4552, 0x20000200) #0 [280226ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=4209 #0 [280227ms] -> inotify_init1(0x80000) #0 [280227ms] <- inotify_init1=0x7 errno=14 cover=570 #0 [280227ms] -> inotify_add_watch(0x4, 0x200002c0, 0x10000080) #0 [280227ms] <- inotify_add_watch=0xffffffffffffffff errno=2 cover=1003 #0 [280227ms] -> syz_open_dev$mouse(0x20000300, 0x8425, 0x206000) #0 [280227ms] <- syz_open_dev$mouse=0xffffffffffffffff errno=2 cover=1411 #0 [280227ms] -> setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x20000340, 0x4) #0 [280228ms] <- setsockopt$WPAN_WANTLQI=0xffffffffffffffff errno=9 cover=50 #0 [280228ms] -> getpgrp(0xffffffffffffffff) #0 [280228ms] <- getpgrp=0x8d53 errno=14 cover=48 #0 [280228ms] -> syz_open_procfs$userns(0x8d53, 0x20000380) #0 [280228ms] <- syz_open_procfs$userns=0xffffffffffffffff errno=2 cover=4991 15:09:35 executing program 0: inotify_init() r0 = inotify_init() r1 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8948, &(0x7f0000000000)={'veth0_to_bridge\x00', @ifru_hwaddr=@remote}) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x3ff, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x801) ioctl$sock_ifreq(r2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) io_uring_setup(0x4552, &(0x7f0000000200)={0x0, 0x4b63, 0xd, 0x0, 0x27a}) inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x10000080) syz_open_dev$mouse(&(0x7f0000000300), 0x8425, 0x206000) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000340), 0x4) r3 = getpgrp(0xffffffffffffffff) syz_open_procfs$userns(r3, &(0x7f0000000380)) 2021/11/11 15:09:35 result hanged=false: [280246ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36181 #0 [280257ms] -> inotify_init() #0 [280257ms] <- inotify_init=0x3 errno=14 cover=637 #0 [280262ms] -> inotify_init() #0 [280262ms] <- inotify_init=0x4 errno=14 cover=690 #0 [280262ms] -> inotify_init() #0 [280262ms] <- inotify_init=0x5 errno=14 cover=637 #0 [280262ms] -> ioctl$INOTIFY_IOC_SETNEXTWD(0x5, 0x40044900, 0x0) #0 [280263ms] <- ioctl$INOTIFY_IOC_SETNEXTWD=0xffffffffffffffff errno=25 cover=74 #0 [280264ms] -> ioctl$sock_ifreq(0xffffffffffffffff, 0x8948, 0x20000000) #0 [280264ms] <- ioctl$sock_ifreq=0xffffffffffffffff errno=9 cover=45 #0 [280264ms] -> syz_open_dev$mouse(0x20000040, 0x3ff, 0x0) #0 [280265ms] <- syz_open_dev$mouse=0xffffffffffffffff errno=2 cover=1508 #0 [280265ms] -> sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x801) #0 [280265ms] <- sendmsg$SEG6_CMD_SETHMAC=0xffffffffffffffff errno=9 cover=52 #0 [280266ms] -> ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) #0 [280267ms] <- ioctl$sock_ifreq=0xffffffffffffffff errno=9 cover=45 #0 [280267ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [280267ms] <- socket$inet6_udp=0x6 errno=14 cover=1683 #0 [280268ms] -> ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x200001c0) #0 [280268ms] <- ioctl$ifreq_SIOCGIFINDEX_team=0xffffffffffffffff errno=9 cover=45 #0 [280268ms] -> io_uring_setup(0x4552, 0x20000200) #0 [280269ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=4158 #0 [280273ms] -> inotify_init1(0x80000) #0 [280273ms] <- inotify_init1=0x7 errno=14 cover=658 #0 [280273ms] -> inotify_add_watch(0x4, 0x200002c0, 0x10000080) #0 [280273ms] <- inotify_add_watch=0xffffffffffffffff errno=2 cover=974 #0 [280273ms] -> syz_open_dev$mouse(0x20000300, 0x8425, 0x206000) #0 [280274ms] <- syz_open_dev$mouse=0xffffffffffffffff errno=2 cover=1512 #0 [280274ms] -> setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x20000340, 0x4) #0 [280274ms] <- setsockopt$WPAN_WANTLQI=0xffffffffffffffff errno=9 cover=50 #0 [280274ms] -> getpgrp(0xffffffffffffffff) #0 [280274ms] <- getpgrp=0x8d55 errno=14 cover=48 #0 [280274ms] -> syz_open_procfs$userns(0x8d55, 0x20000380) #0 [280275ms] <- syz_open_procfs$userns=0xffffffffffffffff errno=2 cover=5097 2021/11/11 15:09:35 result hanged=false: 2021/11/11 15:09:35 added new input for call #16 syz_open_procfs$userns to corpus: inotify_init() r0 = inotify_init() r1 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8948, &(0x7f0000000000)={'veth0_to_bridge\x00', @ifru_hwaddr=@remote}) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x3ff, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x801) ioctl$sock_ifreq(r2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) io_uring_setup(0x4552, &(0x7f0000000200)={0x0, 0x4b63, 0xd, 0x0, 0x27a}) inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x10000080) syz_open_dev$mouse(&(0x7f0000000300), 0x8425, 0x206000) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000340), 0x4) r3 = getpgrp(0xffffffffffffffff) syz_open_procfs$userns(r3, &(0x7f0000000380)) 15:09:35 executing program 0: syz_io_uring_setup(0x1fbf, &(0x7f0000000040), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) [280303ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36183 #0 [280312ms] -> syz_io_uring_setup(0x1fbf, 0x20000040, 0x20ffa000, 0x20ffa000, 0x200000c0, 0x20000100) #0 [280314ms] <- syz_io_uring_setup=0x3 errno=14 cover=10822 enabling collider #0 [280315ms] -> syz_io_uring_setup(0x1fbf, 0x20000040, 0x20ffa000, 0x20ffa000, 0x200000c0, 0x20000100) #0 [280317ms] <- syz_io_uring_setup=0x3 errno=14 cover=12058 15:09:35 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x9024, 0x0) 2021/11/11 15:09:35 result hanged=false: [280341ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36185 #0 [280350ms] -> syz_mount_image$tmpfs(0x20000080, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x20001740) syz_mount_image: size=0 segs=0 loop='' dir='./mnt' fs='tmpfs' flags=0 opts='' #0 [280358ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=14445 #0 [280360ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [280361ms] <- perf_event_open=0x4 errno=14 cover=3957 #0 [280362ms] -> mount$bind(0x0, 0x20000100, 0x0, 0x9024, 0x0) #0 [280362ms] <- mount$bind=0x0 errno=14 cover=702 enabling collider #0 [280362ms] -> syz_mount_image$tmpfs(0x20000080, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x20001740) syz_mount_image: size=0 segs=0 loop='' dir='./mnt' fs='tmpfs' flags=0 opts='' #0 [280365ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=14603 #0 [280366ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [280369ms] <- perf_event_open=0x4 errno=14 cover=3875 pthread_create failed (errno 11) 15:09:35 executing program 0: futimesat(0xffffffffffffffff, 0x0, &(0x7f00000007c0)) 2021/11/11 15:09:35 result hanged=false: umount(./2177/mnt) umount(./2177/mnt) [280424ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36287 #0 [280434ms] -> futimesat(0xffffffffffffffff, 0x0, 0x200007c0) #0 [280434ms] <- futimesat=0xffffffffffffffff errno=9 cover=71 enabling collider #0 [280436ms] -> futimesat(0xffffffffffffffff, 0x0, 0x200007c0) #0 [280436ms] <- futimesat=0xffffffffffffffff errno=9 cover=71 15:09:35 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = getpid() getpriority(0x2, 0x0) getpriority(0x1, 0x0) getpriority(0x2, 0x0) move_pages(0x0, 0x7, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000100)=[0x7fffffff, 0x4, 0x3, 0x6, 0x20, 0x0, 0x4], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x4000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x381000, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r3, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 2021/11/11 15:09:35 result hanged=false: [280459ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36289 #0 [280470ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000680) #0 [280471ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8425 #0 [280473ms] -> ioctl$NS_GET_OWNER_UID(0x3, 0xb704, 0x20000000) #0 [280473ms] <- ioctl$NS_GET_OWNER_UID=0xffffffffffffffff errno=22 cover=103 #0 [280475ms] -> ioctl$NS_GET_PARENT(0x3, 0xb702, 0x0) #0 [280475ms] <- ioctl$NS_GET_PARENT=0xffffffffffffffff errno=1 cover=152 #0 [280476ms] -> getpid() #0 [280476ms] <- getpid=0x8dc1 errno=14 cover=48 #0 [280476ms] -> getpriority(0x2, 0x0) #0 [280476ms] <- getpriority=0x14 errno=14 cover=2794 #0 [280476ms] -> getpriority(0x1, 0x0) #0 [280476ms] <- getpriority=0x14 errno=14 cover=50 #0 [280476ms] -> getpriority(0x2, 0x0) #0 [280477ms] <- getpriority=0x14 errno=14 cover=2808 #0 [280477ms] -> move_pages(0x0, 0x7, 0x200000c0, 0x20000100, 0x20000140, 0x2) #0 [280477ms] <- move_pages=0xffffffffffffffff errno=19 cover=1725 #0 [280477ms] -> syz_open_procfs$namespace(0x8dc1, 0x20000040) #0 [280477ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=4606 #0 [280478ms] -> creat(0x20000080, 0x0) #0 [280478ms] <- creat=0x4 errno=14 cover=6907 #0 [280478ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x200001c0, 0x4000) #0 [280478ms] <- newfstatat=0xffffffffffffffff errno=14 cover=599 #0 [280478ms] -> openat$rfkill(0xffffffffffffff9c, 0x20000240, 0x381000, 0x0) #0 [280479ms] <- openat$rfkill=0x5 errno=14 cover=934 #0 [280479ms] -> creat(0x20000080, 0x0) #0 [280479ms] <- creat=0x6 errno=14 cover=4988 #0 [280479ms] -> pwrite64(0x6, 0x20000300, 0xfffffeb2, 0x0) #0 [280935ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [280940ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [281095ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [281100ms] -> ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) #0 [281102ms] <- ioctl$TUNGETDEVNETNS=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [281153ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000680) #0 [281155ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=6531 #0 [281156ms] -> ioctl$NS_GET_OWNER_UID(0x3, 0xb704, 0x20000000) #0 [281157ms] <- ioctl$NS_GET_OWNER_UID=0xffffffffffffffff errno=22 cover=103 #0 [281157ms] -> ioctl$NS_GET_PARENT(0x3, 0xb702, 0x0) #0 [281158ms] <- ioctl$NS_GET_PARENT=0xffffffffffffffff errno=1 cover=152 #0 [281158ms] -> getpid() #0 [281158ms] <- getpid=0x8dc1 errno=14 cover=48 #0 [281158ms] -> getpriority(0x2, 0x0) #0 [281158ms] <- getpriority=0x14 errno=14 cover=2794 #0 [281158ms] -> getpriority(0x1, 0x0) #0 [281159ms] <- getpriority=0x14 errno=14 cover=50 #0 [281159ms] -> getpriority(0x2, 0x0) #0 [281159ms] <- getpriority=0x14 errno=14 cover=2794 #0 [281159ms] -> move_pages(0x0, 0x7, 0x200000c0, 0x20000100, 0x20000140, 0x2) #0 [281160ms] <- move_pages=0xffffffffffffffff errno=19 cover=132 #0 [281160ms] -> syz_open_procfs$namespace(0x8dc1, 0x20000040) #0 [281160ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=4462 #0 [281160ms] -> creat(0x20000080, 0x0) pthread_create failed (errno 11) 15:09:36 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = getpid() getpriority(0x2, 0x0) getpriority(0x1, 0x0) getpriority(0x2, 0x0) move_pages(0x0, 0x7, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000100)=[0x7fffffff, 0x4, 0x3, 0x6, 0x20, 0x0, 0x4], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x4000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x381000, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r3, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 2021/11/11 15:09:36 result hanged=false: 2021/11/11 15:09:36 #0: triaging type=7 2021/11/11 15:09:36 triaging input for call #14 pwrite64 (new signal=2) [281303ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36391 #0 [281313ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000680) #0 [281314ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8517 #0 [281315ms] -> ioctl$NS_GET_OWNER_UID(0x3, 0xb704, 0x20000000) #0 [281315ms] <- ioctl$NS_GET_OWNER_UID=0xffffffffffffffff errno=22 cover=103 #0 [281315ms] -> ioctl$NS_GET_PARENT(0x3, 0xb702, 0x0) #0 [281315ms] <- ioctl$NS_GET_PARENT=0xffffffffffffffff errno=1 cover=152 #0 [281315ms] -> getpid() #0 [281315ms] <- getpid=0x8e27 errno=14 cover=48 #0 [281315ms] -> getpriority(0x2, 0x0) #0 [281315ms] <- getpriority=0x14 errno=14 cover=2794 #0 [281315ms] -> getpriority(0x1, 0x0) #0 [281315ms] <- getpriority=0x14 errno=14 cover=50 #0 [281315ms] -> getpriority(0x2, 0x0) #0 [281316ms] <- getpriority=0x14 errno=14 cover=2794 #0 [281316ms] -> move_pages(0x0, 0x7, 0x200000c0, 0x20000100, 0x20000140, 0x2) #0 [281318ms] <- move_pages=0xffffffffffffffff errno=19 cover=421 #0 [281318ms] -> syz_open_procfs$namespace(0x8e27, 0x20000040) #0 [281318ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=4639 #0 [281319ms] -> creat(0x20000080, 0x0) #0 [281319ms] <- creat=0x4 errno=14 cover=6727 #0 [281320ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x200001c0, 0x4000) #0 [281320ms] <- newfstatat=0xffffffffffffffff errno=14 cover=609 #0 [281321ms] -> openat$rfkill(0xffffffffffffff9c, 0x20000240, 0x381000, 0x0) #0 [281321ms] <- openat$rfkill=0x5 errno=14 cover=898 #0 [281321ms] -> creat(0x20000080, 0x0) #0 [281322ms] <- creat=0x6 errno=14 cover=4991 #0 [281322ms] -> pwrite64(0x6, 0x20000300, 0xfffffeb2, 0x0) #0 [281686ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [281704ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [281848ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [281866ms] -> ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) #0 [281869ms] <- ioctl$TUNGETDEVNETNS=0xffffffffffffffff errno=9 cover=45 15:09:37 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = getpid() getpriority(0x2, 0x0) getpriority(0x1, 0x0) getpriority(0x2, 0x0) move_pages(0x0, 0x7, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000100)=[0x7fffffff, 0x4, 0x3, 0x6, 0x20, 0x0, 0x4], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x4000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x381000, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r3, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 2021/11/11 15:09:37 result hanged=false: [282065ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36393 #0 [282073ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000680) #0 [282074ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8495 #0 [282076ms] -> ioctl$NS_GET_OWNER_UID(0x3, 0xb704, 0x20000000) #0 [282076ms] <- ioctl$NS_GET_OWNER_UID=0xffffffffffffffff errno=22 cover=103 #0 [282076ms] -> ioctl$NS_GET_PARENT(0x3, 0xb702, 0x0) #0 [282076ms] <- ioctl$NS_GET_PARENT=0xffffffffffffffff errno=1 cover=152 #0 [282076ms] -> getpid() #0 [282076ms] <- getpid=0x8e29 errno=14 cover=48 #0 [282076ms] -> getpriority(0x2, 0x0) #0 [282077ms] <- getpriority=0x14 errno=14 cover=2808 #0 [282077ms] -> getpriority(0x1, 0x0) #0 [282077ms] <- getpriority=0x14 errno=14 cover=50 #0 [282077ms] -> getpriority(0x2, 0x0) #0 [282077ms] <- getpriority=0x14 errno=14 cover=2794 #0 [282077ms] -> move_pages(0x0, 0x7, 0x200000c0, 0x20000100, 0x20000140, 0x2) #0 [282078ms] <- move_pages=0xffffffffffffffff errno=19 cover=1165 #0 [282078ms] -> syz_open_procfs$namespace(0x8e29, 0x20000040) #0 [282078ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=4485 #0 [282079ms] -> creat(0x20000080, 0x0) #0 [282079ms] <- creat=0x4 errno=14 cover=6684 #0 [282080ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x200001c0, 0x4000) #0 [282080ms] <- newfstatat=0xffffffffffffffff errno=14 cover=599 #0 [282080ms] -> openat$rfkill(0xffffffffffffff9c, 0x20000240, 0x381000, 0x0) #0 [282080ms] <- openat$rfkill=0x5 errno=14 cover=899 #0 [282080ms] -> creat(0x20000080, 0x0) #0 [282080ms] <- creat=0x6 errno=14 cover=4967 #0 [282081ms] -> pwrite64(0x6, 0x20000300, 0xfffffeb2, 0x0) #0 [282428ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [282449ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [282580ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [282597ms] -> ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) #0 [282597ms] <- ioctl$TUNGETDEVNETNS=0xffffffffffffffff errno=9 cover=45 2021/11/11 15:09:37 result hanged=false: 15:09:37 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = getpid() getpriority(0x2, 0x0) getpriority(0x1, 0x0) getpriority(0x2, 0x0) move_pages(0x0, 0x7, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000100)=[0x7fffffff, 0x4, 0x3, 0x6, 0x20, 0x0, 0x4], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x4000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x381000, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r3, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) [282735ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36395 #0 [282742ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000680) #0 [282748ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8454 #0 [282755ms] -> ioctl$NS_GET_OWNER_UID(0x3, 0xb704, 0x20000000) #0 [282755ms] <- ioctl$NS_GET_OWNER_UID=0xffffffffffffffff errno=22 cover=103 #0 [282755ms] -> ioctl$NS_GET_PARENT(0x3, 0xb702, 0x0) #0 [282755ms] <- ioctl$NS_GET_PARENT=0xffffffffffffffff errno=1 cover=152 #0 [282755ms] -> getpid() #0 [282756ms] <- getpid=0x8e2b errno=14 cover=48 #0 [282756ms] -> getpriority(0x2, 0x0) #0 [282756ms] <- getpriority=0x14 errno=14 cover=2794 #0 [282756ms] -> getpriority(0x1, 0x0) #0 [282756ms] <- getpriority=0x14 errno=14 cover=50 #0 [282756ms] -> getpriority(0x2, 0x0) #0 [282756ms] <- getpriority=0x14 errno=14 cover=2794 #0 [282756ms] -> move_pages(0x0, 0x7, 0x200000c0, 0x20000100, 0x20000140, 0x2) #0 [282757ms] <- move_pages=0xffffffffffffffff errno=19 cover=285 #0 [282757ms] -> syz_open_procfs$namespace(0x8e2b, 0x20000040) #0 [282757ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=4430 #0 [282757ms] -> creat(0x20000080, 0x0) #0 [282758ms] <- creat=0x4 errno=14 cover=6765 #0 [282758ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x200001c0, 0x4000) #0 [282758ms] <- newfstatat=0xffffffffffffffff errno=14 cover=621 #0 [282758ms] -> openat$rfkill(0xffffffffffffff9c, 0x20000240, 0x381000, 0x0) #0 [282759ms] <- openat$rfkill=0x5 errno=14 cover=887 #0 [282759ms] -> creat(0x20000080, 0x0) #0 [282759ms] <- creat=0x6 errno=14 cover=4967 #0 [282759ms] -> pwrite64(0x6, 0x20000300, 0xfffffeb2, 0x0) #0 [283118ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [283137ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [283271ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [283288ms] -> ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) #0 [283288ms] <- ioctl$TUNGETDEVNETNS=0xffffffffffffffff errno=9 cover=45 2021/11/11 15:09:38 result hanged=false: 2021/11/11 15:09:38 added new input for call #14 pwrite64 to corpus: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = getpid() getpriority(0x2, 0x0) getpriority(0x1, 0x0) getpriority(0x2, 0x0) move_pages(0x0, 0x7, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000100)=[0x7fffffff, 0x4, 0x3, 0x6, 0x20, 0x0, 0x4], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x4000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x381000, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r3, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 2021/11/11 15:09:38 #0: triaging type=7 15:09:38 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = getpid() getpriority(0x2, 0x0) getpriority(0x1, 0x0) getpriority(0x2, 0x0) move_pages(0x0, 0x7, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000100)=[0x7fffffff, 0x4, 0x3, 0x6, 0x20, 0x0, 0x4], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x4000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x381000, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r3, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 2021/11/11 15:09:38 triaging input for call #13 pwrite64 (new signal=2) [283446ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36397 #0 [283459ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000680) #0 [283462ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8600 #0 [283463ms] -> ioctl$NS_GET_OWNER_UID(0x3, 0xb704, 0x20000000) #0 [283463ms] <- ioctl$NS_GET_OWNER_UID=0xffffffffffffffff errno=22 cover=103 #0 [283463ms] -> ioctl$NS_GET_PARENT(0x3, 0xb702, 0x0) #0 [283463ms] <- ioctl$NS_GET_PARENT=0xffffffffffffffff errno=1 cover=152 #0 [283464ms] -> getpid() #0 [283464ms] <- getpid=0x8e2d errno=14 cover=48 #0 [283464ms] -> getpriority(0x2, 0x0) #0 [283465ms] <- getpriority=0x14 errno=14 cover=2822 #0 [283465ms] -> getpriority(0x1, 0x0) #0 [283465ms] <- getpriority=0x14 errno=14 cover=50 #0 [283466ms] -> getpriority(0x2, 0x0) #0 [283466ms] <- getpriority=0x14 errno=14 cover=2808 #0 [283467ms] -> move_pages(0x0, 0x7, 0x200000c0, 0x20000100, 0x20000140, 0x2) #0 [283467ms] <- move_pages=0xffffffffffffffff errno=19 cover=539 #0 [283467ms] -> syz_open_procfs$namespace(0x8e2d, 0x20000040) #0 [283468ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=4489 #0 [283469ms] -> creat(0x20000080, 0x0) #0 [283470ms] <- creat=0x4 errno=14 cover=6722 #0 [283471ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x200001c0, 0x4000) #0 [283471ms] <- newfstatat=0xffffffffffffffff errno=14 cover=598 #0 [283471ms] -> openat$rfkill(0xffffffffffffff9c, 0x20000240, 0x381000, 0x0) #0 [283472ms] <- openat$rfkill=0x5 errno=14 cover=915 #0 [283473ms] -> creat(0x20000080, 0x0) #0 [283474ms] <- creat=0x6 errno=14 cover=4972 #0 [283474ms] -> pwrite64(0x6, 0x20000300, 0xfffffeb2, 0x0) #0 [283966ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [283991ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [284162ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [284182ms] -> ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) #0 [284182ms] <- ioctl$TUNGETDEVNETNS=0xffffffffffffffff errno=9 cover=45 2021/11/11 15:09:39 result hanged=false: 15:09:39 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = getpid() getpriority(0x2, 0x0) getpriority(0x1, 0x0) getpriority(0x2, 0x0) move_pages(0x0, 0x7, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000100)=[0x7fffffff, 0x4, 0x3, 0x6, 0x20, 0x0, 0x4], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x4000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x381000, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r3, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) [284358ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36399 #0 [284367ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000680) #0 [284370ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8478 #0 [284371ms] -> ioctl$NS_GET_OWNER_UID(0x3, 0xb704, 0x20000000) #0 [284371ms] <- ioctl$NS_GET_OWNER_UID=0xffffffffffffffff errno=22 cover=103 #0 [284371ms] -> ioctl$NS_GET_PARENT(0x3, 0xb702, 0x0) #0 [284372ms] <- ioctl$NS_GET_PARENT=0xffffffffffffffff errno=1 cover=152 #0 [284372ms] -> getpid() #0 [284372ms] <- getpid=0x8e2f errno=14 cover=48 #0 [284372ms] -> getpriority(0x2, 0x0) #0 [284372ms] <- getpriority=0x14 errno=14 cover=2794 #0 [284372ms] -> getpriority(0x1, 0x0) #0 [284372ms] <- getpriority=0x14 errno=14 cover=50 #0 [284372ms] -> getpriority(0x2, 0x0) #0 [284373ms] <- getpriority=0x14 errno=14 cover=2808 #0 [284373ms] -> move_pages(0x0, 0x7, 0x200000c0, 0x20000100, 0x20000140, 0x2) #0 [284373ms] <- move_pages=0xffffffffffffffff errno=19 cover=273 #0 [284373ms] -> syz_open_procfs$namespace(0x8e2f, 0x20000040) #0 [284374ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=4556 #0 [284374ms] -> creat(0x20000080, 0x0) #0 [284375ms] <- creat=0x4 errno=14 cover=6712 #0 [284376ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x200001c0, 0x4000) #0 [284376ms] <- newfstatat=0xffffffffffffffff errno=14 cover=599 #0 [284376ms] -> openat$rfkill(0xffffffffffffff9c, 0x20000240, 0x381000, 0x0) #0 [284376ms] <- openat$rfkill=0x5 errno=14 cover=932 #0 [284376ms] -> creat(0x20000080, 0x0) #0 [284377ms] <- creat=0x6 errno=14 cover=4959 #0 [284377ms] -> pwrite64(0x6, 0x20000300, 0xfffffeb2, 0x0) #0 [284854ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [284875ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [285049ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [285066ms] -> ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) #0 [285066ms] <- ioctl$TUNGETDEVNETNS=0xffffffffffffffff errno=9 cover=45 15:09:40 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = getpid() getpriority(0x2, 0x0) getpriority(0x1, 0x0) getpriority(0x2, 0x0) move_pages(0x0, 0x7, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000100)=[0x7fffffff, 0x4, 0x3, 0x6, 0x20, 0x0, 0x4], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x4000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x381000, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r3, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 2021/11/11 15:09:40 result hanged=false: [285245ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36401 #0 [285255ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000680) #0 [285257ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8574 #0 [285260ms] -> ioctl$NS_GET_OWNER_UID(0x3, 0xb704, 0x20000000) #0 [285260ms] <- ioctl$NS_GET_OWNER_UID=0xffffffffffffffff errno=22 cover=103 #0 [285262ms] -> ioctl$NS_GET_PARENT(0x3, 0xb702, 0x0) #0 [285262ms] <- ioctl$NS_GET_PARENT=0xffffffffffffffff errno=1 cover=152 #0 [285264ms] -> getpid() #0 [285264ms] <- getpid=0x8e31 errno=14 cover=48 #0 [285264ms] -> getpriority(0x2, 0x0) #0 [285265ms] <- getpriority=0x14 errno=14 cover=2808 #0 [285266ms] -> getpriority(0x1, 0x0) #0 [285266ms] <- getpriority=0x14 errno=14 cover=50 #0 [285270ms] -> getpriority(0x2, 0x0) #0 [285270ms] <- getpriority=0x14 errno=14 cover=2794 #0 [285270ms] -> move_pages(0x0, 0x7, 0x200000c0, 0x20000100, 0x20000140, 0x2) #0 [285270ms] <- move_pages=0xffffffffffffffff errno=19 cover=445 #0 [285271ms] -> syz_open_procfs$namespace(0x8e31, 0x20000040) #0 [285271ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=4560 #0 [285272ms] -> creat(0x20000080, 0x0) #0 [285273ms] <- creat=0x4 errno=14 cover=6984 #0 [285274ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x200001c0, 0x4000) #0 [285274ms] <- newfstatat=0xffffffffffffffff errno=14 cover=609 #0 [285275ms] -> openat$rfkill(0xffffffffffffff9c, 0x20000240, 0x381000, 0x0) #0 [285275ms] <- openat$rfkill=0x5 errno=14 cover=887 #0 [285275ms] -> creat(0x20000080, 0x0) #0 [285276ms] <- creat=0x6 errno=14 cover=4986 #0 [285276ms] -> pwrite64(0x6, 0x20000300, 0xfffffeb2, 0x0) #0 [285732ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [285753ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [285907ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [285927ms] -> ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) #0 [285927ms] <- ioctl$TUNGETDEVNETNS=0xffffffffffffffff errno=9 cover=45 2021/11/11 15:09:41 result hanged=false: 2021/11/11 15:09:41 added new input for call #13 pwrite64 to corpus: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = getpid() getpriority(0x2, 0x0) getpriority(0x1, 0x0) getpriority(0x2, 0x0) move_pages(0x0, 0x7, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000100)=[0x7fffffff, 0x4, 0x3, 0x6, 0x20, 0x0, 0x4], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x4000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x381000, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r3, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 15:09:41 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = getpid() getpriority(0x2, 0x0) getpriority(0x1, 0x0) getpriority(0x2, 0x0) move_pages(0x0, 0x7, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000100)=[0x7fffffff, 0x4, 0x3, 0x6, 0x20, 0x0, 0x4], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x4000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x381000, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r3, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 2021/11/11 15:09:41 #0: triaging type=7 2021/11/11 15:09:41 triaging input for call #6 getpriority (new signal=2) [286107ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36403 #0 [286117ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000680) #0 [286119ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8454 #0 [286120ms] -> ioctl$NS_GET_OWNER_UID(0x3, 0xb704, 0x20000000) #0 [286120ms] <- ioctl$NS_GET_OWNER_UID=0xffffffffffffffff errno=22 cover=103 #0 [286120ms] -> ioctl$NS_GET_PARENT(0x3, 0xb702, 0x0) #0 [286120ms] <- ioctl$NS_GET_PARENT=0xffffffffffffffff errno=1 cover=152 #0 [286120ms] -> getpid() #0 [286120ms] <- getpid=0x8e33 errno=14 cover=48 #0 [286120ms] -> getpriority(0x2, 0x0) #0 [286121ms] <- getpriority=0x14 errno=14 cover=2837 #0 [286121ms] -> getpriority(0x1, 0x0) #0 [286121ms] <- getpriority=0x14 errno=14 cover=50 #0 [286121ms] -> getpriority(0x2, 0x0) #0 [286121ms] <- getpriority=0x14 errno=14 cover=2794 #0 [286121ms] -> move_pages(0x0, 0x7, 0x200000c0, 0x20000100, 0x20000140, 0x2) #0 [286122ms] <- move_pages=0xffffffffffffffff errno=19 cover=536 #0 [286122ms] -> syz_open_procfs$namespace(0x8e33, 0x20000040) #0 [286122ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=4464 #0 [286123ms] -> creat(0x20000080, 0x0) #0 [286124ms] <- creat=0x4 errno=14 cover=6726 #0 [286124ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x200001c0, 0x4000) #0 [286124ms] <- newfstatat=0xffffffffffffffff errno=14 cover=609 #0 [286124ms] -> openat$rfkill(0xffffffffffffff9c, 0x20000240, 0x381000, 0x0) #0 [286125ms] <- openat$rfkill=0x5 errno=14 cover=908 #0 [286125ms] -> creat(0x20000080, 0x0) #0 [286126ms] <- creat=0x6 errno=14 cover=4976 #0 [286126ms] -> pwrite64(0x6, 0x20000300, 0xfffffeb2, 0x0) #0 [286490ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [286503ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [286677ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [286696ms] -> ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) #0 [286696ms] <- ioctl$TUNGETDEVNETNS=0xffffffffffffffff errno=9 cover=45 15:09:42 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = getpid() getpriority(0x2, 0x0) getpriority(0x1, 0x0) getpriority(0x2, 0x0) move_pages(0x0, 0x7, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000100)=[0x7fffffff, 0x4, 0x3, 0x6, 0x20, 0x0, 0x4], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x4000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x381000, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r3, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 2021/11/11 15:09:42 result hanged=false: [286836ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36405 #0 [286843ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000680) #0 [286852ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8421 #0 [286853ms] -> ioctl$NS_GET_OWNER_UID(0x3, 0xb704, 0x20000000) #0 [286853ms] <- ioctl$NS_GET_OWNER_UID=0xffffffffffffffff errno=22 cover=103 #0 [286853ms] -> ioctl$NS_GET_PARENT(0x3, 0xb702, 0x0) #0 [286853ms] <- ioctl$NS_GET_PARENT=0xffffffffffffffff errno=1 cover=152 #0 [286853ms] -> getpid() #0 [286853ms] <- getpid=0x8e35 errno=14 cover=48 #0 [286853ms] -> getpriority(0x2, 0x0) #0 [286854ms] <- getpriority=0x14 errno=14 cover=2810 #0 [286854ms] -> getpriority(0x1, 0x0) #0 [286854ms] <- getpriority=0x14 errno=14 cover=50 #0 [286854ms] -> getpriority(0x2, 0x0) #0 [286854ms] <- getpriority=0x14 errno=14 cover=2794 #0 [286859ms] -> move_pages(0x0, 0x7, 0x200000c0, 0x20000100, 0x20000140, 0x2) #0 [286859ms] <- move_pages=0xffffffffffffffff errno=19 cover=273 #0 [286860ms] -> syz_open_procfs$namespace(0x8e35, 0x20000040) #0 [286860ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=4462 #0 [286860ms] -> creat(0x20000080, 0x0) #0 [286861ms] <- creat=0x4 errno=14 cover=6714 #0 [286861ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x200001c0, 0x4000) #0 [286862ms] <- newfstatat=0xffffffffffffffff errno=14 cover=653 #0 [286862ms] -> openat$rfkill(0xffffffffffffff9c, 0x20000240, 0x381000, 0x0) #0 [286862ms] <- openat$rfkill=0x5 errno=14 cover=888 #0 [286862ms] -> creat(0x20000080, 0x0) #0 [286862ms] <- creat=0x6 errno=14 cover=4978 #0 [286863ms] -> pwrite64(0x6, 0x20000300, 0xfffffeb2, 0x0) #0 [287228ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [287246ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [287367ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [287379ms] -> ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) #0 [287379ms] <- ioctl$TUNGETDEVNETNS=0xffffffffffffffff errno=9 cover=45 15:09:42 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = getpid() getpriority(0x2, 0x0) getpriority(0x1, 0x0) getpriority(0x2, 0x0) move_pages(0x0, 0x7, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000100)=[0x7fffffff, 0x4, 0x3, 0x6, 0x20, 0x0, 0x4], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x4000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x381000, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r3, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 2021/11/11 15:09:42 result hanged=false: [287517ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36407 #0 [287523ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000680) #0 [287524ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8506 #0 [287527ms] -> ioctl$NS_GET_OWNER_UID(0x3, 0xb704, 0x20000000) #0 [287527ms] <- ioctl$NS_GET_OWNER_UID=0xffffffffffffffff errno=22 cover=103 #0 [287527ms] -> ioctl$NS_GET_PARENT(0x3, 0xb702, 0x0) #0 [287527ms] <- ioctl$NS_GET_PARENT=0xffffffffffffffff errno=1 cover=152 #0 [287527ms] -> getpid() #0 [287527ms] <- getpid=0x8e37 errno=14 cover=48 #0 [287527ms] -> getpriority(0x2, 0x0) #0 [287527ms] <- getpriority=0x14 errno=14 cover=2794 #0 [287527ms] -> getpriority(0x1, 0x0) #0 [287528ms] <- getpriority=0x14 errno=14 cover=50 #0 [287528ms] -> getpriority(0x2, 0x0) #0 [287528ms] <- getpriority=0x14 errno=14 cover=2794 #0 [287529ms] -> move_pages(0x0, 0x7, 0x200000c0, 0x20000100, 0x20000140, 0x2) #0 [287530ms] <- move_pages=0xffffffffffffffff errno=19 cover=421 #0 [287530ms] -> syz_open_procfs$namespace(0x8e37, 0x20000040) #0 [287531ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=4505 #0 [287531ms] -> creat(0x20000080, 0x0) #0 [287532ms] <- creat=0x4 errno=14 cover=6844 #0 [287533ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x200001c0, 0x4000) #0 [287534ms] <- newfstatat=0xffffffffffffffff errno=14 cover=609 #0 [287534ms] -> openat$rfkill(0xffffffffffffff9c, 0x20000240, 0x381000, 0x0) #0 [287534ms] <- openat$rfkill=0x5 errno=14 cover=876 #0 [287536ms] -> creat(0x20000080, 0x0) #0 [287536ms] <- creat=0x6 errno=14 cover=5020 #0 [287536ms] -> pwrite64(0x6, 0x20000300, 0xfffffeb2, 0x0) #0 [287813ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [287832ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [287928ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [287945ms] -> ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) #0 [287946ms] <- ioctl$TUNGETDEVNETNS=0xffffffffffffffff errno=9 cover=45 15:09:43 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = getpid() getpriority(0x2, 0x0) getpriority(0x1, 0x0) getpriority(0x2, 0x0) move_pages(0x0, 0x7, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000100)=[0x7fffffff, 0x4, 0x3, 0x6, 0x20, 0x0, 0x4], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x4000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x381000, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r3, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 2021/11/11 15:09:43 result hanged=false: 2021/11/11 15:09:43 #0: triaging type=7 2021/11/11 15:09:43 triaging input for call #2 ioctl$NS_GET_PARENT (new signal=10) iptable filter/10: resetting iptable mangle/10: resetting [288108ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36409 #0 [288114ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000680) #0 [288116ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8467 #0 [288125ms] -> ioctl$NS_GET_OWNER_UID(0x3, 0xb704, 0x20000000) #0 [288125ms] <- ioctl$NS_GET_OWNER_UID=0xffffffffffffffff errno=22 cover=103 #0 [288126ms] -> ioctl$NS_GET_PARENT(0x3, 0xb702, 0x0) #0 [288126ms] <- ioctl$NS_GET_PARENT=0xffffffffffffffff errno=1 cover=152 #0 [288127ms] -> getpid() #0 [288127ms] <- getpid=0x8e39 errno=14 cover=48 #0 [288127ms] -> getpriority(0x2, 0x0) #0 [288129ms] <- getpriority=0x14 errno=14 cover=2794 #0 [288129ms] -> getpriority(0x1, 0x0) #0 [288129ms] <- getpriority=0x14 errno=14 cover=50 #0 [288129ms] -> getpriority(0x2, 0x0) #0 [288130ms] <- getpriority=0x14 errno=14 cover=2808 #0 [288130ms] -> move_pages(0x0, 0x7, 0x200000c0, 0x20000100, 0x20000140, 0x2) #0 [288131ms] <- move_pages=0xffffffffffffffff errno=19 cover=482 #0 [288131ms] -> syz_open_procfs$namespace(0x8e39, 0x20000040) #0 [288131ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=4603 #0 [288132ms] -> creat(0x20000080, 0x0) #0 [288133ms] <- creat=0x4 errno=14 cover=6792 #0 [288133ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x200001c0, 0x4000) #0 [288133ms] <- newfstatat=0xffffffffffffffff errno=14 cover=609 #0 [288134ms] -> openat$rfkill(0xffffffffffffff9c, 0x20000240, 0x381000, 0x0) #0 [288134ms] <- openat$rfkill=0x5 errno=14 cover=886 #0 [288134ms] -> creat(0x20000080, 0x0) #0 [288135ms] <- creat=0x6 errno=14 cover=4969 #0 [288135ms] -> pwrite64(0x6, 0x20000300, 0xfffffeb2, 0x0) #0 [288611ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [288631ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [288797ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [288815ms] -> ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) #0 [288815ms] <- ioctl$TUNGETDEVNETNS=0xffffffffffffffff errno=9 cover=45 15:09:44 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = getpid() getpriority(0x2, 0x0) getpriority(0x1, 0x0) getpriority(0x2, 0x0) move_pages(0x0, 0x7, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000100)=[0x7fffffff, 0x4, 0x3, 0x6, 0x20, 0x0, 0x4], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x4000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x381000, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r3, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 2021/11/11 15:09:44 result hanged=false: [288980ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36411 #0 [289003ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000680) #0 [289007ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8450 #0 [289012ms] -> ioctl$NS_GET_OWNER_UID(0x3, 0xb704, 0x20000000) #0 [289012ms] <- ioctl$NS_GET_OWNER_UID=0xffffffffffffffff errno=22 cover=103 #0 [289012ms] -> ioctl$NS_GET_PARENT(0x3, 0xb702, 0x0) #0 [289012ms] <- ioctl$NS_GET_PARENT=0xffffffffffffffff errno=1 cover=152 #0 [289012ms] -> getpid() #0 [289012ms] <- getpid=0x8e3b errno=14 cover=48 #0 [289012ms] -> getpriority(0x2, 0x0) #0 [289012ms] <- getpriority=0x14 errno=14 cover=2794 #0 [289013ms] -> getpriority(0x1, 0x0) #0 [289013ms] <- getpriority=0x14 errno=14 cover=50 #0 [289013ms] -> getpriority(0x2, 0x0) #0 [289013ms] <- getpriority=0x14 errno=14 cover=2794 #0 [289013ms] -> move_pages(0x0, 0x7, 0x200000c0, 0x20000100, 0x20000140, 0x2) #0 [289014ms] <- move_pages=0xffffffffffffffff errno=19 cover=471 #0 [289015ms] -> syz_open_procfs$namespace(0x8e3b, 0x20000040) #0 [289015ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=4571 #0 [289016ms] -> creat(0x20000080, 0x0) #0 [289016ms] <- creat=0x4 errno=14 cover=6715 #0 [289017ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x200001c0, 0x4000) #0 [289017ms] <- newfstatat=0xffffffffffffffff errno=14 cover=608 #0 [289017ms] -> openat$rfkill(0xffffffffffffff9c, 0x20000240, 0x381000, 0x0) #0 [289017ms] <- openat$rfkill=0x5 errno=14 cover=887 #0 [289018ms] -> creat(0x20000080, 0x0) #0 [289018ms] <- creat=0x6 errno=14 cover=4944 #0 [289019ms] -> pwrite64(0x6, 0x20000300, 0xfffffeb2, 0x0) #0 [289488ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [289513ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [289686ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [289704ms] -> ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) #0 [289704ms] <- ioctl$TUNGETDEVNETNS=0xffffffffffffffff errno=9 cover=45 15:09:45 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = getpid() getpriority(0x2, 0x0) getpriority(0x1, 0x0) getpriority(0x2, 0x0) move_pages(0x0, 0x7, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000100)=[0x7fffffff, 0x4, 0x3, 0x6, 0x20, 0x0, 0x4], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x4000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x381000, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r3, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 2021/11/11 15:09:45 result hanged=false: [289870ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36413 #0 [289881ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000680) #0 [289882ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8446 #0 [289888ms] -> ioctl$NS_GET_OWNER_UID(0x3, 0xb704, 0x20000000) #0 [289888ms] <- ioctl$NS_GET_OWNER_UID=0xffffffffffffffff errno=22 cover=103 #0 [289888ms] -> ioctl$NS_GET_PARENT(0x3, 0xb702, 0x0) #0 [289888ms] <- ioctl$NS_GET_PARENT=0xffffffffffffffff errno=1 cover=152 #0 [289890ms] -> getpid() #0 [289890ms] <- getpid=0x8e3d errno=14 cover=48 #0 [289890ms] -> getpriority(0x2, 0x0) #0 [289890ms] <- getpriority=0x14 errno=14 cover=2794 #0 [289890ms] -> getpriority(0x1, 0x0) #0 [289890ms] <- getpriority=0x14 errno=14 cover=50 #0 [289890ms] -> getpriority(0x2, 0x0) #0 [289891ms] <- getpriority=0x14 errno=14 cover=2858 #0 [289891ms] -> move_pages(0x0, 0x7, 0x200000c0, 0x20000100, 0x20000140, 0x2) #0 [289891ms] <- move_pages=0xffffffffffffffff errno=19 cover=421 #0 [289892ms] -> syz_open_procfs$namespace(0x8e3d, 0x20000040) #0 [289892ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=4530 #0 [289893ms] -> creat(0x20000080, 0x0) #0 [289894ms] <- creat=0x4 errno=14 cover=6698 #0 [289896ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x200001c0, 0x4000) #0 [289897ms] <- newfstatat=0xffffffffffffffff errno=14 cover=598 #0 [289898ms] -> openat$rfkill(0xffffffffffffff9c, 0x20000240, 0x381000, 0x0) #0 [289898ms] <- openat$rfkill=0x5 errno=14 cover=888 #0 [289898ms] -> creat(0x20000080, 0x0) #0 [289899ms] <- creat=0x6 errno=14 cover=5024 #0 [289900ms] -> pwrite64(0x6, 0x20000300, 0xfffffeb2, 0x0) #0 [290342ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [290362ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [290553ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [290573ms] -> ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) #0 [290573ms] <- ioctl$TUNGETDEVNETNS=0xffffffffffffffff errno=9 cover=45 2021/11/11 15:09:45 result hanged=false: 2021/11/11 15:09:45 added new input for call #2 ioctl$NS_GET_PARENT to corpus: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = getpid() getpriority(0x2, 0x0) getpriority(0x1, 0x0) getpriority(0x2, 0x0) move_pages(0x0, 0x7, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000100)=[0x7fffffff, 0x4, 0x3, 0x6, 0x20, 0x0, 0x4], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x4000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x381000, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r3, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 2021/11/11 15:09:45 #0: triaging type=7 2021/11/11 15:09:45 triaging input for call #1 ioctl$NS_GET_OWNER_UID (new signal=2) 15:09:45 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = getpid() getpriority(0x2, 0x0) getpriority(0x1, 0x0) getpriority(0x2, 0x0) move_pages(0x0, 0x7, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000100)=[0x7fffffff, 0x4, 0x3, 0x6, 0x20, 0x0, 0x4], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x4000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x381000, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r3, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) [290750ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36415 #0 [290761ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000680) #0 [290763ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8482 #0 [290766ms] -> ioctl$NS_GET_OWNER_UID(0x3, 0xb704, 0x20000000) #0 [290769ms] <- ioctl$NS_GET_OWNER_UID=0xffffffffffffffff errno=22 cover=135 #0 [290769ms] -> ioctl$NS_GET_PARENT(0x3, 0xb702, 0x0) #0 [290770ms] <- ioctl$NS_GET_PARENT=0xffffffffffffffff errno=1 cover=152 #0 [290770ms] -> getpid() #0 [290770ms] <- getpid=0x8e3f errno=14 cover=48 #0 [290770ms] -> getpriority(0x2, 0x0) #0 [290771ms] <- getpriority=0x14 errno=14 cover=2844 #0 [290771ms] -> getpriority(0x1, 0x0) #0 [290771ms] <- getpriority=0x14 errno=14 cover=50 #0 [290771ms] -> getpriority(0x2, 0x0) #0 [290771ms] <- getpriority=0x14 errno=14 cover=2794 #0 [290772ms] -> move_pages(0x0, 0x7, 0x200000c0, 0x20000100, 0x20000140, 0x2) #0 [290772ms] <- move_pages=0xffffffffffffffff errno=19 cover=284 #0 [290773ms] -> syz_open_procfs$namespace(0x8e3f, 0x20000040) #0 [290773ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=4462 #0 [290774ms] -> creat(0x20000080, 0x0) #0 [290775ms] <- creat=0x4 errno=14 cover=6762 #0 [290776ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x200001c0, 0x4000) #0 [290778ms] <- newfstatat=0xffffffffffffffff errno=14 cover=2324 #0 [290778ms] -> openat$rfkill(0xffffffffffffff9c, 0x20000240, 0x381000, 0x0) #0 [290779ms] <- openat$rfkill=0x5 errno=14 cover=901 #0 [290779ms] -> creat(0x20000080, 0x0) #0 [290780ms] <- creat=0x6 errno=14 cover=4965 #0 [290781ms] -> pwrite64(0x6, 0x20000300, 0xfffffeb2, 0x0) 2021/11/11 15:09:46 poll: candidates=0 inputs=0 signal=0 #0 [291272ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [291293ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [291476ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [291494ms] -> ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) #0 [291494ms] <- ioctl$TUNGETDEVNETNS=0xffffffffffffffff errno=9 cover=45 2021/11/11 15:09:46 result hanged=false: 15:09:46 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = getpid() getpriority(0x2, 0x0) getpriority(0x1, 0x0) getpriority(0x2, 0x0) move_pages(0x0, 0x7, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000100)=[0x7fffffff, 0x4, 0x3, 0x6, 0x20, 0x0, 0x4], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x4000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x381000, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r3, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) [291664ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36417 #0 [291675ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000680) #0 [291676ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8582 #0 [291680ms] -> ioctl$NS_GET_OWNER_UID(0x3, 0xb704, 0x20000000) #0 [291680ms] <- ioctl$NS_GET_OWNER_UID=0xffffffffffffffff errno=22 cover=103 #0 [291681ms] -> ioctl$NS_GET_PARENT(0x3, 0xb702, 0x0) #0 [291681ms] <- ioctl$NS_GET_PARENT=0xffffffffffffffff errno=1 cover=152 #0 [291682ms] -> getpid() #0 [291682ms] <- getpid=0x8e41 errno=14 cover=48 #0 [291683ms] -> getpriority(0x2, 0x0) #0 [291683ms] <- getpriority=0x14 errno=14 cover=2794 #0 [291690ms] -> getpriority(0x1, 0x0) #0 [291690ms] <- getpriority=0x14 errno=14 cover=50 #0 [291690ms] -> getpriority(0x2, 0x0) #0 [291690ms] <- getpriority=0x14 errno=14 cover=2794 #0 [291691ms] -> move_pages(0x0, 0x7, 0x200000c0, 0x20000100, 0x20000140, 0x2) #0 [291692ms] <- move_pages=0xffffffffffffffff errno=19 cover=482 #0 [291693ms] -> syz_open_procfs$namespace(0x8e41, 0x20000040) #0 [291694ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=4714 #0 [291696ms] -> creat(0x20000080, 0x0) #0 [291696ms] <- creat=0x4 errno=14 cover=6723 #0 [291698ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x200001c0, 0x4000) #0 [291698ms] <- newfstatat=0xffffffffffffffff errno=14 cover=598 #0 [291699ms] -> openat$rfkill(0xffffffffffffff9c, 0x20000240, 0x381000, 0x0) #0 [291700ms] <- openat$rfkill=0x5 errno=14 cover=890 #0 [291700ms] -> creat(0x20000080, 0x0) #0 [291700ms] <- creat=0x6 errno=14 cover=4939 #0 [291701ms] -> pwrite64(0x6, 0x20000300, 0xfffffeb2, 0x0) #0 [292169ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [292192ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [292351ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [292371ms] -> ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) #0 [292374ms] <- ioctl$TUNGETDEVNETNS=0xffffffffffffffff errno=9 cover=45 15:09:47 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = getpid() getpriority(0x2, 0x0) getpriority(0x1, 0x0) getpriority(0x2, 0x0) move_pages(0x0, 0x7, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000100)=[0x7fffffff, 0x4, 0x3, 0x6, 0x20, 0x0, 0x4], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x4000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x381000, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r3, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 2021/11/11 15:09:47 result hanged=false: [292541ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36419 #0 [292552ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000680) #0 [292553ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8613 #0 [292555ms] -> ioctl$NS_GET_OWNER_UID(0x3, 0xb704, 0x20000000) #0 [292555ms] <- ioctl$NS_GET_OWNER_UID=0xffffffffffffffff errno=22 cover=103 #0 [292555ms] -> ioctl$NS_GET_PARENT(0x3, 0xb702, 0x0) #0 [292556ms] <- ioctl$NS_GET_PARENT=0xffffffffffffffff errno=1 cover=152 #0 [292556ms] -> getpid() #0 [292556ms] <- getpid=0x8e43 errno=14 cover=48 #0 [292556ms] -> getpriority(0x2, 0x0) #0 [292556ms] <- getpriority=0x14 errno=14 cover=2794 #0 [292556ms] -> getpriority(0x1, 0x0) #0 [292556ms] <- getpriority=0x14 errno=14 cover=50 #0 [292556ms] -> getpriority(0x2, 0x0) #0 [292557ms] <- getpriority=0x14 errno=14 cover=2808 #0 [292557ms] -> move_pages(0x0, 0x7, 0x200000c0, 0x20000100, 0x20000140, 0x2) #0 [292557ms] <- move_pages=0xffffffffffffffff errno=19 cover=550 #0 [292557ms] -> syz_open_procfs$namespace(0x8e43, 0x20000040) #0 [292558ms] <- syz_open_procfs$namespace=0xffffffffffffffff errno=2 cover=4540 #0 [292558ms] -> creat(0x20000080, 0x0) #0 [292559ms] <- creat=0x4 errno=14 cover=6708 #0 [292560ms] -> newfstatat(0xffffffffffffff9c, 0x0, 0x200001c0, 0x4000) #0 [292560ms] <- newfstatat=0xffffffffffffffff errno=14 cover=598 #0 [292560ms] -> openat$rfkill(0xffffffffffffff9c, 0x20000240, 0x381000, 0x0) #0 [292560ms] <- openat$rfkill=0x5 errno=14 cover=887 #0 [292560ms] -> creat(0x20000080, 0x0) #0 [292561ms] <- creat=0x6 errno=14 cover=4970 #0 [292561ms] -> pwrite64(0x6, 0x20000300, 0xfffffeb2, 0x0) #0 [292952ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [292972ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [293082ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [293104ms] -> ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) #0 [293105ms] <- ioctl$TUNGETDEVNETNS=0xffffffffffffffff errno=9 cover=45 2021/11/11 15:09:48 result hanged=false: 2021/11/11 15:09:48 added new input for call #1 ioctl$NS_GET_OWNER_UID to corpus: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = getpid() getpriority(0x2, 0x0) getpriority(0x1, 0x0) getpriority(0x2, 0x0) move_pages(0x0, 0x7, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000100)=[0x7fffffff, 0x4, 0x3, 0x6, 0x20, 0x0, 0x4], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x4000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x381000, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwrite64(r3, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 15:09:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8015}, 0xc040) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000003ac0)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}}, 0x0) r2 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000003bc0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0x701, &(0x7f0000003e80)={0x0, 0x0, 0x0, 0x1, 0x1a9}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000003f00)=0x0, &(0x7f0000003f40)) sendmsg$AUDIT_DEL_RULE(r2, 0x0, 0x80) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x8000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f0000004a00)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x40}, 0x401) 2021/11/11 15:09:48 poll: candidates=8 inputs=0 signal=0 [293257ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36421 #0 [293264ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [293266ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6268 #0 [293267ms] -> sendmsg$NLBL_CIPSOV4_C_ADD(0x4, 0x200003c0, 0xc040) #0 [293270ms] <- sendmsg$NLBL_CIPSOV4_C_ADD=0x14 errno=14 cover=1167 #0 [293270ms] -> openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [293270ms] <- openat$vcsa=0xffffffffffffffff errno=14 cover=627 #0 [293270ms] -> sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x20003b40, 0x0) #0 [293270ms] <- sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS=0xffffffffffffffff errno=9 cover=52 #0 [293270ms] -> syz_io_uring_complete(0x0) SIGSEGV on 0x80, skipping #0 [293270ms] <- syz_io_uring_complete=0xffffffffffffffff errno=14 cover=1002 #0 [293271ms] -> syz_genetlink_get_family_id$tipc2(0x20003bc0, 0xffffffffffffffff) syz_genetlink_get_family_id(TIPCv2, -1) netlink: failed to get family id for TIPCv2: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [293282ms] <- syz_genetlink_get_family_id$tipc2=0xffffffffffffffff errno=2 cover=7831 #0 [293282ms] -> sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) #0 [293282ms] <- sendmsg$TIPC_NL_PEER_REMOVE=0xffffffffffffffff errno=9 cover=52 #0 [293282ms] -> syz_io_uring_setup(0x701, 0x20003e80, 0x20ffc000, 0x20ffe000, 0x20003f00, 0x20003f40) #0 [293285ms] <- syz_io_uring_setup=0x3 errno=14 cover=8146 #0 [293285ms] -> sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x80) #0 [293285ms] <- sendmsg$AUDIT_DEL_RULE=0xffffffffffffffff errno=9 cover=52 #0 [293285ms] -> sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x8000) #0 [293285ms] <- sendmsg$NLBL_CIPSOV4_C_LIST=0xffffffffffffffff errno=9 cover=52 #0 [293285ms] -> mmap$IORING_OFF_SQES(0x20ffb000, 0x1000, 0x0, 0x10, 0x3, 0x10000000) #0 [293285ms] <- mmap$IORING_OFF_SQES=0xffffffffffffffff errno=22 cover=134 #0 [293285ms] -> syz_io_uring_submit(0x20ffc000, 0x0, 0x20004a00, 0x401) SIGSEGV on 0x10040, skipping #0 [293286ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=803 enabling collider #0 [293286ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [293288ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=28248 #0 [293289ms] -> sendmsg$NLBL_CIPSOV4_C_ADD(0x4, 0x200003c0, 0xc040) #0 [293290ms] <- sendmsg$NLBL_CIPSOV4_C_ADD=0x14 errno=14 cover=1266 pthread_create failed (errno 11) 15:09:48 executing program 0: pselect6(0x12, &(0x7f0000001180), 0x0, &(0x7f0000001200)={0x8}, &(0x7f0000001280)={0x0, 0x3938700}, 0x0) 2021/11/11 15:09:48 result hanged=false: [293333ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36523 #0 [293344ms] -> pselect6(0x12, 0x20001180, 0x0, 0x20001200, 0x20001280, 0x0) #0 [293344ms] <- pselect6=0xffffffffffffffff errno=9 cover=226 enabling collider #0 [293345ms] -> pselect6(0x12, 0x20001180, 0x0, 0x20001200, 0x20001280, 0x0) #0 [293345ms] <- pselect6=0xffffffffffffffff errno=9 cover=226 15:09:48 executing program 0: prctl$PR_GET_TSC(0x3a, &(0x7f0000000240)) 2021/11/11 15:09:48 result hanged=false: [293366ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36525 #0 [293375ms] -> prctl$PR_GET_TSC(0x3a, 0x20000240) #0 [293376ms] <- prctl$PR_GET_TSC=0xffffffffffffffff errno=22 cover=86 enabling collider #0 [293377ms] -> prctl$PR_GET_TSC(0x3a, 0x20000240) #0 [293377ms] <- prctl$PR_GET_TSC=0xffffffffffffffff errno=22 cover=86 15:09:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2021/11/11 15:09:48 result hanged=false: [293401ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36527 #0 [293410ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [293410ms] <- socket$nl_generic=0x3 errno=14 cover=1412 #0 [293412ms] -> getsockopt$sock_int(0x3, 0x1, 0x29, 0x20000040, 0x20000080) #0 [293412ms] <- getsockopt$sock_int=0x0 errno=14 cover=115 enabling collider #0 [293413ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [293413ms] <- socket$nl_generic=0x3 errno=14 cover=1487 #0 [293414ms] -> getsockopt$sock_int(0x3, 0x1, 0x29, 0x20000040, 0x20000080) #0 [293414ms] <- getsockopt$sock_int=0xffffffffffffffff errno=9 cover=50 15:09:48 executing program 0: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x3fc}, 0x0, 0x0, 0x0) 2021/11/11 15:09:48 result hanged=false: [293435ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36529 #0 [293447ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000280, 0x1, 0x0) #0 [293448ms] <- openat$tcp_mem=0x3 errno=14 cover=1752 #0 [293448ms] -> openat$hpet(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [293449ms] <- openat$hpet=0x4 errno=14 cover=1166 #0 [293449ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000000, 0x0) #0 [293450ms] <- openat$sndseq=0x5 errno=14 cover=2202 #0 [293450ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000340, 0x0) #0 [293451ms] <- openat$sndseq=0x6 errno=14 cover=2181 #0 [293451ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [293452ms] <- openat$vga_arbiter=0x7 errno=14 cover=1257 #0 [293452ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [293453ms] <- perf_event_open=0x8 errno=14 cover=3971 #0 [293453ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [293453ms] <- perf_event_open=0x9 errno=14 cover=4004 #0 [293453ms] -> pselect6(0x40, 0x20000180, 0x200001c0, 0x0, 0x0, 0x0) #0 [293454ms] <- pselect6=0x2 errno=14 cover=632 enabling collider #0 [293454ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000280, 0x1, 0x0) #0 [293455ms] <- openat$tcp_mem=0x3 errno=14 cover=1709 #0 [293455ms] -> openat$hpet(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [293456ms] <- openat$hpet=0x4 errno=14 cover=1172 pthread_create failed (errno 11) 15:09:48 executing program 0: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x3fc}, 0x0, 0x0, 0x0) 2021/11/11 15:09:48 result hanged=false: 2021/11/11 15:09:48 #0: triaging type=7 2021/11/11 15:09:48 triaging input for call #5 perf_event_open (new signal=2) [293517ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36631 #0 [293526ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000280, 0x1, 0x0) #0 [293527ms] <- openat$tcp_mem=0x3 errno=14 cover=1666 #0 [293528ms] -> openat$hpet(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [293529ms] <- openat$hpet=0x4 errno=14 cover=1156 #0 [293530ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000000, 0x0) #0 [293531ms] <- openat$sndseq=0x5 errno=14 cover=2191 #0 [293532ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000340, 0x0) #0 [293533ms] <- openat$sndseq=0x6 errno=14 cover=2276 #0 [293533ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [293534ms] <- openat$vga_arbiter=0x7 errno=14 cover=1200 #0 [293535ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [293536ms] <- perf_event_open=0x8 errno=14 cover=3943 #0 [293537ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [293538ms] <- perf_event_open=0x9 errno=14 cover=4047 #0 [293538ms] -> pselect6(0x40, 0x20000180, 0x200001c0, 0x0, 0x0, 0x0) #0 [293539ms] <- pselect6=0x2 errno=14 cover=660 15:09:48 executing program 0: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x3fc}, 0x0, 0x0, 0x0) 2021/11/11 15:09:48 result hanged=false: [293564ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36633 #0 [293574ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000280, 0x1, 0x0) #0 [293575ms] <- openat$tcp_mem=0x3 errno=14 cover=1873 #0 [293576ms] -> openat$hpet(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [293577ms] <- openat$hpet=0x4 errno=14 cover=1176 #0 [293577ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000000, 0x0) #0 [293578ms] <- openat$sndseq=0x5 errno=14 cover=2177 #0 [293579ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000340, 0x0) #0 [293580ms] <- openat$sndseq=0x6 errno=14 cover=2178 #0 [293581ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [293581ms] <- openat$vga_arbiter=0x7 errno=14 cover=1189 #0 [293581ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [293582ms] <- perf_event_open=0x8 errno=14 cover=3929 #0 [293582ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [293582ms] <- perf_event_open=0x9 errno=14 cover=4004 #0 [293583ms] -> pselect6(0x40, 0x20000180, 0x200001c0, 0x0, 0x0, 0x0) #0 [293583ms] <- pselect6=0x2 errno=14 cover=632 15:09:48 executing program 0: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x3fc}, 0x0, 0x0, 0x0) 2021/11/11 15:09:48 result hanged=false: [293604ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36635 #0 [293615ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000280, 0x1, 0x0) #0 [293615ms] <- openat$tcp_mem=0x3 errno=14 cover=1677 #0 [293616ms] -> openat$hpet(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [293616ms] <- openat$hpet=0x4 errno=14 cover=1213 #0 [293619ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000000, 0x0) #0 [293620ms] <- openat$sndseq=0x5 errno=14 cover=2286 #0 [293624ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000340, 0x0) #0 [293624ms] <- openat$sndseq=0x6 errno=14 cover=2241 #0 [293625ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [293625ms] <- openat$vga_arbiter=0x7 errno=14 cover=1201 #0 [293626ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [293627ms] <- perf_event_open=0x8 errno=14 cover=3937 #0 [293628ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [293629ms] <- perf_event_open=0x9 errno=14 cover=4039 #0 [293629ms] -> pselect6(0x40, 0x20000180, 0x200001c0, 0x0, 0x0, 0x0) #0 [293629ms] <- pselect6=0x2 errno=14 cover=632 2021/11/11 15:09:48 result hanged=false: 2021/11/11 15:09:48 added new input for call #5 perf_event_open to corpus: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x3fc}, 0x0, 0x0, 0x0) 15:09:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000005e00000008000300", @ANYRES32=r2], 0x7c}}, 0x0) [293656ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36637 #0 [293668ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [293668ms] <- socket$nl_generic=0x3 errno=14 cover=1423 #0 [293669ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [293670ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11704 #0 [293671ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x20000080) #0 [293671ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 [ 363.584581] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [293671ms] -> sendmsg$NL80211_CMD_JOIN_MESH(0x3, 0x20000180, 0x0) #0 [293674ms] <- sendmsg$NL80211_CMD_JOIN_MESH=0x7c errno=14 cover=3769 enabling collider #0 [293678ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [293678ms] <- socket$nl_generic=0x3 errno=14 cover=1436 #0 [293680ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [293681ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11160 pthread_create failed (errno 11) 2021/11/11 15:09:49 result hanged=false: 2021/11/11 15:09:49 #0: triaging type=7 15:09:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000005e00000008000300", @ANYRES32=r2], 0x7c}}, 0x0) 2021/11/11 15:09:49 triaging input for call #3 sendmsg$NL80211_CMD_JOIN_MESH (new signal=8) [293748ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36739 #0 [293757ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [293758ms] <- socket$nl_generic=0x3 errno=14 cover=1401 #0 [293759ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [293761ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11789 #0 [293763ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x20000080) #0 [293763ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [293763ms] -> sendmsg$NL80211_CMD_JOIN_MESH(0x3, 0x20000180, 0x0) [ 363.676164] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [293766ms] <- sendmsg$NL80211_CMD_JOIN_MESH=0x7c errno=14 cover=3774 15:09:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000005e00000008000300", @ANYRES32=r2], 0x7c}}, 0x0) 2021/11/11 15:09:49 result hanged=false: [293794ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36741 #0 [293807ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [293808ms] <- socket$nl_generic=0x3 errno=14 cover=1481 #0 [293809ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [293810ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11684 #0 [293812ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x20000080) #0 [293812ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 [ 363.725380] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [293812ms] -> sendmsg$NL80211_CMD_JOIN_MESH(0x3, 0x20000180, 0x0) #0 [293816ms] <- sendmsg$NL80211_CMD_JOIN_MESH=0x7c errno=14 cover=3785 15:09:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000005e00000008000300", @ANYRES32=r2], 0x7c}}, 0x0) 2021/11/11 15:09:49 result hanged=false: [293840ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36743 #0 [293858ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [293862ms] <- socket$nl_generic=0x3 errno=14 cover=1415 #0 [293863ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [293863ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11629 #0 [293864ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x20000080) #0 [293865ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [293866ms] -> sendmsg$NL80211_CMD_JOIN_MESH(0x3, 0x20000180, 0x0) [ 363.778902] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [293868ms] <- sendmsg$NL80211_CMD_JOIN_MESH=0x7c errno=14 cover=3827 2021/11/11 15:09:49 result hanged=false: 2021/11/11 15:09:49 added new input for call #3 sendmsg$NL80211_CMD_JOIN_MESH to corpus: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000005e00000008000300", @ANYRES32=r2], 0x7c}}, 0x0) 15:09:49 executing program 0: creat(&(0x7f000000aa00)='./file0\x00', 0x0) [293902ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36745 #0 [293912ms] -> creat(0x2000aa00, 0x0) #0 [293912ms] <- creat=0x3 errno=14 cover=6866 enabling collider #0 [293914ms] -> creat(0x2000aa00, 0x0) #0 [293915ms] <- creat=0x3 errno=14 cover=5029 15:09:49 executing program 0: openat$zero(0xffffffffffffff9c, 0x0, 0x408000, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) syz_io_uring_setup(0x23a5, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 2021/11/11 15:09:49 result hanged=false: [293942ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36747 #0 [293954ms] -> openat$zero(0xffffffffffffff9c, 0x0, 0x408000, 0x0) #0 [293954ms] <- openat$zero=0xffffffffffffffff errno=22 cover=48 #0 [293955ms] -> openat$hpet(0xffffffffffffff9c, 0x200007c0, 0x0, 0x0) #0 [293956ms] <- openat$hpet=0x3 errno=14 cover=1159 #0 [293957ms] -> syz_io_uring_setup(0x23a5, 0x20000a00, 0x20ffa000, 0x20ffd000, 0x20000a80, 0x20000ac0) #0 [293962ms] <- syz_io_uring_setup=0x4 errno=14 cover=14398 enabling collider #0 [293964ms] -> openat$zero(0xffffffffffffff9c, 0x0, 0x408000, 0x0) #0 [293964ms] <- openat$zero=0xffffffffffffffff errno=22 cover=48 #0 [293965ms] -> openat$hpet(0xffffffffffffff9c, 0x200007c0, 0x0, 0x0) #0 [293966ms] <- openat$hpet=0x3 errno=14 cover=1226 pthread_create failed (errno 11) 2021/11/11 15:09:49 result hanged=false: 15:09:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000100)=0x4b, 0x4) bind$inet6(r0, &(0x7f00000006c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 2021/11/11 15:09:49 poll: candidates=8 inputs=0 signal=0 [294030ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36849 #0 [294041ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [294044ms] <- socket$inet6_tcp=0x3 errno=14 cover=1711 #0 [294045ms] -> setsockopt$inet6_int(0x3, 0x29, 0x4e, 0x20000100, 0x4) #0 [294045ms] <- setsockopt$inet6_int=0x0 errno=14 cover=152 #0 [294045ms] -> bind$inet6(0x3, 0x200006c0, 0x1c) #0 [294045ms] <- bind$inet6=0x0 errno=14 cover=534 enabling collider #0 [294046ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [294047ms] <- socket$inet6_tcp=0x3 errno=14 cover=1831 #0 [294048ms] -> setsockopt$inet6_int(0x3, 0x29, 0x4e, 0x20000100, 0x4) #0 [294052ms] <- setsockopt$inet6_int=0x0 errno=14 cover=152 pthread_create failed (errno 11) 15:09:49 executing program 0: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xfc, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 2021/11/11 15:09:49 result hanged=false: [294120ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 36951 #0 [294129ms] -> stat(0x20001cc0, 0x20001c00) #0 [294131ms] <- stat=0x0 errno=14 cover=542 #0 [294132ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [294132ms] <- setresuid=0x0 errno=14 cover=404 #0 [294133ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [294133ms] <- socket$inet6_udplite=0x3 errno=14 cover=1602 #0 [294134ms] -> bind$inet6(0x3, 0x20000040, 0x1c) #0 [294134ms] <- bind$inet6=0xffffffffffffffff errno=13 cover=6149 enabling collider #0 [294135ms] -> stat(0x20001cc0, 0x20001c00) #0 [294135ms] <- stat=0x0 errno=14 cover=551 #0 [294136ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [294138ms] <- setresuid=0x0 errno=14 cover=412 pthread_create failed (errno 11) 15:09:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x18, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002000028020000028400001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32373335313636303200"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009d7e75f885aa4ea585ee14b925c0a95e010000000c00000000000000d3f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003000000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d3f4655fd3f4655fd3f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f00000000000004000400000000000000050000000c00"/64, 0x40, 0x2200}, {&(0x7f0000011600)="20000000741c6aeb741c6aeb00000000d3f4655f00"/32, 0x20, 0x2280}, {&(0x7f0000011700)="c041000000380000d3f4655fd3f4655fd3f4655f00000000000002001c00000000000000000000000d0000000e0000000f0000001000000011000000120000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d3f4655f000000000000000000000000000002ea00"/192, 0xc0, 0x3400}, {&(0x7f0000011800)="ed4100003c000000d3f4655fd3f4655fd3f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000083833c6f00000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x3600}, {&(0x7f0000011900)="ed8100001a040000d3f4655fd3f4655fd3f4655f0000000000000100040000000000000001000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb70067900000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000", 0xa0, 0x3800}, {&(0x7f0000011a00)="ffa1000026000000d3f4655fd3f4655fd3f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3237333531363630322f66696c65302f66696c65300000000000000000000000000000000000000000000090269f9500000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000", 0xa0, 0x3a00}, {&(0x7f0000011b00)="ed8100000a000000d3f4655fd3f4655fd3f4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000228a1c2600000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x3c00}, {&(0x7f0000011c00)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d3f4655fd3f4655fd3f4655f0000000000000200140000000000000001000000150000001600000017000000180000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000518472a200000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000", 0xc0, 0x3de0}, {&(0x7f0000011d00)="ed81000064000000d3f4655fd3f4655fd3f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c602223e700000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x4000}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x41c0}, {&(0x7f0000011f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x6000}, {&(0x7f0000012000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x6800}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x8000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x8800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x9000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x9800}, {&(0x7f0000012700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xa000}], 0x0, &(0x7f0000012c00)) 2021/11/11 15:09:49 result hanged=false: [294208ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37053 #0 [294222ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x18, 0x20000200, 0x0, 0x20012c00) syz_mount_image: size=262144 segs=24 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 364.146988] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [294236ms] <- syz_mount_image$ext4=0x5 errno=0 cover=54956 enabling collider #0 [294239ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x18, 0x20000200, 0x0, 0x20012c00) #0 [294242ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=16 cover=21477 2021/11/11 15:09:49 result hanged=false: 2021/11/11 15:09:49 #0: triaging type=7 15:09:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x18, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002000028020000028400001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32373335313636303200"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009d7e75f885aa4ea585ee14b925c0a95e010000000c00000000000000d3f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003000000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d3f4655fd3f4655fd3f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f00000000000004000400000000000000050000000c00"/64, 0x40, 0x2200}, {&(0x7f0000011600)="20000000741c6aeb741c6aeb00000000d3f4655f00"/32, 0x20, 0x2280}, {&(0x7f0000011700)="c041000000380000d3f4655fd3f4655fd3f4655f00000000000002001c00000000000000000000000d0000000e0000000f0000001000000011000000120000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d3f4655f000000000000000000000000000002ea00"/192, 0xc0, 0x3400}, {&(0x7f0000011800)="ed4100003c000000d3f4655fd3f4655fd3f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000083833c6f00000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x3600}, {&(0x7f0000011900)="ed8100001a040000d3f4655fd3f4655fd3f4655f0000000000000100040000000000000001000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb70067900000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000", 0xa0, 0x3800}, {&(0x7f0000011a00)="ffa1000026000000d3f4655fd3f4655fd3f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3237333531363630322f66696c65302f66696c65300000000000000000000000000000000000000000000090269f9500000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000", 0xa0, 0x3a00}, {&(0x7f0000011b00)="ed8100000a000000d3f4655fd3f4655fd3f4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000228a1c2600000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x3c00}, {&(0x7f0000011c00)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d3f4655fd3f4655fd3f4655f0000000000000200140000000000000001000000150000001600000017000000180000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000518472a200000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000", 0xc0, 0x3de0}, {&(0x7f0000011d00)="ed81000064000000d3f4655fd3f4655fd3f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c602223e700000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x4000}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x41c0}, {&(0x7f0000011f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x6000}, {&(0x7f0000012000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x6800}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x8000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x8800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x9000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x9800}, {&(0x7f0000012700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xa000}], 0x0, &(0x7f0000012c00)) 2021/11/11 15:09:49 triaging input for call #0 syz_mount_image$ext4 (new signal=8) umount(./2211/file0) [294279ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37055 #0 [294289ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x18, 0x20000200, 0x0, 0x20012c00) syz_mount_image: size=262144 segs=24 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 364.224533] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [294315ms] <- syz_mount_image$ext4=0x5 errno=0 cover=53535 2021/11/11 15:09:49 result hanged=false: 15:09:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x18, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002000028020000028400001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32373335313636303200"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009d7e75f885aa4ea585ee14b925c0a95e010000000c00000000000000d3f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003000000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d3f4655fd3f4655fd3f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f00000000000004000400000000000000050000000c00"/64, 0x40, 0x2200}, {&(0x7f0000011600)="20000000741c6aeb741c6aeb00000000d3f4655f00"/32, 0x20, 0x2280}, {&(0x7f0000011700)="c041000000380000d3f4655fd3f4655fd3f4655f00000000000002001c00000000000000000000000d0000000e0000000f0000001000000011000000120000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d3f4655f000000000000000000000000000002ea00"/192, 0xc0, 0x3400}, {&(0x7f0000011800)="ed4100003c000000d3f4655fd3f4655fd3f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000083833c6f00000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x3600}, {&(0x7f0000011900)="ed8100001a040000d3f4655fd3f4655fd3f4655f0000000000000100040000000000000001000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb70067900000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000", 0xa0, 0x3800}, {&(0x7f0000011a00)="ffa1000026000000d3f4655fd3f4655fd3f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3237333531363630322f66696c65302f66696c65300000000000000000000000000000000000000000000090269f9500000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000", 0xa0, 0x3a00}, {&(0x7f0000011b00)="ed8100000a000000d3f4655fd3f4655fd3f4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000228a1c2600000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x3c00}, {&(0x7f0000011c00)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d3f4655fd3f4655fd3f4655f0000000000000200140000000000000001000000150000001600000017000000180000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000518472a200000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000", 0xc0, 0x3de0}, {&(0x7f0000011d00)="ed81000064000000d3f4655fd3f4655fd3f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c602223e700000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x4000}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x41c0}, {&(0x7f0000011f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x6000}, {&(0x7f0000012000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x6800}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x8000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x8800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x9000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x9800}, {&(0x7f0000012700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xa000}], 0x0, &(0x7f0000012c00)) umount(./2212/file0) [294361ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37057 #0 [294371ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x18, 0x20000200, 0x0, 0x20012c00) syz_mount_image: size=262144 segs=24 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 364.301848] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [294391ms] <- syz_mount_image$ext4=0x5 errno=0 cover=54340 2021/11/11 15:09:49 result hanged=false: 15:09:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x18, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002000028020000028400001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32373335313636303200"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009d7e75f885aa4ea585ee14b925c0a95e010000000c00000000000000d3f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003000000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d3f4655fd3f4655fd3f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f00000000000004000400000000000000050000000c00"/64, 0x40, 0x2200}, {&(0x7f0000011600)="20000000741c6aeb741c6aeb00000000d3f4655f00"/32, 0x20, 0x2280}, {&(0x7f0000011700)="c041000000380000d3f4655fd3f4655fd3f4655f00000000000002001c00000000000000000000000d0000000e0000000f0000001000000011000000120000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d3f4655f000000000000000000000000000002ea00"/192, 0xc0, 0x3400}, {&(0x7f0000011800)="ed4100003c000000d3f4655fd3f4655fd3f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000083833c6f00000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x3600}, {&(0x7f0000011900)="ed8100001a040000d3f4655fd3f4655fd3f4655f0000000000000100040000000000000001000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb70067900000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000", 0xa0, 0x3800}, {&(0x7f0000011a00)="ffa1000026000000d3f4655fd3f4655fd3f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3237333531363630322f66696c65302f66696c65300000000000000000000000000000000000000000000090269f9500000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000", 0xa0, 0x3a00}, {&(0x7f0000011b00)="ed8100000a000000d3f4655fd3f4655fd3f4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000228a1c2600000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x3c00}, {&(0x7f0000011c00)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d3f4655fd3f4655fd3f4655f0000000000000200140000000000000001000000150000001600000017000000180000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000518472a200000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000", 0xc0, 0x3de0}, {&(0x7f0000011d00)="ed81000064000000d3f4655fd3f4655fd3f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c602223e700000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x4000}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x41c0}, {&(0x7f0000011f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x6000}, {&(0x7f0000012000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x6800}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x8000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x8800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x9000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x9800}, {&(0x7f0000012700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xa000}], 0x0, &(0x7f0000012c00)) umount(./2213/file0) [294435ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37059 #0 [294447ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x18, 0x20000200, 0x0, 0x20012c00) syz_mount_image: size=262144 segs=24 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 364.387318] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [294477ms] <- syz_mount_image$ext4=0x5 errno=0 cover=56702 2021/11/11 15:09:49 result hanged=false: 2021/11/11 15:09:49 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x18, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002000028020000028400001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32373335313636303200"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009d7e75f885aa4ea585ee14b925c0a95e010000000c00000000000000d3f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003000000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d3f4655fd3f4655fd3f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f00000000000004000400000000000000050000000c00"/64, 0x40, 0x2200}, {&(0x7f0000011600)="20000000741c6aeb741c6aeb00000000d3f4655f00"/32, 0x20, 0x2280}, {&(0x7f0000011700)="c041000000380000d3f4655fd3f4655fd3f4655f00000000000002001c00000000000000000000000d0000000e0000000f0000001000000011000000120000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d3f4655f000000000000000000000000000002ea00"/192, 0xc0, 0x3400}, {&(0x7f0000011800)="ed4100003c000000d3f4655fd3f4655fd3f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000083833c6f00000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x3600}, {&(0x7f0000011900)="ed8100001a040000d3f4655fd3f4655fd3f4655f0000000000000100040000000000000001000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb70067900000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000", 0xa0, 0x3800}, {&(0x7f0000011a00)="ffa1000026000000d3f4655fd3f4655fd3f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3237333531363630322f66696c65302f66696c65300000000000000000000000000000000000000000000090269f9500000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000", 0xa0, 0x3a00}, {&(0x7f0000011b00)="ed8100000a000000d3f4655fd3f4655fd3f4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000228a1c2600000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x3c00}, {&(0x7f0000011c00)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d3f4655fd3f4655fd3f4655f0000000000000200140000000000000001000000150000001600000017000000180000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000518472a200000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000", 0xc0, 0x3de0}, {&(0x7f0000011d00)="ed81000064000000d3f4655fd3f4655fd3f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c602223e700000000000000000000000000000000000000000000000020000000741c6aeb741c6aeb741c6aebd3f4655f741c6aeb0000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x4000}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x41c0}, {&(0x7f0000011f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x6000}, {&(0x7f0000012000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x6800}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x8000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x8800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x9000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x9800}, {&(0x7f0000012700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xa000}], 0x0, &(0x7f0000012c00)) umount(./2214/file0) 15:09:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) open_by_handle_at(r0, &(0x7f00000001c0)=@reiserfs_2={0x8, 0x2, {0xed2a}}, 0x0) [294537ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37061 #0 [294547ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [294548ms] <- openat=0x3 errno=14 cover=7158 #0 [294550ms] -> open_by_handle_at(0x3, 0x200001c0, 0x0) #0 [294551ms] <- open_by_handle_at=0xffffffffffffffff errno=116 cover=3606 enabling collider #0 [294552ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [294552ms] <- openat=0x3 errno=14 cover=1153 2021/11/11 15:09:49 result hanged=false: 15:09:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f0000005340)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f00000000c0)="238f", 0x2}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14}}], 0x18}}], 0x1, 0x0) [294578ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37063 #0 [294587ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [294588ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1691 #0 [294588ms] -> sendmmsg$inet(0x3, 0x20000180, 0x1, 0x0) #0 [294590ms] <- sendmmsg$inet=0x1 errno=14 cover=1474 enabling collider #0 [294591ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [294591ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1665 15:09:49 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) connect$802154_dgram(r1, &(0x7f0000004540)={0x24, @short}, 0x14) sendmmsg$sock(r1, &(0x7f00000021c0)=[{{0x0, 0x2, 0x0}}], 0x324, 0x0) bind$802154_dgram(r1, &(0x7f0000000040), 0x14) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14) 2021/11/11 15:09:49 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [294617ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37065 #0 [294627ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [294628ms] <- syz_init_net_socket$802154_dgram=0x4 errno=14 cover=6404 #0 [294632ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [294632ms] <- syz_init_net_socket$802154_dgram=0x5 errno=14 cover=5365 #0 [294633ms] -> bind$802154_dgram(0x5, 0x20000000, 0x14) #0 [294633ms] <- bind$802154_dgram=0x0 errno=14 cover=3178 #0 [294634ms] -> setsockopt$WPAN_SECURITY(0x5, 0x0, 0x1, 0x20000040, 0x4) #0 [294634ms] <- setsockopt$WPAN_SECURITY=0x0 errno=14 cover=228 #0 [294634ms] -> connect$802154_dgram(0x5, 0x20004540, 0x14) #0 [294634ms] <- connect$802154_dgram=0x0 errno=14 cover=187 #0 [294634ms] -> sendmmsg$sock(0x5, 0x200021c0, 0x324, 0x0) #0 [294830ms] <- sendmmsg$sock=0x324 errno=14 cover=262143 [ 364.750461] Unsupported ieee802154 address type: 0 #0 [294837ms] -> bind$802154_dgram(0x5, 0x20000040, 0x14) #0 [294839ms] <- bind$802154_dgram=0xffffffffffffffff errno=19 cover=9978 #0 [294840ms] -> bind$802154_dgram(0x4, 0x20000000, 0x14) #0 [294841ms] <- bind$802154_dgram=0xffffffffffffffff errno=19 cover=147 enabling collider #0 [294842ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [294844ms] <- syz_init_net_socket$802154_dgram=0x4 errno=14 cover=5527 #0 [294844ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [294848ms] <- syz_init_net_socket$802154_dgram=0x5 errno=14 cover=5649 pthread_create failed (errno 11) 2021/11/11 15:09:50 result hanged=false: 2021/11/11 15:09:50 #0: triaging type=7 2021/11/11 15:09:50 triaging input for call #5 sendmmsg$sock (new signal=5) 15:09:50 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) connect$802154_dgram(r1, &(0x7f0000004540)={0x24, @short}, 0x14) sendmmsg$sock(r1, &(0x7f00000021c0)=[{{0x0, 0x2, 0x0}}], 0x324, 0x0) bind$802154_dgram(r1, &(0x7f0000000040), 0x14) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14) [294911ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37167 #0 [294920ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [294922ms] <- syz_init_net_socket$802154_dgram=0x4 errno=14 cover=11652 #0 [294923ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [294924ms] <- syz_init_net_socket$802154_dgram=0x5 errno=14 cover=5508 #0 [294925ms] -> bind$802154_dgram(0x5, 0x20000000, 0x14) #0 [294925ms] <- bind$802154_dgram=0x0 errno=14 cover=170 #0 [294925ms] -> setsockopt$WPAN_SECURITY(0x5, 0x0, 0x1, 0x20000040, 0x4) #0 [294925ms] <- setsockopt$WPAN_SECURITY=0x0 errno=14 cover=178 #0 [294925ms] -> connect$802154_dgram(0x5, 0x20004540, 0x14) #0 [294925ms] <- connect$802154_dgram=0x0 errno=14 cover=187 #0 [294925ms] -> sendmmsg$sock(0x5, 0x200021c0, 0x324, 0x0) #0 [295116ms] <- sendmmsg$sock=0x324 errno=14 cover=262143 [ 365.048367] Unsupported ieee802154 address type: 0 #0 [295135ms] -> bind$802154_dgram(0x5, 0x20000040, 0x14) #0 [295137ms] <- bind$802154_dgram=0xffffffffffffffff errno=19 cover=1380 #0 [295137ms] -> bind$802154_dgram(0x4, 0x20000000, 0x14) #0 [295139ms] <- bind$802154_dgram=0xffffffffffffffff errno=19 cover=147 15:09:50 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) connect$802154_dgram(r1, &(0x7f0000004540)={0x24, @short}, 0x14) sendmmsg$sock(r1, &(0x7f00000021c0)=[{{0x0, 0x2, 0x0}}], 0x324, 0x0) bind$802154_dgram(r1, &(0x7f0000000040), 0x14) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14) 2021/11/11 15:09:50 result hanged=false: [295167ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37169 #0 [295177ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [295178ms] <- syz_init_net_socket$802154_dgram=0x4 errno=14 cover=6246 #0 [295179ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [295180ms] <- syz_init_net_socket$802154_dgram=0x5 errno=14 cover=5435 #0 [295181ms] -> bind$802154_dgram(0x5, 0x20000000, 0x14) #0 [295181ms] <- bind$802154_dgram=0x0 errno=14 cover=170 #0 [295181ms] -> setsockopt$WPAN_SECURITY(0x5, 0x0, 0x1, 0x20000040, 0x4) #0 [295181ms] <- setsockopt$WPAN_SECURITY=0x0 errno=14 cover=178 #0 [295181ms] -> connect$802154_dgram(0x5, 0x20004540, 0x14) #0 [295181ms] <- connect$802154_dgram=0x0 errno=14 cover=187 #0 [295181ms] -> sendmmsg$sock(0x5, 0x200021c0, 0x324, 0x0) #0 [295375ms] <- sendmmsg$sock=0x324 errno=14 cover=262143 [ 365.309871] Unsupported ieee802154 address type: 0 #0 [295393ms] -> bind$802154_dgram(0x5, 0x20000040, 0x14) #0 [295398ms] <- bind$802154_dgram=0xffffffffffffffff errno=19 cover=1366 #0 [295398ms] -> bind$802154_dgram(0x4, 0x20000000, 0x14) #0 [295400ms] <- bind$802154_dgram=0xffffffffffffffff errno=19 cover=147 2021/11/11 15:09:50 result hanged=false: 15:09:50 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) connect$802154_dgram(r1, &(0x7f0000004540)={0x24, @short}, 0x14) sendmmsg$sock(r1, &(0x7f00000021c0)=[{{0x0, 0x2, 0x0}}], 0x324, 0x0) bind$802154_dgram(r1, &(0x7f0000000040), 0x14) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14) [295426ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37171 #0 [295437ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [295441ms] <- syz_init_net_socket$802154_dgram=0x4 errno=14 cover=6312 #0 [295443ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [295445ms] <- syz_init_net_socket$802154_dgram=0x5 errno=14 cover=5387 #0 [295446ms] -> bind$802154_dgram(0x5, 0x20000000, 0x14) #0 [295447ms] <- bind$802154_dgram=0x0 errno=14 cover=170 #0 [295447ms] -> setsockopt$WPAN_SECURITY(0x5, 0x0, 0x1, 0x20000040, 0x4) #0 [295447ms] <- setsockopt$WPAN_SECURITY=0x0 errno=14 cover=178 #0 [295448ms] -> connect$802154_dgram(0x5, 0x20004540, 0x14) #0 [295448ms] <- connect$802154_dgram=0x0 errno=14 cover=187 #0 [295448ms] -> sendmmsg$sock(0x5, 0x200021c0, 0x324, 0x0) #0 [295637ms] <- sendmmsg$sock=0x324 errno=14 cover=262143 #0 [295658ms] -> bind$802154_dgram(0x5, 0x20000040, 0x14) [ 365.570552] Unsupported ieee802154 address type: 0 #0 [295659ms] <- bind$802154_dgram=0xffffffffffffffff errno=19 cover=1411 #0 [295660ms] -> bind$802154_dgram(0x4, 0x20000000, 0x14) #0 [295660ms] <- bind$802154_dgram=0xffffffffffffffff errno=19 cover=147 2021/11/11 15:09:51 result hanged=false: 2021/11/11 15:09:51 added new input for call #5 sendmmsg$sock to corpus: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) connect$802154_dgram(r1, &(0x7f0000004540)={0x24, @short}, 0x14) sendmmsg$sock(r1, &(0x7f00000021c0)=[{{0x0, 0x2, 0x0}}], 0x324, 0x0) bind$802154_dgram(r1, &(0x7f0000000040), 0x14) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14) 15:09:51 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) connect$802154_dgram(r1, &(0x7f0000004540)={0x24, @short}, 0x14) sendmmsg$sock(r1, &(0x7f00000021c0)=[{{0x0, 0x2, 0x0}}], 0x324, 0x0) bind$802154_dgram(r1, &(0x7f0000000040), 0x14) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14) [295694ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37173 2021/11/11 15:09:51 #0: triaging type=7 2021/11/11 15:09:51 triaging input for call #2 bind$802154_dgram (new signal=1) #0 [295704ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [295705ms] <- syz_init_net_socket$802154_dgram=0x4 errno=14 cover=6306 #0 [295706ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [295707ms] <- syz_init_net_socket$802154_dgram=0x5 errno=14 cover=5507 #0 [295712ms] -> bind$802154_dgram(0x5, 0x20000000, 0x14) #0 [295712ms] <- bind$802154_dgram=0x0 errno=14 cover=170 #0 [295713ms] -> setsockopt$WPAN_SECURITY(0x5, 0x0, 0x1, 0x20000040, 0x4) #0 [295713ms] <- setsockopt$WPAN_SECURITY=0x0 errno=14 cover=178 #0 [295714ms] -> connect$802154_dgram(0x5, 0x20004540, 0x14) #0 [295714ms] <- connect$802154_dgram=0x0 errno=14 cover=187 #0 [295715ms] -> sendmmsg$sock(0x5, 0x200021c0, 0x324, 0x0) #0 [295900ms] <- sendmmsg$sock=0x324 errno=14 cover=262143 #0 [295918ms] -> bind$802154_dgram(0x5, 0x20000040, 0x14) [ 365.830931] Unsupported ieee802154 address type: 0 #0 [295919ms] <- bind$802154_dgram=0xffffffffffffffff errno=19 cover=1366 #0 [295920ms] -> bind$802154_dgram(0x4, 0x20000000, 0x14) #0 [295921ms] <- bind$802154_dgram=0xffffffffffffffff errno=19 cover=147 2021/11/11 15:09:51 result hanged=false: 15:09:51 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) connect$802154_dgram(r1, &(0x7f0000004540)={0x24, @short}, 0x14) sendmmsg$sock(r1, &(0x7f00000021c0)=[{{0x0, 0x2, 0x0}}], 0x324, 0x0) bind$802154_dgram(r1, &(0x7f0000000040), 0x14) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14) [295946ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37175 #0 [295955ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [295956ms] <- syz_init_net_socket$802154_dgram=0x4 errno=14 cover=6272 #0 [295959ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [295959ms] <- syz_init_net_socket$802154_dgram=0x5 errno=14 cover=5409 #0 [295960ms] -> bind$802154_dgram(0x5, 0x20000000, 0x14) #0 [295960ms] <- bind$802154_dgram=0x0 errno=14 cover=170 #0 [295960ms] -> setsockopt$WPAN_SECURITY(0x5, 0x0, 0x1, 0x20000040, 0x4) #0 [295960ms] <- setsockopt$WPAN_SECURITY=0x0 errno=14 cover=178 #0 [295960ms] -> connect$802154_dgram(0x5, 0x20004540, 0x14) #0 [295961ms] <- connect$802154_dgram=0x0 errno=14 cover=201 #0 [295961ms] -> sendmmsg$sock(0x5, 0x200021c0, 0x324, 0x0) #0 [296144ms] <- sendmmsg$sock=0x324 errno=14 cover=262143 #0 [296164ms] -> bind$802154_dgram(0x5, 0x20000040, 0x14) [ 366.076906] Unsupported ieee802154 address type: 0 #0 [296165ms] <- bind$802154_dgram=0xffffffffffffffff errno=19 cover=1402 #0 [296167ms] -> bind$802154_dgram(0x4, 0x20000000, 0x14) #0 [296167ms] <- bind$802154_dgram=0xffffffffffffffff errno=19 cover=147 2021/11/11 15:09:51 result hanged=false: 15:09:51 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) connect$802154_dgram(r1, &(0x7f0000004540)={0x24, @short}, 0x14) sendmmsg$sock(r1, &(0x7f00000021c0)=[{{0x0, 0x2, 0x0}}], 0x324, 0x0) bind$802154_dgram(r1, &(0x7f0000000040), 0x14) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14) [296191ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37177 #0 [296200ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [296201ms] <- syz_init_net_socket$802154_dgram=0x4 errno=14 cover=6320 #0 [296202ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [296203ms] <- syz_init_net_socket$802154_dgram=0x5 errno=14 cover=5423 #0 [296204ms] -> bind$802154_dgram(0x5, 0x20000000, 0x14) #0 [296204ms] <- bind$802154_dgram=0x0 errno=14 cover=170 #0 [296204ms] -> setsockopt$WPAN_SECURITY(0x5, 0x0, 0x1, 0x20000040, 0x4) #0 [296204ms] <- setsockopt$WPAN_SECURITY=0x0 errno=14 cover=178 #0 [296204ms] -> connect$802154_dgram(0x5, 0x20004540, 0x14) #0 [296204ms] <- connect$802154_dgram=0x0 errno=14 cover=187 #0 [296204ms] -> sendmmsg$sock(0x5, 0x200021c0, 0x324, 0x0) #0 [296376ms] <- sendmmsg$sock=0x324 errno=14 cover=262143 [ 366.305725] Unsupported ieee802154 address type: 0 #0 [296391ms] -> bind$802154_dgram(0x5, 0x20000040, 0x14) #0 [296394ms] <- bind$802154_dgram=0xffffffffffffffff errno=19 cover=1366 #0 [296395ms] -> bind$802154_dgram(0x4, 0x20000000, 0x14) #0 [296396ms] <- bind$802154_dgram=0xffffffffffffffff errno=19 cover=147 2021/11/11 15:09:51 result hanged=false: 2021/11/11 15:09:51 added new input for call #2 bind$802154_dgram to corpus: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) connect$802154_dgram(r1, &(0x7f0000004540)={0x24, @short}, 0x14) sendmmsg$sock(r1, &(0x7f00000021c0)=[{{0x0, 0x2, 0x0}}], 0x324, 0x0) bind$802154_dgram(r1, &(0x7f0000000040), 0x14) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14) 15:09:51 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') pread64(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x40000000) [296422ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37179 #0 [296429ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000040) #0 [296430ms] <- syz_open_procfs=0x3 errno=14 cover=4131 #0 [296430ms] -> pread64(0x3, 0x20000280, 0x1000, 0x40000000) #0 [296430ms] <- pread64=0x0 errno=14 cover=640 enabling collider #0 [296430ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000040) #0 [296431ms] <- syz_open_procfs=0x3 errno=14 cover=2545 2021/11/11 15:09:51 result hanged=false: 15:09:51 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') pread64(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x40000000) 2021/11/11 15:09:51 #0: triaging type=7 2021/11/11 15:09:51 triaging input for call #1 pread64 (new signal=1) [296450ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37181 #0 [296457ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000040) #0 [296458ms] <- syz_open_procfs=0x3 errno=14 cover=4119 #0 [296458ms] -> pread64(0x3, 0x20000280, 0x1000, 0x40000000) #0 [296458ms] <- pread64=0x0 errno=14 cover=636 2021/11/11 15:09:51 result hanged=false: 15:09:51 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') pread64(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x40000000) [296481ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37183 #0 [296489ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000040) #0 [296491ms] <- syz_open_procfs=0x3 errno=14 cover=4179 #0 [296493ms] -> pread64(0x3, 0x20000280, 0x1000, 0x40000000) #0 [296493ms] <- pread64=0x0 errno=14 cover=672 15:09:51 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') pread64(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x40000000) 2021/11/11 15:09:51 result hanged=false: [296518ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37185 #0 [296529ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000040) #0 [296529ms] <- syz_open_procfs=0x3 errno=14 cover=4179 #0 [296531ms] -> pread64(0x3, 0x20000280, 0x1000, 0x40000000) #0 [296531ms] <- pread64=0x0 errno=14 cover=672 2021/11/11 15:09:51 result hanged=false: 2021/11/11 15:09:51 added new input for call #1 pread64 to corpus: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') pread64(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x40000000) 15:09:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, 0x2) [296558ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37187 #0 [296566ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000240) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [296578ms] <- syz_mount_image$vfat=0x5 errno=0 cover=26850 #0 [296579ms] -> chdir(0x20000040) #0 [296579ms] <- chdir=0x0 errno=14 cover=665 #0 [296580ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [296580ms] <- openat=0x3 errno=14 cover=5670 #0 [296581ms] -> ftruncate(0x3, 0x4) #0 [296583ms] <- ftruncate=0x0 errno=14 cover=5092 #0 [296583ms] -> mmap$IORING_OFF_SQ_RING(0x20ffd000, 0x3000, 0xa, 0x13, 0x3, 0x0) #0 [296584ms] <- mmap$IORING_OFF_SQ_RING=0x20ffd000 errno=14 cover=1693 #0 [296584ms] -> syz_io_uring_submit(0x20ffd000, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [296585ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=2055 #0 [296586ms] -> mbind(0x20fec000, 0x14000, 0x0, 0x0, 0x0, 0x2) #0 [296588ms] <- mbind=0x0 errno=14 cover=13340 enabling collider #0 [296589ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000240) #0 [296594ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=16 cover=5686 #0 [296595ms] -> chdir(0x20000040) #0 [296595ms] <- chdir=0xffffffffffffffff errno=20 cover=613 pthread_create failed (errno 11) 15:09:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, 0x2) 2021/11/11 15:09:51 result hanged=false: 2021/11/11 15:09:51 #0: triaging type=7 2021/11/11 15:09:51 triaging input for call #6 mbind (new signal=33) umount(./2228/file0) [296679ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37289 #0 [296687ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000240) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [296695ms] <- syz_mount_image$vfat=0x5 errno=0 cover=26819 #0 [296698ms] -> chdir(0x20000040) #0 [296699ms] <- chdir=0x0 errno=14 cover=665 #0 [296700ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [296700ms] <- openat=0x3 errno=14 cover=5555 #0 [296701ms] -> ftruncate(0x3, 0x4) #0 [296702ms] <- ftruncate=0x0 errno=14 cover=3319 #0 [296702ms] -> mmap$IORING_OFF_SQ_RING(0x20ffd000, 0x3000, 0xa, 0x13, 0x3, 0x0) #0 [296703ms] <- mmap$IORING_OFF_SQ_RING=0x20ffd000 errno=14 cover=1428 #0 [296704ms] -> syz_io_uring_submit(0x20ffd000, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [296704ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=1977 #0 [296704ms] -> mbind(0x20fec000, 0x14000, 0x0, 0x0, 0x0, 0x2) #0 [296705ms] <- mbind=0x0 errno=14 cover=3556 15:09:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, 0x2) umount(./2229/file0) 2021/11/11 15:09:52 result hanged=false: [296735ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37291 #0 [296745ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000240) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [296757ms] <- syz_mount_image$vfat=0x5 errno=0 cover=36124 #0 [296761ms] -> chdir(0x20000040) #0 [296761ms] <- chdir=0x0 errno=14 cover=664 #0 [296761ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [296763ms] <- openat=0x3 errno=14 cover=5566 #0 [296764ms] -> ftruncate(0x3, 0x4) #0 [296765ms] <- ftruncate=0x0 errno=14 cover=3432 #0 [296766ms] -> mmap$IORING_OFF_SQ_RING(0x20ffd000, 0x3000, 0xa, 0x13, 0x3, 0x0) #0 [296767ms] <- mmap$IORING_OFF_SQ_RING=0x20ffd000 errno=14 cover=1321 #0 [296768ms] -> syz_io_uring_submit(0x20ffd000, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [296769ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=2112 #0 [296770ms] -> mbind(0x20fec000, 0x14000, 0x0, 0x0, 0x0, 0x2) #0 [296773ms] <- mbind=0x0 errno=14 cover=5434 15:09:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, 0x2) 2021/11/11 15:09:52 result hanged=false: umount(./2230/file0) [296809ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37293 #0 [296820ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000240) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [296831ms] <- syz_mount_image$vfat=0x5 errno=0 cover=35894 #0 [296834ms] -> chdir(0x20000040) #0 [296834ms] <- chdir=0x0 errno=14 cover=675 #0 [296835ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [296836ms] <- openat=0x3 errno=14 cover=5787 #0 [296837ms] -> ftruncate(0x3, 0x4) #0 [296838ms] <- ftruncate=0x0 errno=14 cover=3665 #0 [296839ms] -> mmap$IORING_OFF_SQ_RING(0x20ffd000, 0x3000, 0xa, 0x13, 0x3, 0x0) #0 [296841ms] <- mmap$IORING_OFF_SQ_RING=0x20ffd000 errno=14 cover=1405 #0 [296841ms] -> syz_io_uring_submit(0x20ffd000, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [296842ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=2092 #0 [296843ms] -> mbind(0x20fec000, 0x14000, 0x0, 0x0, 0x0, 0x2) #0 [296845ms] <- mbind=0x0 errno=14 cover=4396 2021/11/11 15:09:52 result hanged=false: 2021/11/11 15:09:52 added new input for call #6 mbind to corpus: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, 0x2) umount(./2231/file0) 2021/11/11 15:09:52 #0: triaging type=7 15:09:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, 0x2) 2021/11/11 15:09:52 triaging input for call #5 syz_io_uring_submit (new signal=4) [296885ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37295 #0 [296896ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000240) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [296910ms] <- syz_mount_image$vfat=0x5 errno=0 cover=27068 #0 [296914ms] -> chdir(0x20000040) #0 [296915ms] <- chdir=0x0 errno=14 cover=730 #0 [296916ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [296917ms] <- openat=0x3 errno=14 cover=5576 #0 [296918ms] -> ftruncate(0x3, 0x4) #0 [296918ms] <- ftruncate=0x0 errno=14 cover=3432 #0 [296919ms] -> mmap$IORING_OFF_SQ_RING(0x20ffd000, 0x3000, 0xa, 0x13, 0x3, 0x0) #0 [296920ms] <- mmap$IORING_OFF_SQ_RING=0x20ffd000 errno=14 cover=1347 #0 [296921ms] -> syz_io_uring_submit(0x20ffd000, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [296921ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=2047 #0 [296922ms] -> mbind(0x20fec000, 0x14000, 0x0, 0x0, 0x0, 0x2) #0 [296924ms] <- mbind=0x0 errno=14 cover=3918 2021/11/11 15:09:52 result hanged=false: 15:09:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, 0x2) umount(./2232/file0) [296958ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37297 #0 [296969ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000240) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [296982ms] <- syz_mount_image$vfat=0x5 errno=0 cover=27998 #0 [296984ms] -> chdir(0x20000040) #0 [296984ms] <- chdir=0x0 errno=14 cover=665 #0 [296984ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [296985ms] <- openat=0x3 errno=14 cover=5579 #0 [296985ms] -> ftruncate(0x3, 0x4) #0 [296985ms] <- ftruncate=0x0 errno=14 cover=3397 #0 [296986ms] -> mmap$IORING_OFF_SQ_RING(0x20ffd000, 0x3000, 0xa, 0x13, 0x3, 0x0) #0 [296986ms] <- mmap$IORING_OFF_SQ_RING=0x20ffd000 errno=14 cover=1304 #0 [296986ms] -> syz_io_uring_submit(0x20ffd000, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [296986ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=1984 #0 [296986ms] -> mbind(0x20fec000, 0x14000, 0x0, 0x0, 0x0, 0x2) #0 [296989ms] <- mbind=0x0 errno=14 cover=3995 15:09:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, 0x2) 2021/11/11 15:09:52 result hanged=false: umount(./2233/file0) [297024ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37299 #0 [297032ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000240) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [297042ms] <- syz_mount_image$vfat=0x5 errno=0 cover=27404 #0 [297047ms] -> chdir(0x20000040) #0 [297047ms] <- chdir=0x0 errno=14 cover=706 #0 [297047ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [297048ms] <- openat=0x3 errno=14 cover=5687 #0 [297049ms] -> ftruncate(0x3, 0x4) #0 [297049ms] <- ftruncate=0x0 errno=14 cover=2903 #0 [297049ms] -> mmap$IORING_OFF_SQ_RING(0x20ffd000, 0x3000, 0xa, 0x13, 0x3, 0x0) #0 [297050ms] <- mmap$IORING_OFF_SQ_RING=0x20ffd000 errno=14 cover=1731 #0 [297050ms] -> syz_io_uring_submit(0x20ffd000, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [297050ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=2027 #0 [297051ms] -> mbind(0x20fec000, 0x14000, 0x0, 0x0, 0x0, 0x2) #0 [297053ms] <- mbind=0x0 errno=14 cover=5612 2021/11/11 15:09:52 result hanged=false: 2021/11/11 15:09:52 added new input for call #5 syz_io_uring_submit to corpus: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, 0x2) 2021/11/11 15:09:52 #0: triaging type=7 2021/11/11 15:09:52 triaging input for call #0 syz_mount_image$vfat (new signal=2) 15:09:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, 0x2) umount(./2234/file0) [297091ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37301 #0 [297099ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000240) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [297109ms] <- syz_mount_image$vfat=0x5 errno=0 cover=28291 #0 [297113ms] -> chdir(0x20000040) #0 [297113ms] <- chdir=0x0 errno=14 cover=665 #0 [297114ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [297115ms] <- openat=0x3 errno=14 cover=5791 #0 [297117ms] -> ftruncate(0x3, 0x4) #0 [297117ms] <- ftruncate=0x0 errno=14 cover=3832 #0 [297118ms] -> mmap$IORING_OFF_SQ_RING(0x20ffd000, 0x3000, 0xa, 0x13, 0x3, 0x0) #0 [297119ms] <- mmap$IORING_OFF_SQ_RING=0x20ffd000 errno=14 cover=1667 #0 [297120ms] -> syz_io_uring_submit(0x20ffd000, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [297121ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=2127 #0 [297122ms] -> mbind(0x20fec000, 0x14000, 0x0, 0x0, 0x0, 0x2) #0 [297122ms] <- mbind=0x0 errno=14 cover=3456 2021/11/11 15:09:52 result hanged=false: 15:09:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, 0x2) umount(./2235/file0) [297152ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37303 #0 [297162ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000240) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [297171ms] <- syz_mount_image$vfat=0x5 errno=0 cover=23705 #0 [297175ms] -> chdir(0x20000040) #0 [297175ms] <- chdir=0x0 errno=14 cover=675 #0 [297176ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [297176ms] <- openat=0x3 errno=14 cover=5611 #0 [297178ms] -> ftruncate(0x3, 0x4) #0 [297178ms] <- ftruncate=0x0 errno=14 cover=3640 #0 [297180ms] -> mmap$IORING_OFF_SQ_RING(0x20ffd000, 0x3000, 0xa, 0x13, 0x3, 0x0) #0 [297180ms] <- mmap$IORING_OFF_SQ_RING=0x20ffd000 errno=14 cover=1413 #0 [297184ms] -> syz_io_uring_submit(0x20ffd000, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [297184ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=2030 #0 [297185ms] -> mbind(0x20fec000, 0x14000, 0x0, 0x0, 0x0, 0x2) #0 [297185ms] <- mbind=0x0 errno=14 cover=3590 2021/11/11 15:09:52 result hanged=false: 15:09:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, 0x2) umount(./2236/file0) [297214ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37305 #0 [297224ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000240) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [297236ms] <- syz_mount_image$vfat=0x5 errno=0 cover=23688 #0 [297239ms] -> chdir(0x20000040) #0 [297240ms] <- chdir=0x0 errno=14 cover=664 #0 [297241ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [297242ms] <- openat=0x3 errno=14 cover=5812 #0 [297243ms] -> ftruncate(0x3, 0x4) #0 [297243ms] <- ftruncate=0x0 errno=14 cover=3471 #0 [297247ms] -> mmap$IORING_OFF_SQ_RING(0x20ffd000, 0x3000, 0xa, 0x13, 0x3, 0x0) #0 [297247ms] <- mmap$IORING_OFF_SQ_RING=0x20ffd000 errno=14 cover=1358 #0 [297247ms] -> syz_io_uring_submit(0x20ffd000, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [297247ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=1977 #0 [297247ms] -> mbind(0x20fec000, 0x14000, 0x0, 0x0, 0x0, 0x2) #0 [297248ms] <- mbind=0x0 errno=14 cover=3419 2021/11/11 15:09:52 result hanged=false: 2021/11/11 15:09:52 added new input for call #0 syz_mount_image$vfat to corpus: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, 0x2) umount(./2237/file0) 15:09:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000600)="a1", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)='\\', 0xfffffdef, 0x0, 0x0, 0x0) [297287ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 15:09:52 poll: candidates=8 inputs=0 signal=0 spawned worker pid 37307 #0 [297296ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [297298ms] <- socket$inet_tcp=0x3 errno=14 cover=1735 #0 [297299ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000080, 0x4) #0 [297299ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [297300ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [297300ms] <- connect$inet=0x0 errno=14 cover=1470 #0 [297301ms] -> setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0x3, 0x6, 0x14, 0x200000c0, 0x4) #0 [297301ms] <- setsockopt$inet_tcp_TCP_REPAIR_QUEUE=0x0 errno=14 cover=142 #0 [297302ms] -> sendto$inet(0x3, 0x20000600, 0x1, 0x0, 0x0, 0x0) #0 [297302ms] <- sendto$inet=0x1 errno=14 cover=549 #0 [297303ms] -> sendto$inet(0x3, 0x20000180, 0xfffffdef, 0x0, 0x0, 0x0) #0 [297303ms] <- sendto$inet=0x11000 errno=14 cover=3436 enabling collider #0 [297304ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [297305ms] <- socket$inet_tcp=0x3 errno=14 cover=1763 #0 [297305ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000080, 0x4) #0 [297305ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=199 pthread_create failed (errno 11) 2021/11/11 15:09:52 result hanged=false: 15:09:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000600)="a1", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)='\\', 0xfffffdef, 0x0, 0x0, 0x0) 2021/11/11 15:09:52 #0: triaging type=7 2021/11/11 15:09:52 triaging input for call #5 sendto$inet (new signal=7) [297357ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37409 #0 [297367ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [297370ms] <- socket$inet_tcp=0x3 errno=14 cover=1732 #0 [297371ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000080, 0x4) #0 [297371ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [297371ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [297371ms] <- connect$inet=0x0 errno=14 cover=1211 #0 [297372ms] -> setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0x3, 0x6, 0x14, 0x200000c0, 0x4) #0 [297373ms] <- setsockopt$inet_tcp_TCP_REPAIR_QUEUE=0x0 errno=14 cover=142 #0 [297373ms] -> sendto$inet(0x3, 0x20000600, 0x1, 0x0, 0x0, 0x0) #0 [297374ms] <- sendto$inet=0x1 errno=14 cover=546 #0 [297374ms] -> sendto$inet(0x3, 0x20000180, 0xfffffdef, 0x0, 0x0, 0x0) #0 [297374ms] <- sendto$inet=0x11000 errno=14 cover=3443 15:09:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000600)="a1", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)='\\', 0xfffffdef, 0x0, 0x0, 0x0) 2021/11/11 15:09:52 result hanged=false: [297397ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37411 #0 [297406ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [297406ms] <- socket$inet_tcp=0x3 errno=14 cover=1732 #0 [297406ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000080, 0x4) #0 [297406ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [297406ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [297407ms] <- connect$inet=0x0 errno=14 cover=1407 #0 [297407ms] -> setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0x3, 0x6, 0x14, 0x200000c0, 0x4) #0 [297407ms] <- setsockopt$inet_tcp_TCP_REPAIR_QUEUE=0x0 errno=14 cover=142 #0 [297407ms] -> sendto$inet(0x3, 0x20000600, 0x1, 0x0, 0x0, 0x0) #0 [297408ms] <- sendto$inet=0x1 errno=14 cover=496 #0 [297408ms] -> sendto$inet(0x3, 0x20000180, 0xfffffdef, 0x0, 0x0, 0x0) #0 [297408ms] <- sendto$inet=0x11000 errno=14 cover=3432 15:09:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000600)="a1", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)='\\', 0xfffffdef, 0x0, 0x0, 0x0) 2021/11/11 15:09:52 result hanged=false: [297420ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37413 #0 [297426ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [297427ms] <- socket$inet_tcp=0x3 errno=14 cover=1732 #0 [297427ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000080, 0x4) #0 [297427ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [297427ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [297427ms] <- connect$inet=0x0 errno=14 cover=1211 #0 [297427ms] -> setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0x3, 0x6, 0x14, 0x200000c0, 0x4) #0 [297427ms] <- setsockopt$inet_tcp_TCP_REPAIR_QUEUE=0x0 errno=14 cover=142 #0 [297427ms] -> sendto$inet(0x3, 0x20000600, 0x1, 0x0, 0x0, 0x0) #0 [297428ms] <- sendto$inet=0x1 errno=14 cover=508 #0 [297428ms] -> sendto$inet(0x3, 0x20000180, 0xfffffdef, 0x0, 0x0, 0x0) #0 [297428ms] <- sendto$inet=0x11000 errno=14 cover=3421 2021/11/11 15:09:52 result hanged=false: 2021/11/11 15:09:52 added new input for call #5 sendto$inet to corpus: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000600)="a1", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)='\\', 0xfffffdef, 0x0, 0x0, 0x0) 15:09:52 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') setns(r0, 0x0) [297445ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37415 #0 [297455ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000040) #0 [297456ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8651 #0 [297456ms] -> setns(0x3, 0x0) #0 [297456ms] <- setns=0xffffffffffffffff errno=87 cover=315 enabling collider #0 [297458ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000040) #0 [297458ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=6547 #0 [297459ms] -> setns(0x3, 0x0) #0 [297459ms] <- setns=0xffffffffffffffff errno=9 cover=44 2021/11/11 15:09:52 result hanged=false: 15:09:52 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') setns(r0, 0x0) 2021/11/11 15:09:52 #0: triaging type=7 2021/11/11 15:09:52 triaging input for call #1 setns (new signal=2) [297480ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37417 #0 [297487ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000040) #0 [297490ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8500 #0 [297497ms] -> setns(0x3, 0x0) #0 [297497ms] <- setns=0xffffffffffffffff errno=87 cover=315 2021/11/11 15:09:52 result hanged=false: 15:09:52 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') setns(r0, 0x0) [297519ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37419 #0 [297526ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000040) #0 [297528ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8473 #0 [297529ms] -> setns(0x3, 0x0) #0 [297529ms] <- setns=0xffffffffffffffff errno=87 cover=315 15:09:52 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') setns(r0, 0x0) 2021/11/11 15:09:52 result hanged=false: [297546ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37421 #0 [297558ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000040) #0 [297559ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8660 #0 [297561ms] -> setns(0x3, 0x0) #0 [297561ms] <- setns=0xffffffffffffffff errno=87 cover=315 2021/11/11 15:09:52 result hanged=false: 2021/11/11 15:09:52 added new input for call #1 setns to corpus: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') setns(r0, 0x0) 15:09:52 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') setns(r0, 0x0) [297583ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37423 2021/11/11 15:09:52 #0: triaging type=7 2021/11/11 15:09:52 triaging input for call #0 syz_open_procfs$namespace (new signal=2) #0 [297590ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000040) #0 [297593ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8638 #0 [297594ms] -> setns(0x3, 0x0) #0 [297595ms] <- setns=0xffffffffffffffff errno=87 cover=315 15:09:52 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') setns(r0, 0x0) 2021/11/11 15:09:52 result hanged=false: [297613ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37425 #0 [297619ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000040) #0 [297619ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8434 #0 [297620ms] -> setns(0x3, 0x0) #0 [297620ms] <- setns=0xffffffffffffffff errno=87 cover=315 15:09:52 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') setns(r0, 0x0) 2021/11/11 15:09:52 result hanged=false: [297632ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37427 #0 [297638ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000040) #0 [297639ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8461 #0 [297639ms] -> setns(0x3, 0x0) #0 [297639ms] <- setns=0xffffffffffffffff errno=87 cover=315 2021/11/11 15:09:52 result hanged=false: 2021/11/11 15:09:52 added new input for call #0 syz_open_procfs$namespace to corpus: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') setns(r0, 0x0) 15:09:52 executing program 0: socket$inet6(0xa, 0x3, 0x9) [297666ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37429 #0 [297672ms] -> socket$inet6(0xa, 0x3, 0x9) #0 [297672ms] <- socket$inet6=0x3 errno=14 cover=1675 enabling collider #0 [297673ms] -> socket$inet6(0xa, 0x3, 0x9) #0 [297673ms] <- socket$inet6=0x3 errno=14 cover=1746 15:09:53 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000001580)="eb58906d6b66732e66617400020820000200008000f8000020005d00000000000000000001", 0x25}, {0x0, 0x0, 0x6654}], 0x5000043, &(0x7f0000000080)=ANY=[]) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x20, 0x0) 2021/11/11 15:09:53 result hanged=false: [297692ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37431 #0 [297702ms] -> syz_mount_image$vfat(0x200001c0, 0x20000100, 0x0, 0x2, 0x20000200, 0x5000043, 0x20000080) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file1' fs='vfat' flags=83886147 opts='' [ 367.621052] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) #0 [297715ms] <- syz_mount_image$vfat=0x5 errno=0 cover=24044 #0 [297717ms] -> mount$9p_fd(0x0, 0x20000080, 0x0, 0x20, 0x0) #0 [297719ms] <- mount$9p_fd=0x0 errno=14 cover=7058 enabling collider #0 [297719ms] -> syz_mount_image$vfat(0x200001c0, 0x20000100, 0x0, 0x2, 0x20000200, 0x5000043, 0x20000080) #0 [297721ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=16 cover=5835 #0 [297722ms] -> mount$9p_fd(0x0, 0x20000080, 0x0, 0x20, 0x0) 15:09:53 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000001580)="eb58906d6b66732e66617400020820000200008000f8000020005d00000000000000000001", 0x25}, {0x0, 0x0, 0x6654}], 0x5000043, &(0x7f0000000080)=ANY=[]) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x20, 0x0) 2021/11/11 15:09:53 result hanged=false: 2021/11/11 15:09:53 #0: triaging type=7 2021/11/11 15:09:53 triaging input for call #0 syz_mount_image$vfat (new signal=2) umount(./2250/file1) [297745ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37433 #0 [297756ms] -> syz_mount_image$vfat(0x200001c0, 0x20000100, 0x0, 0x2, 0x20000200, 0x5000043, 0x20000080) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file1' fs='vfat' flags=83886147 opts='' [ 367.676452] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) #0 [297767ms] <- syz_mount_image$vfat=0x5 errno=0 cover=23798 #0 [297769ms] -> mount$9p_fd(0x0, 0x20000080, 0x0, 0x20, 0x0) #0 [297771ms] <- mount$9p_fd=0x0 errno=14 cover=2581 2021/11/11 15:09:53 result hanged=false: 15:09:53 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000001580)="eb58906d6b66732e66617400020820000200008000f8000020005d00000000000000000001", 0x25}, {0x0, 0x0, 0x6654}], 0x5000043, &(0x7f0000000080)=ANY=[]) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x20, 0x0) umount(./2251/file1) [297800ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37435 #0 [297810ms] -> syz_mount_image$vfat(0x200001c0, 0x20000100, 0x0, 0x2, 0x20000200, 0x5000043, 0x20000080) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file1' fs='vfat' flags=83886147 opts='' [ 367.729605] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) #0 [297818ms] <- syz_mount_image$vfat=0x5 errno=0 cover=21829 #0 [297821ms] -> mount$9p_fd(0x0, 0x20000080, 0x0, 0x20, 0x0) #0 [297821ms] <- mount$9p_fd=0x0 errno=14 cover=2338 2021/11/11 15:09:53 result hanged=false: umount(./2252/file1) 15:09:53 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000001580)="eb58906d6b66732e66617400020820000200008000f8000020005d00000000000000000001", 0x25}, {0x0, 0x0, 0x6654}], 0x5000043, &(0x7f0000000080)=ANY=[]) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x20, 0x0) [297844ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37437 #0 [297850ms] -> syz_mount_image$vfat(0x200001c0, 0x20000100, 0x0, 0x2, 0x20000200, 0x5000043, 0x20000080) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file1' fs='vfat' flags=83886147 opts='' [ 367.772554] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) #0 [297861ms] <- syz_mount_image$vfat=0x5 errno=0 cover=21453 #0 [297862ms] -> mount$9p_fd(0x0, 0x20000080, 0x0, 0x20, 0x0) #0 [297863ms] <- mount$9p_fd=0x0 errno=14 cover=2412 2021/11/11 15:09:53 result hanged=false: 2021/11/11 15:09:53 added new input for call #0 syz_mount_image$vfat to corpus: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000001580)="eb58906d6b66732e66617400020820000200008000f8000020005d00000000000000000001", 0x25}, {0x0, 0x0, 0x6654}], 0x5000043, &(0x7f0000000080)=ANY=[]) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x20, 0x0) umount(./2253/file1) 15:09:53 executing program 0: syz_open_dev$vcsn(0x0, 0x0, 0x0) syz_io_uring_setup(0x62e7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) [297921ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37439 #0 [297928ms] -> syz_open_dev$vcsn(0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [297928ms] <- syz_open_dev$vcsn=0xffffffffffffffff errno=14 cover=1015 #0 [297932ms] -> syz_io_uring_setup(0x62e7, 0x20000140, 0x20fff000, 0x20fff000, 0x200001c0, 0x20000200) #0 [297935ms] <- syz_io_uring_setup=0x3 errno=14 cover=21286 #0 [297936ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [297937ms] <- socket$inet6_udplite=0x4 errno=14 cover=1736 enabling collider #0 [297937ms] -> syz_open_dev$vcsn(0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [297937ms] <- syz_open_dev$vcsn=0xffffffffffffffff errno=14 cover=768 #0 [297938ms] -> syz_io_uring_setup(0x62e7, 0x20000140, 0x20fff000, 0x20fff000, 0x200001c0, 0x20000200) #0 [297946ms] <- syz_io_uring_setup=0x3 errno=14 cover=29404 pthread_create failed (errno 11) 15:09:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd8f4655fd8f4655f00000000000004", 0x1b, 0x1500}], 0x0, &(0x7f0000000080)) 2021/11/11 15:09:53 result hanged=false: [297999ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37541 #0 [298010ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000200, 0x0, 0x20000080) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 367.933592] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 367.934934] EXT4-fs (loop0): mount failed syz_mount_image > mount error: 22 #0 [298029ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=48659 enabling collider #0 [298032ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000200, 0x0, 0x20000080) #0 [298034ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=16 cover=7987 15:09:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd8f4655fd8f4655f00000000000004", 0x1b, 0x1500}], 0x0, &(0x7f0000000080)) 2021/11/11 15:09:53 result hanged=false: 2021/11/11 15:09:53 #0: triaging type=7 2021/11/11 15:09:53 triaging input for call #0 syz_mount_image$ext4 (new signal=1) [298063ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37543 #0 [298074ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000200, 0x0, 0x20000080) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 367.999530] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 368.001059] EXT4-fs (loop0): mount failed syz_mount_image > mount error: 22 #0 [298096ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=48023 15:09:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd8f4655fd8f4655f00000000000004", 0x1b, 0x1500}], 0x0, &(0x7f0000000080)) 2021/11/11 15:09:53 result hanged=false: [298130ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37545 #0 [298146ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000200, 0x0, 0x20000080) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 368.067776] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 368.069395] EXT4-fs (loop0): mount failed syz_mount_image > mount error: 22 #0 [298169ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=48407 2021/11/11 15:09:53 result hanged=false: 15:09:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd8f4655fd8f4655f00000000000004", 0x1b, 0x1500}], 0x0, &(0x7f0000000080)) [298197ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37547 #0 [298208ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000200, 0x0, 0x20000080) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 368.131078] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 368.132502] EXT4-fs (loop0): mount failed syz_mount_image > mount error: 22 #0 [298226ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=43297 2021/11/11 15:09:53 result hanged=false: 2021/11/11 15:09:53 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd8f4655fd8f4655f00000000000004", 0x1b, 0x1500}], 0x0, &(0x7f0000000080)) 15:09:53 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000040)=ANY=[], 0x0) r1 = dup2(r0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r1) [298291ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37549 #0 [298300ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [298301ms] <- socket$inet6_udplite=0x3 errno=14 cover=1638 #0 [298301ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [298301ms] <- close_range=0x0 errno=14 cover=2924 #0 [298302ms] -> syz_usb_connect$cdc_ecm(0x4, 0x4d, 0x20000040, 0x0) syz_usb_connect: dev: 0x20000040 syz_usb_connect: device data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 syz_usb_connect: usb_raw_open success syz_usb_connect: add_usb_index success syz_usb_connect: usb_raw_init failed with -1 #0 [298304ms] <- syz_usb_connect$cdc_ecm=0xffffffffffffffff errno=22 cover=26002 #0 [298304ms] -> dup2(0x3, 0x3) #0 [298304ms] <- dup2=0x3 errno=14 cover=43 #0 [298304ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [298304ms] <- socket$nl_generic=0x4 errno=14 cover=1423 #0 [298304ms] -> dup2(0x4, 0x3) #0 [298304ms] <- dup2=0x3 errno=14 cover=1068 enabling collider #0 [298806ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [298806ms] <- socket$inet6_udplite=0x3 errno=14 cover=1721 #0 [298807ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [298808ms] <- close_range=0x0 errno=14 cover=2645 pthread_create failed (errno 11) 2021/11/11 15:09:54 result hanged=false: 15:09:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000040)=ANY=[], 0x0) r1 = dup2(r0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r1) 2021/11/11 15:09:54 #0: triaging type=7 2021/11/11 15:09:54 triaging input for call #5 dup2 (new signal=13) [298871ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37651 #0 [298881ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [298884ms] <- socket$inet6_udplite=0x3 errno=14 cover=1613 #0 [298886ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [298890ms] <- close_range=0x0 errno=14 cover=2927 #0 [298890ms] -> syz_usb_connect$cdc_ecm(0x4, 0x4d, 0x20000040, 0x0) syz_usb_connect: dev: 0x20000040 syz_usb_connect: device data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 syz_usb_connect: usb_raw_open success syz_usb_connect: add_usb_index success syz_usb_connect: usb_raw_init failed with -1 #0 [298895ms] <- syz_usb_connect$cdc_ecm=0xffffffffffffffff errno=22 cover=26190 #0 [298899ms] -> dup2(0x3, 0x3) #0 [298899ms] <- dup2=0x3 errno=14 cover=43 #0 [298901ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [298901ms] <- socket$nl_generic=0x4 errno=14 cover=1412 #0 [298903ms] -> dup2(0x4, 0x3) #0 [298903ms] <- dup2=0x3 errno=14 cover=411 2021/11/11 15:09:54 result hanged=false: 15:09:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000040)=ANY=[], 0x0) r1 = dup2(r0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r1) [299426ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37653 #0 [299436ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [299439ms] <- socket$inet6_udplite=0x3 errno=14 cover=1627 #0 [299440ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [299440ms] <- close_range=0x0 errno=14 cover=2885 #0 [299441ms] -> syz_usb_connect$cdc_ecm(0x4, 0x4d, 0x20000040, 0x0) syz_usb_connect: dev: 0x20000040 syz_usb_connect: device data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 syz_usb_connect: usb_raw_open success syz_usb_connect: add_usb_index success syz_usb_connect: usb_raw_init failed with -1 #0 [299443ms] <- syz_usb_connect$cdc_ecm=0xffffffffffffffff errno=22 cover=25874 #0 [299446ms] -> dup2(0x3, 0x3) #0 [299449ms] <- dup2=0x3 errno=14 cover=43 #0 [299449ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [299450ms] <- socket$nl_generic=0x4 errno=14 cover=1535 #0 [299450ms] -> dup2(0x4, 0x3) #0 [299450ms] <- dup2=0x3 errno=14 cover=411 2021/11/11 15:09:55 result hanged=false: 15:09:55 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000040)=ANY=[], 0x0) r1 = dup2(r0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r1) [299973ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37655 #0 [299982ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [299984ms] <- socket$inet6_udplite=0x3 errno=14 cover=3987 #0 [299985ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [299986ms] <- close_range=0x0 errno=14 cover=2899 #0 [299987ms] -> syz_usb_connect$cdc_ecm(0x4, 0x4d, 0x20000040, 0x0) syz_usb_connect: dev: 0x20000040 syz_usb_connect: device data: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 syz_usb_connect: usb_raw_open success syz_usb_connect: add_usb_index success syz_usb_connect: usb_raw_init failed with -1 #0 [299990ms] <- syz_usb_connect$cdc_ecm=0xffffffffffffffff errno=22 cover=25742 #0 [299992ms] -> dup2(0x3, 0x3) #0 [299992ms] <- dup2=0x3 errno=14 cover=43 #0 [299992ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [299993ms] <- socket$nl_generic=0x4 errno=14 cover=1470 #0 [299993ms] -> dup2(0x4, 0x3) #0 [299994ms] <- dup2=0x3 errno=14 cover=425 2021/11/11 15:09:55 result hanged=false: 2021/11/11 15:09:55 added new input for call #5 dup2 to corpus: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000040)=ANY=[], 0x0) r1 = dup2(r0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r1) 15:09:55 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000800)={0x1f, 0x0, @none, 0x43fa, 0x2}, 0xe) [300517ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37657 #0 [300528ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [300529ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6375 #0 [300531ms] -> bind$bt_l2cap(0x4, 0x20000800, 0xe) #0 [300531ms] <- bind$bt_l2cap=0xffffffffffffffff errno=22 cover=113 enabling collider #0 [300532ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [300533ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=5592 15:09:55 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000800)={0x1f, 0x0, @none, 0x43fa, 0x2}, 0xe) 2021/11/11 15:09:55 result hanged=false: 2021/11/11 15:09:55 #0: triaging type=7 2021/11/11 15:09:55 triaging input for call #1 bind$bt_l2cap (new signal=1) [300554ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37659 #0 [300568ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [300569ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6368 #0 [300571ms] -> bind$bt_l2cap(0x4, 0x20000800, 0xe) #0 [300571ms] <- bind$bt_l2cap=0xffffffffffffffff errno=22 cover=113 2021/11/11 15:09:55 result hanged=false: 15:09:55 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000800)={0x1f, 0x0, @none, 0x43fa, 0x2}, 0xe) [300594ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37661 #0 [300603ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [300604ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6399 #0 [300605ms] -> bind$bt_l2cap(0x4, 0x20000800, 0xe) #0 [300606ms] <- bind$bt_l2cap=0xffffffffffffffff errno=22 cover=113 15:09:55 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000800)={0x1f, 0x0, @none, 0x43fa, 0x2}, 0xe) 2021/11/11 15:09:55 result hanged=false: [300631ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37663 #0 [300640ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [300641ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6245 #0 [300647ms] -> bind$bt_l2cap(0x4, 0x20000800, 0xe) #0 [300647ms] <- bind$bt_l2cap=0xffffffffffffffff errno=22 cover=113 2021/11/11 15:09:55 result hanged=false: 2021/11/11 15:09:55 added new input for call #1 bind$bt_l2cap to corpus: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000800)={0x1f, 0x0, @none, 0x43fa, 0x2}, 0xe) 15:09:55 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001fc0)={0x0}}, 0x0) [300673ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 15:09:56 poll: candidates=8 inputs=0 signal=0 spawned worker pid 37665 #0 [300684ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [300685ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6320 #0 [300687ms] -> sendmsg$NET_DM_CMD_START(0x4, 0x20002000, 0x0) #0 [300688ms] <- sendmsg$NET_DM_CMD_START=0x0 errno=14 cover=1093 enabling collider #0 [300689ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [300690ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5456 #0 [300691ms] -> sendmsg$NET_DM_CMD_START(0x4, 0x20002000, 0x0) #0 [300691ms] <- sendmsg$NET_DM_CMD_START=0xffffffffffffffff errno=9 cover=53 15:09:56 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8912, &(0x7f0000000140)={'lo\x00'}) 2021/11/11 15:09:56 result hanged=false: [300715ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37667 #0 [300726ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [300727ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1712 #0 [300727ms] -> ioctl$sock_SIOCGIFINDEX(0x3, 0x8912, 0x20000140) #0 [300727ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=695 enabling collider #0 [300728ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [300729ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1678 2021/11/11 15:09:56 result hanged=false: 15:09:56 executing program 0: add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) [300754ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37669 #0 [300764ms] -> add_key$keyring(0x20000440, 0x20000480, 0x0, 0x0, 0xfffffffffffffffe) #0 [300765ms] <- add_key$keyring=0x26525e7b errno=14 cover=1875 enabling collider #0 [300765ms] -> add_key$keyring(0x20000440, 0x20000480, 0x0, 0x0, 0xfffffffffffffffe) #0 [300766ms] <- add_key$keyring=0x2b9b515c errno=14 cover=1313 15:09:56 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, 0x0) 2021/11/11 15:09:56 result hanged=false: [300789ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37671 #0 [300800ms] -> syz_mount_image$ext4(0x20000000, 0x20000040, 0x0, 0x0, 0x20000140, 0x0, 0x20000140) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 370.724387] EXT4-fs (loop0): VFS: Can't find ext4 filesystem syz_mount_image > mount error: 22 #0 [300814ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=25634 #0 [300815ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [300823ms] <- perf_event_open=0x3 errno=14 cover=4199 #0 [300823ms] -> ioprio_get$pid(0x2, 0x0) #0 [300823ms] <- ioprio_get$pid=0x4004 errno=14 cover=349 enabling collider #0 [300824ms] -> syz_mount_image$ext4(0x20000000, 0x20000040, 0x0, 0x0, 0x20000140, 0x0, 0x20000140) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 370.747749] EXT4-fs (loop0): VFS: Can't find ext4 filesystem syz_mount_image > mount error: 22 #0 [300839ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=25816 #0 [300845ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [300849ms] <- perf_event_open=0x3 errno=14 cover=3961 pthread_create failed (errno 11) 15:09:56 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, 0x0) 2021/11/11 15:09:56 result hanged=false: 2021/11/11 15:09:56 #0: triaging type=7 2021/11/11 15:09:56 triaging input for call #2 ioprio_get$pid (new signal=1) [300917ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37773 #0 [300928ms] -> syz_mount_image$ext4(0x20000000, 0x20000040, 0x0, 0x0, 0x20000140, 0x0, 0x20000140) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 370.849028] EXT4-fs (loop0): VFS: Can't find ext4 filesystem syz_mount_image > mount error: 22 #0 [300941ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=25727 #0 [300946ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [300946ms] <- perf_event_open=0x3 errno=14 cover=4003 #0 [300947ms] -> ioprio_get$pid(0x2, 0x0) #0 [300947ms] <- ioprio_get$pid=0x4004 errno=14 cover=146 15:09:56 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, 0x0) 2021/11/11 15:09:56 result hanged=false: [300973ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37775 #0 [300984ms] -> syz_mount_image$ext4(0x20000000, 0x20000040, 0x0, 0x0, 0x20000140, 0x0, 0x20000140) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 370.904592] EXT4-fs (loop0): VFS: Can't find ext4 filesystem syz_mount_image > mount error: 22 #0 [300995ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=26013 #0 [300997ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [300999ms] <- perf_event_open=0x3 errno=14 cover=4095 #0 [300999ms] -> ioprio_get$pid(0x2, 0x0) #0 [300999ms] <- ioprio_get$pid=0x4004 errno=14 cover=349 15:09:56 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, 0x0) 2021/11/11 15:09:56 result hanged=false: [301023ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37777 #0 [301033ms] -> syz_mount_image$ext4(0x20000000, 0x20000040, 0x0, 0x0, 0x20000140, 0x0, 0x20000140) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 370.953848] EXT4-fs (loop0): VFS: Can't find ext4 filesystem syz_mount_image > mount error: 22 #0 [301051ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=32674 #0 [301053ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [301054ms] <- perf_event_open=0x3 errno=14 cover=4121 #0 [301054ms] -> ioprio_get$pid(0x2, 0x0) #0 [301054ms] <- ioprio_get$pid=0x4004 errno=14 cover=349 2021/11/11 15:09:56 result hanged=false: 2021/11/11 15:09:56 added new input for call #2 ioprio_get$pid to corpus: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, 0x0) 15:09:56 executing program 0: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) utime(0x0, &(0x7f00000000c0)) [301089ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37779 #0 [301100ms] -> munmap(0x20000000, 0x2000) #0 [301100ms] <- munmap=0x0 errno=14 cover=962 SIGSEGV on 0x200000c0, skipping SIGSEGV on 0x200000c8, skipping #0 [301102ms] -> utime(0x0, 0x200000c0) #0 [301102ms] <- utime=0xffffffffffffffff errno=14 cover=190 enabling collider #0 [301102ms] -> munmap(0x20000000, 0x2000) #0 [301102ms] <- munmap=0x0 errno=14 cover=93 SIGSEGV on 0x200000c0, skipping SIGSEGV on 0x200000c8, skipping #0 [301103ms] -> utime(0x0, 0x200000c0) 15:09:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xfffffffe) 2021/11/11 15:09:56 result hanged=false: [301130ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37781 #0 [301143ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [301144ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3444 #0 [301145ms] -> ioctl$TIOCSETD(0x3, 0x5423, 0x20000000) #0 [301145ms] <- ioctl$TIOCSETD=0xffffffffffffffff errno=22 cover=130 enabling collider #0 [301146ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [301146ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3392 2021/11/11 15:09:56 result hanged=false: 2021/11/11 15:09:56 #0: triaging type=7 15:09:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xfffffffe) 2021/11/11 15:09:56 triaging input for call #0 syz_open_dev$tty20 (new signal=2) [301170ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37783 #0 [301181ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [301182ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3430 #0 [301185ms] -> ioctl$TIOCSETD(0x3, 0x5423, 0x20000000) #0 [301185ms] <- ioctl$TIOCSETD=0xffffffffffffffff errno=22 cover=130 15:09:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xfffffffe) 2021/11/11 15:09:56 result hanged=false: [301213ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37785 #0 [301225ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [301225ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3382 #0 [301227ms] -> ioctl$TIOCSETD(0x3, 0x5423, 0x20000000) #0 [301227ms] <- ioctl$TIOCSETD=0xffffffffffffffff errno=22 cover=130 15:09:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xfffffffe) 2021/11/11 15:09:56 result hanged=false: [301252ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37787 #0 [301265ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [301268ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3424 #0 [301269ms] -> ioctl$TIOCSETD(0x3, 0x5423, 0x20000000) #0 [301269ms] <- ioctl$TIOCSETD=0xffffffffffffffff errno=22 cover=130 2021/11/11 15:09:56 result hanged=false: 2021/11/11 15:09:56 added new input for call #0 syz_open_dev$tty20 to corpus: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xfffffffe) 15:09:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000640)={0x19, 0x5}) [301303ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37789 #0 [301312ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [301313ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1648 #0 [301313ms] -> ioctl$TIOCSWINSZ(0x3, 0x5414, 0x20000640) #0 [301313ms] <- ioctl$TIOCSWINSZ=0xffffffffffffffff errno=22 cover=464 enabling collider #0 [301313ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [301314ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1636 15:09:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000640)={0x19, 0x5}) 2021/11/11 15:09:56 result hanged=false: 2021/11/11 15:09:56 #0: triaging type=7 2021/11/11 15:09:56 triaging input for call #1 ioctl$TIOCSWINSZ (new signal=5) [301336ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37791 #0 [301346ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [301346ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1648 #0 [301348ms] -> ioctl$TIOCSWINSZ(0x3, 0x5414, 0x20000640) #0 [301348ms] <- ioctl$TIOCSWINSZ=0xffffffffffffffff errno=22 cover=409 2021/11/11 15:09:56 result hanged=false: 15:09:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000640)={0x19, 0x5}) [301375ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37793 #0 [301386ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [301387ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1659 #0 [301387ms] -> ioctl$TIOCSWINSZ(0x3, 0x5414, 0x20000640) #0 [301387ms] <- ioctl$TIOCSWINSZ=0xffffffffffffffff errno=22 cover=420 15:09:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000640)={0x19, 0x5}) 2021/11/11 15:09:56 result hanged=false: [301409ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37795 #0 [301420ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [301421ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1669 #0 [301422ms] -> ioctl$TIOCSWINSZ(0x3, 0x5414, 0x20000640) #0 [301422ms] <- ioctl$TIOCSWINSZ=0xffffffffffffffff errno=22 cover=409 2021/11/11 15:09:56 result hanged=false: 2021/11/11 15:09:56 added new input for call #1 ioctl$TIOCSWINSZ to corpus: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000640)={0x19, 0x5}) 15:09:56 executing program 0: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) [301450ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37797 #0 [301459ms] -> syz_open_dev$evdev(0x20000000, 0x0, 0x0) #0 [301460ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1338 enabling collider #0 [301469ms] -> syz_open_dev$evdev(0x20000000, 0x0, 0x0) #0 [301470ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1358 15:09:56 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000380)) 2021/11/11 15:09:56 result hanged=false: 2021/11/11 15:09:56 poll: candidates=8 inputs=0 signal=0 [301509ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37799 #0 [301518ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [301518ms] <- socket$inet6_udp=0x3 errno=14 cover=1706 #0 [301519ms] -> ioctl$ifreq_SIOCGIFINDEX_team(0x3, 0x8933, 0x0) #0 [301519ms] <- ioctl$ifreq_SIOCGIFINDEX_team=0xffffffffffffffff errno=14 cover=478 #0 [301520ms] -> syz_open_procfs$userns(0x0, 0x20000380) #0 [301520ms] <- syz_open_procfs$userns=0x4 errno=1 cover=6440 enabling collider #0 [301522ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [301522ms] <- socket$inet6_udp=0x3 errno=14 cover=1661 #0 [301524ms] -> ioctl$ifreq_SIOCGIFINDEX_team(0x3, 0x8933, 0x0) #0 [301524ms] <- ioctl$ifreq_SIOCGIFINDEX_team=0xffffffffffffffff errno=14 cover=479 pthread_create failed (errno 11) 15:09:56 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x40081271, r1) 2021/11/11 15:09:56 result hanged=false: [301592ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 37901 #0 [301601ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [301604ms] <- mknod$loop=0x0 errno=14 cover=5786 #0 [301605ms] -> creat(0x20000040, 0x0) #0 [301605ms] <- creat=0x3 errno=14 cover=1244 #0 [301606ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [301607ms] <- openat=0x4 errno=14 cover=6775 #0 [301607ms] -> ioctl$LOOP_CHANGE_FD(0x3, 0x40081271, 0x4) #0 [301607ms] <- ioctl$LOOP_CHANGE_FD=0xffffffffffffffff errno=14 cover=333 enabling collider #0 [301607ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [301608ms] <- mknod$loop=0xffffffffffffffff errno=17 cover=585 #0 [301608ms] -> creat(0x20000040, 0x0) #0 [301611ms] <- creat=0x3 errno=14 cover=1281 pthread_create failed (errno 11) 15:09:56 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) 2021/11/11 15:09:56 result hanged=false: [301672ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38003 #0 [301681ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [301682ms] <- perf_event_open=0x3 errno=14 cover=4193 #0 [301683ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [301683ms] <- socket$inet_udp=0x4 errno=14 cover=5127 #0 [301684ms] -> setsockopt$inet_msfilter(0x4, 0x0, 0x29, 0x20000000, 0x10) #0 [301684ms] <- setsockopt$inet_msfilter=0xffffffffffffffff errno=22 cover=1257 enabling collider #0 [301685ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [301686ms] <- perf_event_open=0x3 errno=14 cover=4149 #0 [301687ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [301690ms] <- socket$inet_udp=0x4 errno=14 cover=5142 pthread_create failed (errno 11) 15:09:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) 2021/11/11 15:09:57 result hanged=false: 2021/11/11 15:09:57 #0: triaging type=7 2021/11/11 15:09:57 triaging input for call #1 socket$inet_udp (new signal=2) [301761ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38105 #0 [301770ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [301771ms] <- perf_event_open=0x3 errno=14 cover=3923 #0 [301771ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [301772ms] <- socket$inet_udp=0x4 errno=14 cover=1673 #0 [301772ms] -> setsockopt$inet_msfilter(0x4, 0x0, 0x29, 0x20000000, 0x10) #0 [301772ms] <- setsockopt$inet_msfilter=0xffffffffffffffff errno=22 cover=441 15:09:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) [301798ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 15:09:57 result hanged=false: spawned worker pid 38107 #0 [301809ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [301809ms] <- perf_event_open=0x3 errno=14 cover=3956 #0 [301811ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [301811ms] <- socket$inet_udp=0x4 errno=14 cover=1760 #0 [301813ms] -> setsockopt$inet_msfilter(0x4, 0x0, 0x29, 0x20000000, 0x10) #0 [301813ms] <- setsockopt$inet_msfilter=0xffffffffffffffff errno=22 cover=452 2021/11/11 15:09:57 result hanged=false: 15:09:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) [301838ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38109 #0 [301849ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [301851ms] <- perf_event_open=0x3 errno=14 cover=4171 #0 [301852ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [301852ms] <- socket$inet_udp=0x4 errno=14 cover=5084 #0 [301854ms] -> setsockopt$inet_msfilter(0x4, 0x0, 0x29, 0x20000000, 0x10) #0 [301854ms] <- setsockopt$inet_msfilter=0xffffffffffffffff errno=22 cover=1108 2021/11/11 15:09:57 result hanged=false: 2021/11/11 15:09:57 added new input for call #1 socket$inet_udp to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) 15:09:57 executing program 0: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x8, 0x2, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [301881ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38111 #0 [301890ms] -> perf_event_open(0x200000c0, 0x0, 0x0, 0xffffffffffffffff, 0x8) #0 [301891ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=925 #0 [301893ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000540, 0x0, 0x0) #0 [301895ms] <- openat$loop_ctrl=0x3 errno=14 cover=1189 #0 [301900ms] -> ioctl$LOOP_CTL_GET_FREE(0x3, 0x4c82) #0 [301900ms] <- ioctl$LOOP_CTL_GET_FREE=0x0 errno=14 cover=131 #0 [301900ms] -> ioctl$LOOP_CTL_REMOVE(0x3, 0x4c81, 0x0) #0 [301938ms] <- ioctl$LOOP_CTL_REMOVE=0x0 errno=14 cover=262143 enabling collider #0 [301942ms] -> perf_event_open(0x200000c0, 0x0, 0x0, 0xffffffffffffffff, 0x8) #0 [301943ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=936 #0 [301944ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000540, 0x0, 0x0) #0 [301946ms] <- openat$loop_ctrl=0x3 errno=14 cover=1225 pthread_create failed (errno 11) 2021/11/11 15:09:57 result hanged=false: 2021/11/11 15:09:57 #0: triaging type=7 2021/11/11 15:09:57 triaging input for call #3 ioctl$LOOP_CTL_REMOVE (new signal=8) 15:09:57 executing program 0: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x8, 0x2, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [302009ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38213 #0 [302020ms] -> perf_event_open(0x200000c0, 0x0, 0x0, 0xffffffffffffffff, 0x8) #0 [302020ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=936 #0 [302021ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000540, 0x0, 0x0) #0 [302021ms] <- openat$loop_ctrl=0x3 errno=14 cover=1091 #0 [302021ms] -> ioctl$LOOP_CTL_GET_FREE(0x3, 0x4c82) #0 [302021ms] <- ioctl$LOOP_CTL_GET_FREE=0x1 errno=14 cover=138 #0 [302021ms] -> ioctl$LOOP_CTL_REMOVE(0x3, 0x4c81, 0x1) #0 [302043ms] <- ioctl$LOOP_CTL_REMOVE=0x1 errno=14 cover=72629 2021/11/11 15:09:57 result hanged=false: 15:09:57 executing program 0: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x8, 0x2, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [302073ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38215 #0 [302082ms] -> perf_event_open(0x200000c0, 0x0, 0x0, 0xffffffffffffffff, 0x8) #0 [302083ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=925 #0 [302084ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000540, 0x0, 0x0) #0 [302084ms] <- openat$loop_ctrl=0x3 errno=14 cover=1080 #0 [302084ms] -> ioctl$LOOP_CTL_GET_FREE(0x3, 0x4c82) #0 [302084ms] <- ioctl$LOOP_CTL_GET_FREE=0x2 errno=14 cover=140 #0 [302084ms] -> ioctl$LOOP_CTL_REMOVE(0x3, 0x4c81, 0x2) #0 [302100ms] <- ioctl$LOOP_CTL_REMOVE=0x2 errno=14 cover=64726 2021/11/11 15:09:57 result hanged=false: 15:09:57 executing program 0: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x8, 0x2, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [302144ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38217 #0 [302155ms] -> perf_event_open(0x200000c0, 0x0, 0x0, 0xffffffffffffffff, 0x8) #0 [302155ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=936 #0 [302157ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000540, 0x0, 0x0) #0 [302157ms] <- openat$loop_ctrl=0x3 errno=14 cover=1079 #0 [302158ms] -> ioctl$LOOP_CTL_GET_FREE(0x3, 0x4c82) #0 [302158ms] <- ioctl$LOOP_CTL_GET_FREE=0x3 errno=14 cover=142 #0 [302159ms] -> ioctl$LOOP_CTL_REMOVE(0x3, 0x4c81, 0x3) #0 [302174ms] <- ioctl$LOOP_CTL_REMOVE=0x3 errno=14 cover=62933 2021/11/11 15:09:57 result hanged=false: 2021/11/11 15:09:57 added new input for call #3 ioctl$LOOP_CTL_REMOVE to corpus: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x8, 0x2, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 15:09:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @remote}, 0x10) connect(r0, &(0x7f0000000340)=@un=@abs, 0x80) [302244ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38219 #0 [302253ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [302253ms] <- socket$inet_udp=0x3 errno=14 cover=1673 #0 [302254ms] -> bind$inet(0x3, 0x20000000, 0x10) #0 [302254ms] <- bind$inet=0x0 errno=14 cover=5467 #0 [302254ms] -> connect$inet(0x3, 0x200003c0, 0x10) #0 [302255ms] <- connect$inet=0x0 errno=14 cover=830 #0 [302255ms] -> connect(0x3, 0x20000340, 0x80) #0 [302255ms] <- connect=0x0 errno=14 cover=235 enabling collider #0 [302255ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [302255ms] <- socket$inet_udp=0x3 errno=14 cover=1661 #0 [302256ms] -> bind$inet(0x3, 0x20000000, 0x10) #0 [302256ms] <- bind$inet=0x0 errno=14 cover=327 pthread_create failed (errno 11) 15:09:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @remote}, 0x10) connect(r0, &(0x7f0000000340)=@un=@abs, 0x80) 2021/11/11 15:09:57 result hanged=false: 2021/11/11 15:09:57 #0: triaging type=7 2021/11/11 15:09:57 triaging input for call #2 connect$inet (new signal=2) [302316ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38321 #0 [302326ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [302327ms] <- socket$inet_udp=0x3 errno=14 cover=1687 #0 [302328ms] -> bind$inet(0x3, 0x20000000, 0x10) #0 [302329ms] <- bind$inet=0x0 errno=14 cover=327 #0 [302330ms] -> connect$inet(0x3, 0x200003c0, 0x10) #0 [302330ms] <- connect$inet=0x0 errno=14 cover=669 #0 [302331ms] -> connect(0x3, 0x20000340, 0x80) #0 [302331ms] <- connect=0x0 errno=14 cover=235 15:09:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @remote}, 0x10) connect(r0, &(0x7f0000000340)=@un=@abs, 0x80) 2021/11/11 15:09:57 result hanged=false: [302355ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38323 #0 [302367ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [302368ms] <- socket$inet_udp=0x3 errno=14 cover=1719 #0 [302369ms] -> bind$inet(0x3, 0x20000000, 0x10) #0 [302369ms] <- bind$inet=0x0 errno=14 cover=327 #0 [302369ms] -> connect$inet(0x3, 0x200003c0, 0x10) #0 [302369ms] <- connect$inet=0x0 errno=14 cover=669 #0 [302370ms] -> connect(0x3, 0x20000340, 0x80) #0 [302371ms] <- connect=0x0 errno=14 cover=235 15:09:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @remote}, 0x10) connect(r0, &(0x7f0000000340)=@un=@abs, 0x80) 2021/11/11 15:09:57 result hanged=false: [302393ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38325 #0 [302403ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [302407ms] <- socket$inet_udp=0x3 errno=14 cover=1732 #0 [302409ms] -> bind$inet(0x3, 0x20000000, 0x10) #0 [302412ms] <- bind$inet=0x0 errno=14 cover=327 #0 [302413ms] -> connect$inet(0x3, 0x200003c0, 0x10) #0 [302413ms] <- connect$inet=0x0 errno=14 cover=669 #0 [302414ms] -> connect(0x3, 0x20000340, 0x80) #0 [302414ms] <- connect=0x0 errno=14 cover=235 2021/11/11 15:09:57 result hanged=false: 2021/11/11 15:09:57 added new input for call #2 connect$inet to corpus: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @remote}, 0x10) connect(r0, &(0x7f0000000340)=@un=@abs, 0x80) 15:09:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, &(0x7f00000000c0)) [302438ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38327 #0 [302448ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [302448ms] <- socket$inet_udp=0x3 errno=14 cover=1684 #0 [302449ms] -> getsockopt$IPT_SO_GET_REVISION_TARGET(0x3, 0x0, 0x43, 0x0, 0x200000c0) #0 [302449ms] <- getsockopt$IPT_SO_GET_REVISION_TARGET=0xffffffffffffffff errno=22 cover=204 enabling collider #0 [302449ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [302450ms] <- socket$inet_udp=0x3 errno=14 cover=1711 2021/11/11 15:09:57 result hanged=false: 15:09:57 executing program 0: creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0xb}}, 0x517f40) [302471ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38329 #0 [302481ms] -> creat(0x20000040, 0x0) #0 [302483ms] <- creat=0x3 errno=14 cover=6749 #0 [302485ms] -> open$dir(0x20000080, 0x0, 0x0) #0 [302488ms] <- open$dir=0x4 errno=14 cover=1035 #0 [302490ms] -> open_by_handle_at(0x4, 0x20000000, 0x517f40) #0 [302496ms] <- open_by_handle_at=0xffffffffffffffff errno=22 cover=40578 enabling collider #0 [302497ms] -> creat(0x20000040, 0x0) #0 [302497ms] <- creat=0x3 errno=14 cover=4956 #0 [302498ms] -> open$dir(0x20000080, 0x0, 0x0) #0 [302498ms] <- open$dir=0x4 errno=14 cover=1045 pthread_create failed (errno 11) 15:09:57 executing program 0: openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x290c02, 0x0) 2021/11/11 15:09:57 result hanged=false: [302563ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38431 #0 [302574ms] -> openat(0xffffffffffffffff, 0x20000000, 0x290c02, 0x0) #0 [302574ms] <- openat=0xffffffffffffffff errno=9 cover=690 enabling collider #0 [302575ms] -> openat(0xffffffffffffffff, 0x20000000, 0x290c02, 0x0) #0 [302575ms] <- openat=0xffffffffffffffff errno=9 cover=723 15:09:57 executing program 0: syz_open_dev$evdev(&(0x7f0000000000), 0xe14, 0x60001) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000003fc0)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003f80)={&(0x7f0000003f00)={0x48, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x48}}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000004080), 0xffffffffffffffff) 2021/11/11 15:09:57 result hanged=false: 2021/11/11 15:09:57 poll: candidates=8 inputs=0 signal=0 [302599ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38433 #0 [302610ms] -> syz_open_dev$evdev(0x20000000, 0xe14, 0x60001) #0 [302610ms] <- syz_open_dev$evdev=0xffffffffffffffff errno=2 cover=1456 #0 [302611ms] -> ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) #0 [302612ms] <- ioctl$EVIOCGMASK=0xffffffffffffffff errno=9 cover=45 #0 [302612ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [302613ms] <- socket$nl_generic=0x3 errno=14 cover=1503 #0 [302613ms] -> sendmsg$NL80211_CMD_DISCONNECT(0x3, 0x20003fc0, 0x40000) #0 [302614ms] <- sendmsg$NL80211_CMD_DISCONNECT=0x48 errno=14 cover=1185 #0 [302614ms] -> syz_genetlink_get_family_id$nl80211(0x20004080, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [302616ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11722 enabling collider #0 [302617ms] -> syz_open_dev$evdev(0x20000000, 0xe14, 0x60001) #0 [302617ms] <- syz_open_dev$evdev=0xffffffffffffffff errno=2 cover=1503 #0 [302619ms] -> ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) #0 [302619ms] <- ioctl$EVIOCGMASK=0xffffffffffffffff errno=9 cover=45 pthread_create failed (errno 11) 2021/11/11 15:09:58 result hanged=false: 15:09:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0x2000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8401, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f00000000c0)={'ipvlan1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) [302679ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38535 #0 [302689ms] -> openat(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [302690ms] <- openat=0x3 errno=14 cover=2674 #0 [302691ms] -> read(0x3, 0x20000000, 0x2000) #0 [302691ms] <- read=0x2000 errno=14 cover=677 #0 [302691ms] -> openat$tun(0xffffffffffffff9c, 0x20000040, 0x8401, 0x0) #0 [302691ms] <- openat$tun=0x4 errno=14 cover=1379 #0 [302691ms] -> ioctl$TUNSETQUEUE(0x4, 0x400454ca, 0x200000c0) #0 [302696ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=43541 #0 [302696ms] -> write$binfmt_elf64(0x4, 0x20000100, 0x40) #0 [302697ms] <- write$binfmt_elf64=0xffffffffffffffff errno=22 cover=183 enabling collider #0 [302706ms] -> openat(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [302706ms] <- openat=0x3 errno=14 cover=2165 #0 [302707ms] -> read(0x3, 0x20000000, 0x2000) #0 [302707ms] <- read=0x2000 errno=14 cover=423 pthread_create failed (errno 11) 15:09:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0x2000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8401, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f00000000c0)={'ipvlan1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 2021/11/11 15:09:58 result hanged=false: 2021/11/11 15:09:58 #0: triaging type=7 2021/11/11 15:09:58 triaging input for call #4 write$binfmt_elf64 (new signal=2) [302769ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38637 #0 [302780ms] -> openat(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [302780ms] <- openat=0x3 errno=14 cover=2652 #0 [302781ms] -> read(0x3, 0x20000000, 0x2000) #0 [302781ms] <- read=0x2000 errno=14 cover=681 #0 [302781ms] -> openat$tun(0xffffffffffffff9c, 0x20000040, 0x8401, 0x0) #0 [302781ms] <- openat$tun=0x4 errno=14 cover=1441 #0 [302782ms] -> ioctl$TUNSETQUEUE(0x4, 0x400454ca, 0x200000c0) #0 [302786ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=43756 #0 [302790ms] -> write$binfmt_elf64(0x4, 0x20000100, 0x40) #0 [302791ms] <- write$binfmt_elf64=0xffffffffffffffff errno=22 cover=183 2021/11/11 15:09:58 result hanged=false: 15:09:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0x2000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8401, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f00000000c0)={'ipvlan1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) [302824ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38639 #0 [302835ms] -> openat(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [302836ms] <- openat=0x3 errno=14 cover=2705 #0 [302836ms] -> read(0x3, 0x20000000, 0x2000) #0 [302836ms] <- read=0x2000 errno=14 cover=681 #0 [302837ms] -> openat$tun(0xffffffffffffff9c, 0x20000040, 0x8401, 0x0) #0 [302837ms] <- openat$tun=0x4 errno=14 cover=1390 #0 [302837ms] -> ioctl$TUNSETQUEUE(0x4, 0x400454ca, 0x200000c0) #0 [302842ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=43906 #0 [302845ms] -> write$binfmt_elf64(0x4, 0x20000100, 0x40) #0 [302846ms] <- write$binfmt_elf64=0xffffffffffffffff errno=22 cover=183 15:09:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0x2000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8401, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f00000000c0)={'ipvlan1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 2021/11/11 15:09:58 result hanged=false: [302881ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38641 #0 [302892ms] -> openat(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [302892ms] <- openat=0x3 errno=14 cover=2703 #0 [302893ms] -> read(0x3, 0x20000000, 0x2000) #0 [302893ms] <- read=0x2000 errno=14 cover=681 #0 [302893ms] -> openat$tun(0xffffffffffffff9c, 0x20000040, 0x8401, 0x0) #0 [302894ms] <- openat$tun=0x4 errno=14 cover=1368 #0 [302894ms] -> ioctl$TUNSETQUEUE(0x4, 0x400454ca, 0x200000c0) #0 [302898ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=43741 #0 [302902ms] -> write$binfmt_elf64(0x4, 0x20000100, 0x40) #0 [302903ms] <- write$binfmt_elf64=0xffffffffffffffff errno=22 cover=183 2021/11/11 15:09:58 result hanged=false: 2021/11/11 15:09:58 added new input for call #4 write$binfmt_elf64 to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0x2000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8401, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f00000000c0)={'ipvlan1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 15:09:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000005ec0)={0x77359400}) [302939ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38643 #0 [302950ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [302953ms] <- socket$nl_generic=0x3 errno=14 cover=1448 #0 [302954ms] -> recvmmsg(0x3, 0x0, 0x0, 0x0, 0x20005ec0) #0 [302957ms] <- recvmmsg=0x0 errno=14 cover=122 enabling collider #0 [302957ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [302958ms] <- socket$nl_generic=0x3 errno=14 cover=1450 2021/11/11 15:09:58 result hanged=false: 15:09:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000011cc0), 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, 0x0) [302979ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38645 #0 [302988ms] -> syz_open_dev$loop(0x20011cc0, 0x0, 0x0) #0 [302991ms] <- syz_open_dev$loop=0xffffffffffffffff errno=2 cover=1359 #0 [302991ms] -> ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) #0 [302991ms] <- ioctl$BLKDISCARD=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [302991ms] -> syz_open_dev$loop(0x20011cc0, 0x0, 0x0) #0 [302991ms] <- syz_open_dev$loop=0xffffffffffffffff errno=2 cover=1355 2021/11/11 15:09:58 poll: candidates=0 inputs=0 signal=0 15:09:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14}, 0x14}}, 0x0) 2021/11/11 15:09:58 result hanged=false: [303014ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38647 #0 [303024ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [303024ms] <- socket$nl_generic=0x3 errno=14 cover=1490 #0 [303026ms] -> sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0x3, 0x20000740, 0x0) #0 [303026ms] <- sendmsg$DEVLINK_CMD_TRAP_GROUP_GET=0x14 errno=14 cover=1027 enabling collider #0 [303027ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [303028ms] <- socket$nl_generic=0x3 errno=14 cover=1464 15:09:58 executing program 0: io_uring_setup(0x5551, &(0x7f0000000200)={0x0, 0xc5fa, 0x0, 0x0, 0x5b}) 2021/11/11 15:09:58 result hanged=false: [303051ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38649 #0 [303062ms] -> io_uring_setup(0x5551, 0x20000200) #0 [303065ms] <- io_uring_setup=0x3 errno=14 cover=5920 enabling collider #0 [303065ms] -> io_uring_setup(0x5551, 0x20000200) #0 [303068ms] <- io_uring_setup=0x3 errno=14 cover=4883 15:09:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x30}}, 0x0) 2021/11/11 15:09:58 result hanged=false: [303093ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38651 #0 [303102ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [303105ms] <- socket$nl_generic=0x3 errno=14 cover=1423 #0 [303107ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [303110ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11673 #0 [303111ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [303111ms] <- socket$nl_generic=0x4 errno=14 cover=1611 #0 [303111ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x4, 0x8933, 0x20000080) #0 [303111ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [303111ms] -> sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0x3, 0x20000440, 0x0) #0 [303111ms] <- sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK=0x30 errno=14 cover=1708 enabling collider #0 [303112ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [303112ms] <- socket$nl_generic=0x3 errno=14 cover=1456 #0 [303112ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [303113ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11186 pthread_create failed (errno 11) 2021/11/11 15:09:58 result hanged=false: 15:09:58 executing program 0: kexec_load(0x0, 0x0, 0x0, 0x1) [303178ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38753 #0 [303188ms] -> kexec_load(0x0, 0x0, 0x0, 0x1) #0 [303189ms] <- kexec_load=0x0 errno=14 cover=129 enabling collider #0 [303189ms] -> kexec_load(0x0, 0x0, 0x0, 0x1) #0 [303189ms] <- kexec_load=0x0 errno=14 cover=129 15:09:58 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f00000001c0)) 2021/11/11 15:09:58 result hanged=false: 2021/11/11 15:09:58 poll: candidates=8 inputs=0 signal=0 [303214ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38755 #0 [303223ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [303224ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1731 #0 [303225ms] -> getsockopt(0x3, 0xff, 0x1, 0x0, 0x200001c0) #0 [303225ms] <- getsockopt=0x0 errno=14 cover=110 enabling collider #0 [303225ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [303225ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1705 2021/11/11 15:09:58 result hanged=false: 15:09:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x10000, 0x8}) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) [303248ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38757 #0 [303258ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [303259ms] <- syz_open_dev$sg=0x3 errno=14 cover=1478 #0 [303260ms] -> ioctl$BLKTRACESETUP(0x3, 0xc0481273, 0x200000c0) #0 [303268ms] <- ioctl$BLKTRACESETUP=0x0 errno=14 cover=71140 #0 [303269ms] -> openat$procfs(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [303270ms] <- openat$procfs=0x4 errno=14 cover=4033 enabling collider #0 [303271ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [303272ms] <- syz_open_dev$sg=0x3 errno=14 cover=1398 #0 [303273ms] -> ioctl$BLKTRACESETUP(0x3, 0xc0481273, 0x200000c0) [ 373.186800] blktrace: Concurrent blktraces are not allowed on sg0 #0 [303276ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=16 cover=10279 pthread_create failed (errno 11) 2021/11/11 15:09:58 result hanged=false: 2021/11/11 15:09:58 #0: triaging type=7 2021/11/11 15:09:58 triaging input for call #2 openat$procfs (new signal=2) 15:09:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x10000, 0x8}) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) [303339ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38859 #0 [303350ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [303350ms] <- syz_open_dev$sg=0x3 errno=14 cover=1357 #0 [303351ms] -> ioctl$BLKTRACESETUP(0x3, 0xc0481273, 0x200000c0) [ 373.264060] blktrace: Concurrent blktraces are not allowed on sg0 #0 [303353ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=16 cover=1543 #0 [303353ms] -> openat$procfs(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [303353ms] <- openat$procfs=0x4 errno=14 cover=1552 15:09:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x10000, 0x8}) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) 2021/11/11 15:09:58 result hanged=false: [303376ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38861 #0 [303386ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [303389ms] <- syz_open_dev$sg=0x3 errno=14 cover=1357 #0 [303391ms] -> ioctl$BLKTRACESETUP(0x3, 0xc0481273, 0x200000c0) [ 373.304775] blktrace: Concurrent blktraces are not allowed on sg0 #0 [303394ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=16 cover=1571 #0 [303394ms] -> openat$procfs(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [303396ms] <- openat$procfs=0x4 errno=14 cover=1544 15:09:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x10000, 0x8}) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) 2021/11/11 15:09:58 result hanged=false: [303419ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38863 #0 [303430ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [303435ms] <- syz_open_dev$sg=0x3 errno=14 cover=1391 #0 [303435ms] -> ioctl$BLKTRACESETUP(0x3, 0xc0481273, 0x200000c0) [ 373.348279] blktrace: Concurrent blktraces are not allowed on sg0 #0 [303437ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=16 cover=1503 #0 [303437ms] -> openat$procfs(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [303437ms] <- openat$procfs=0x4 errno=14 cover=1520 2021/11/11 15:09:58 result hanged=false: 2021/11/11 15:09:58 added new input for call #2 openat$procfs to corpus: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x10000, 0x8}) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) 15:09:58 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) [303468ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38865 #0 [303478ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [303479ms] <- socket$inet6_udplite=0x3 errno=14 cover=1641 #0 [303480ms] -> setsockopt$inet6_IPV6_RTHDRDSTOPTS(0x3, 0x29, 0x37, 0x0, 0x0) #0 [303480ms] <- setsockopt$inet6_IPV6_RTHDRDSTOPTS=0x0 errno=14 cover=191 enabling collider #0 [303481ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [303482ms] <- socket$inet6_udplite=0x3 errno=14 cover=1699 15:09:58 executing program 0: semctl$GETVAL(0x0, 0x2, 0xc, 0x0) 2021/11/11 15:09:58 result hanged=false: [303506ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38867 #0 [303516ms] -> semctl$GETVAL(0x0, 0x2, 0xc, 0x0) #0 [303519ms] <- semctl$GETVAL=0x0 errno=22 cover=200 enabling collider #0 [303520ms] -> semctl$GETVAL(0x0, 0x2, 0xc, 0x0) #0 [303520ms] <- semctl$GETVAL=0x0 errno=22 cover=186 2021/11/11 15:09:58 result hanged=false: 2021/11/11 15:09:58 #0: triaging type=7 15:09:58 executing program 0: semctl$GETVAL(0x0, 0x2, 0xc, 0x0) 2021/11/11 15:09:58 triaging input for call #0 semctl$GETVAL (new signal=2) [303542ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38869 #0 [303551ms] -> semctl$GETVAL(0x0, 0x2, 0xc, 0x0) #0 [303555ms] <- semctl$GETVAL=0x0 errno=22 cover=186 2021/11/11 15:09:58 result hanged=false: 15:09:58 executing program 0: semctl$GETVAL(0x0, 0x2, 0xc, 0x0) [303578ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38871 #0 [303587ms] -> semctl$GETVAL(0x0, 0x2, 0xc, 0x0) #0 [303591ms] <- semctl$GETVAL=0x0 errno=22 cover=186 2021/11/11 15:09:58 result hanged=false: 15:09:58 executing program 0: semctl$GETVAL(0x0, 0x2, 0xc, 0x0) [303615ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38873 #0 [303626ms] -> semctl$GETVAL(0x0, 0x2, 0xc, 0x0) #0 [303629ms] <- semctl$GETVAL=0x0 errno=22 cover=186 2021/11/11 15:09:58 result hanged=false: 2021/11/11 15:09:58 added new input for call #0 semctl$GETVAL to corpus: semctl$GETVAL(0x0, 0x2, 0xc, 0x0) 15:09:58 executing program 0: io_setup(0x2, &(0x7f0000000180)=0x0) io_getevents(r0, 0xda43, 0x0, 0x0, 0x0) [303656ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38875 #0 [303667ms] -> io_setup(0x2, 0x20000180) #0 [303670ms] <- io_setup=0x0 errno=14 cover=4322 #0 [303672ms] -> io_getevents(0x7fbccc6ac000, 0xda43, 0x0, 0x0, 0x0) #0 [303672ms] <- io_getevents=0xffffffffffffffff errno=22 cover=352 enabling collider #0 [303672ms] -> io_setup(0x2, 0x20000180) #0 [303672ms] <- io_setup=0xffffffffffffffff errno=22 cover=40 2021/11/11 15:09:59 result hanged=false: 15:09:59 executing program 0: r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x71) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x40200, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = fork() ptrace(0x10, r3) getpgrp(r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r4 = fork() ptrace(0x10, r4) ptrace$setopts(0x4200, r4, 0xfffffffffffffffb, 0x4) getpgrp(r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) kcmp(r3, r4, 0x0, r2, r1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0) [303704ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38877 #0 [303715ms] -> fork() #0 [303734ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [303739ms] -> sched_getattr(0x0, 0x20000000, 0x38, 0x0) #0 [303739ms] <- sched_getattr=0x0 errno=14 cover=875 #0 [303740ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x71) #0 [303741ms] <- openat=0x3 errno=14 cover=6756 #0 [303742ms] -> openat(0xffffffffffffffff, 0x200001c0, 0x40200, 0x0) #0 [303743ms] <- openat=0xffffffffffffffff errno=26 cover=2976 #0 [303744ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [303744ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [303744ms] -> fork() #0 [303765ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [303767ms] -> ptrace(0x10, 0x0) #0 [303769ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [303770ms] -> getpgrp(0x0) #0 [303770ms] <- getpgrp=0x97dd errno=14 cover=48 #0 [303770ms] -> ptrace$getregset(0x4204, 0x0, 0x202, 0x20000140) #0 [303770ms] <- ptrace$getregset=0xffffffffffffffff errno=3 cover=64 #0 [303771ms] -> fork() #0 [303793ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [303795ms] -> ptrace(0x10, 0x0) #0 [303799ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [303800ms] -> ptrace$setopts(0x4200, 0x0, 0xfffffffffffffffb, 0x4) #0 [303800ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=64 #0 [303800ms] -> getpgrp(0x0) #0 [303800ms] <- getpgrp=0x97dd errno=14 cover=48 #0 [303800ms] -> ptrace$getregset(0x4204, 0x0, 0x202, 0x20000140) #0 [303800ms] <- ptrace$getregset=0xffffffffffffffff errno=3 cover=64 #0 [303800ms] -> kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) #0 [303800ms] <- kcmp=0xffffffffffffffff errno=3 cover=88 #0 [303800ms] -> ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x20000040) #0 [303800ms] <- ioctl$sock_SIOCGPGRP=0xffffffffffffffff errno=9 cover=45 #0 [303800ms] -> sched_getattr(0x0, 0x20000180, 0x38, 0x0) #0 [303801ms] <- sched_getattr=0x0 errno=14 cover=100 enabling collider #0 [303801ms] -> fork() #0 [303820ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [303820ms] -> sched_getattr(0x0, 0x20000000, 0x38, 0x0) #0 [303821ms] <- sched_getattr=0x0 errno=14 cover=100 pthread_create failed (errno 11) 2021/11/11 15:09:59 result hanged=false: 2021/11/11 15:09:59 #0: triaging type=7 2021/11/11 15:09:59 triaging input for call #5 fork (new signal=1) 15:09:59 executing program 0: r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x71) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x40200, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = fork() ptrace(0x10, r3) getpgrp(r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r4 = fork() ptrace(0x10, r4) ptrace$setopts(0x4200, r4, 0xfffffffffffffffb, 0x4) getpgrp(r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) kcmp(r3, r4, 0x0, r2, r1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0) [303886ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38983 #0 [303895ms] -> fork() #0 [303914ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [303929ms] -> sched_getattr(0x0, 0x20000000, 0x38, 0x0) #0 [303929ms] <- sched_getattr=0x0 errno=14 cover=835 #0 [303930ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x71) #0 [303930ms] <- openat=0x3 errno=14 cover=6776 #0 [303931ms] -> openat(0xffffffffffffffff, 0x200001c0, 0x40200, 0x0) #0 [303932ms] <- openat=0xffffffffffffffff errno=26 cover=2954 #0 [303932ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [303932ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [303932ms] -> fork() #0 [303951ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [303967ms] -> ptrace(0x10, 0x0) #0 [303967ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [303968ms] -> getpgrp(0x0) #0 [303968ms] <- getpgrp=0x9847 errno=14 cover=48 #0 [303968ms] -> ptrace$getregset(0x4204, 0x0, 0x202, 0x20000140) #0 [303968ms] <- ptrace$getregset=0xffffffffffffffff errno=3 cover=64 #0 [303968ms] -> fork() #0 [303992ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [304006ms] -> ptrace(0x10, 0x0) #0 [304009ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [304009ms] -> ptrace$setopts(0x4200, 0x0, 0xfffffffffffffffb, 0x4) #0 [304009ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=64 #0 [304009ms] -> getpgrp(0x0) #0 [304009ms] <- getpgrp=0x9847 errno=14 cover=48 #0 [304009ms] -> ptrace$getregset(0x4204, 0x0, 0x202, 0x20000140) #0 [304009ms] <- ptrace$getregset=0xffffffffffffffff errno=3 cover=64 #0 [304009ms] -> kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) #0 [304009ms] <- kcmp=0xffffffffffffffff errno=3 cover=88 #0 [304009ms] -> ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x20000040) #0 [304009ms] <- ioctl$sock_SIOCGPGRP=0xffffffffffffffff errno=9 cover=45 #0 [304009ms] -> sched_getattr(0x0, 0x20000180, 0x38, 0x0) #0 [304009ms] <- sched_getattr=0x0 errno=14 cover=100 15:09:59 executing program 0: r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x71) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x40200, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = fork() ptrace(0x10, r3) getpgrp(r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r4 = fork() ptrace(0x10, r4) ptrace$setopts(0x4200, r4, 0xfffffffffffffffb, 0x4) getpgrp(r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) kcmp(r3, r4, 0x0, r2, r1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0) 2021/11/11 15:09:59 result hanged=false: [304034ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38988 #0 [304044ms] -> fork() #0 [304067ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [304081ms] -> sched_getattr(0x0, 0x20000000, 0x38, 0x0) #0 [304082ms] <- sched_getattr=0x0 errno=14 cover=780 #0 [304083ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x71) #0 [304084ms] <- openat=0x3 errno=14 cover=6750 #0 [304086ms] -> openat(0xffffffffffffffff, 0x200001c0, 0x40200, 0x0) #0 [304089ms] <- openat=0xffffffffffffffff errno=26 cover=3008 #0 [304091ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [304091ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [304092ms] -> fork() #0 [304113ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [304131ms] -> ptrace(0x10, 0x0) #0 [304131ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [304132ms] -> getpgrp(0x0) #0 [304132ms] <- getpgrp=0x984c errno=14 cover=48 #0 [304132ms] -> ptrace$getregset(0x4204, 0x0, 0x202, 0x20000140) #0 [304132ms] <- ptrace$getregset=0xffffffffffffffff errno=3 cover=64 #0 [304132ms] -> fork() #0 [304155ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [304169ms] -> ptrace(0x10, 0x0) #0 [304170ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [304170ms] -> ptrace$setopts(0x4200, 0x0, 0xfffffffffffffffb, 0x4) #0 [304170ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=64 #0 [304170ms] -> getpgrp(0x0) #0 [304170ms] <- getpgrp=0x984c errno=14 cover=48 #0 [304170ms] -> ptrace$getregset(0x4204, 0x0, 0x202, 0x20000140) #0 [304170ms] <- ptrace$getregset=0xffffffffffffffff errno=3 cover=64 #0 [304170ms] -> kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) #0 [304170ms] <- kcmp=0xffffffffffffffff errno=3 cover=88 #0 [304170ms] -> ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x20000040) #0 [304170ms] <- ioctl$sock_SIOCGPGRP=0xffffffffffffffff errno=9 cover=45 #0 [304170ms] -> sched_getattr(0x0, 0x20000180, 0x38, 0x0) #0 [304171ms] <- sched_getattr=0x0 errno=14 cover=100 2021/11/11 15:09:59 result hanged=false: 15:09:59 executing program 0: r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x71) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x40200, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = fork() ptrace(0x10, r3) getpgrp(r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r4 = fork() ptrace(0x10, r4) ptrace$setopts(0x4200, r4, 0xfffffffffffffffb, 0x4) getpgrp(r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) kcmp(r3, r4, 0x0, r2, r1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0) [304194ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38993 #0 [304205ms] -> fork() #0 [304223ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [304239ms] -> sched_getattr(0x0, 0x20000000, 0x38, 0x0) #0 [304239ms] <- sched_getattr=0x0 errno=14 cover=780 #0 [304241ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x71) #0 [304242ms] <- openat=0x3 errno=14 cover=6874 #0 [304244ms] -> openat(0xffffffffffffffff, 0x200001c0, 0x40200, 0x0) #0 [304245ms] <- openat=0xffffffffffffffff errno=26 cover=2933 #0 [304245ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [304246ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [304246ms] -> fork() #0 [304269ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [304283ms] -> ptrace(0x10, 0x0) #0 [304284ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [304284ms] -> getpgrp(0x0) #0 [304284ms] <- getpgrp=0x9851 errno=14 cover=48 #0 [304284ms] -> ptrace$getregset(0x4204, 0x0, 0x202, 0x20000140) #0 [304284ms] <- ptrace$getregset=0xffffffffffffffff errno=3 cover=64 #0 [304284ms] -> fork() #0 [304302ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [304316ms] -> ptrace(0x10, 0x0) #0 [304316ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [304318ms] -> ptrace$setopts(0x4200, 0x0, 0xfffffffffffffffb, 0x4) #0 [304318ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=64 #0 [304319ms] -> getpgrp(0x0) #0 [304319ms] <- getpgrp=0x9851 errno=14 cover=48 #0 [304320ms] -> ptrace$getregset(0x4204, 0x0, 0x202, 0x20000140) #0 [304320ms] <- ptrace$getregset=0xffffffffffffffff errno=3 cover=64 #0 [304321ms] -> kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) #0 [304321ms] <- kcmp=0xffffffffffffffff errno=3 cover=88 #0 [304322ms] -> ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x20000040) #0 [304322ms] <- ioctl$sock_SIOCGPGRP=0xffffffffffffffff errno=9 cover=45 #0 [304322ms] -> sched_getattr(0x0, 0x20000180, 0x38, 0x0) #0 [304322ms] <- sched_getattr=0x0 errno=14 cover=100 2021/11/11 15:09:59 result hanged=false: 2021/11/11 15:09:59 added new input for call #5 fork to corpus: r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x71) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x40200, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = fork() ptrace(0x10, r3) getpgrp(r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r4 = fork() ptrace(0x10, r4) ptrace$setopts(0x4200, r4, 0xfffffffffffffffb, 0x4) getpgrp(r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) kcmp(r3, r4, 0x0, r2, r1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0) 15:09:59 executing program 0: r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x71) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x40200, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = fork() ptrace(0x10, r3) getpgrp(r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r4 = fork() ptrace(0x10, r4) ptrace$setopts(0x4200, r4, 0xfffffffffffffffb, 0x4) getpgrp(r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) kcmp(r3, r4, 0x0, r2, r1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0) 2021/11/11 15:09:59 #0: triaging type=7 2021/11/11 15:09:59 triaging input for call #3 openat (new signal=1) [304345ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 38998 #0 [304357ms] -> fork() #0 [304381ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [304398ms] -> sched_getattr(0x0, 0x20000000, 0x38, 0x0) #0 [304402ms] <- sched_getattr=0x0 errno=14 cover=824 #0 [304403ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x71) #0 [304404ms] <- openat=0x3 errno=14 cover=6759 #0 [304406ms] -> openat(0xffffffffffffffff, 0x200001c0, 0x40200, 0x0) #0 [304407ms] <- openat=0xffffffffffffffff errno=26 cover=2958 #0 [304408ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [304408ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [304408ms] -> fork() #0 [304431ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [304446ms] -> ptrace(0x10, 0x0) #0 [304448ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [304449ms] -> getpgrp(0x0) #0 [304451ms] <- getpgrp=0x9856 errno=14 cover=48 #0 [304451ms] -> ptrace$getregset(0x4204, 0x0, 0x202, 0x20000140) #0 [304451ms] <- ptrace$getregset=0xffffffffffffffff errno=3 cover=64 #0 [304452ms] -> fork() #0 [304474ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [304491ms] -> ptrace(0x10, 0x0) #0 [304493ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [304495ms] -> ptrace$setopts(0x4200, 0x0, 0xfffffffffffffffb, 0x4) #0 [304496ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=64 #0 [304496ms] -> getpgrp(0x0) #0 [304496ms] <- getpgrp=0x9856 errno=14 cover=48 #0 [304497ms] -> ptrace$getregset(0x4204, 0x0, 0x202, 0x20000140) #0 [304497ms] <- ptrace$getregset=0xffffffffffffffff errno=3 cover=64 #0 [304498ms] -> kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) #0 [304498ms] <- kcmp=0xffffffffffffffff errno=3 cover=88 #0 [304498ms] -> ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x20000040) #0 [304498ms] <- ioctl$sock_SIOCGPGRP=0xffffffffffffffff errno=9 cover=45 #0 [304499ms] -> sched_getattr(0x0, 0x20000180, 0x38, 0x0) #0 [304499ms] <- sched_getattr=0x0 errno=14 cover=100 15:09:59 executing program 0: r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x71) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x40200, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = fork() ptrace(0x10, r3) getpgrp(r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r4 = fork() ptrace(0x10, r4) ptrace$setopts(0x4200, r4, 0xfffffffffffffffb, 0x4) getpgrp(r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) kcmp(r3, r4, 0x0, r2, r1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0) 2021/11/11 15:09:59 result hanged=false: [304523ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39003 #0 [304534ms] -> fork() #0 [304553ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [304569ms] -> sched_getattr(0x0, 0x20000000, 0x38, 0x0) #0 [304569ms] <- sched_getattr=0x0 errno=14 cover=791 #0 [304570ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x71) #0 [304572ms] <- openat=0x3 errno=14 cover=6746 #0 [304573ms] -> openat(0xffffffffffffffff, 0x200001c0, 0x40200, 0x0) #0 [304575ms] <- openat=0xffffffffffffffff errno=26 cover=3011 #0 [304576ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [304576ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [304576ms] -> fork() #0 [304599ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [304614ms] -> ptrace(0x10, 0x0) #0 [304616ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [304618ms] -> getpgrp(0x0) #0 [304618ms] <- getpgrp=0x985b errno=14 cover=48 #0 [304618ms] -> ptrace$getregset(0x4204, 0x0, 0x202, 0x20000140) #0 [304618ms] <- ptrace$getregset=0xffffffffffffffff errno=3 cover=64 #0 [304618ms] -> fork() #0 [304636ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [304651ms] -> ptrace(0x10, 0x0) #0 [304651ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [304652ms] -> ptrace$setopts(0x4200, 0x0, 0xfffffffffffffffb, 0x4) #0 [304652ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=64 #0 [304652ms] -> getpgrp(0x0) #0 [304652ms] <- getpgrp=0x985b errno=14 cover=48 #0 [304653ms] -> ptrace$getregset(0x4204, 0x0, 0x202, 0x20000140) #0 [304653ms] <- ptrace$getregset=0xffffffffffffffff errno=3 cover=64 #0 [304653ms] -> kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) #0 [304654ms] <- kcmp=0xffffffffffffffff errno=3 cover=88 #0 [304654ms] -> ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x20000040) #0 [304654ms] <- ioctl$sock_SIOCGPGRP=0xffffffffffffffff errno=9 cover=45 #0 [304654ms] -> sched_getattr(0x0, 0x20000180, 0x38, 0x0) #0 [304654ms] <- sched_getattr=0x0 errno=14 cover=100 15:10:00 executing program 0: r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x71) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x40200, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = fork() ptrace(0x10, r3) getpgrp(r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r4 = fork() ptrace(0x10, r4) ptrace$setopts(0x4200, r4, 0xfffffffffffffffb, 0x4) getpgrp(r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) kcmp(r3, r4, 0x0, r2, r1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0) 2021/11/11 15:09:59 result hanged=false: [304679ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39008 #0 [304690ms] -> fork() #0 [304712ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [304728ms] -> sched_getattr(0x0, 0x20000000, 0x38, 0x0) #0 [304732ms] <- sched_getattr=0x0 errno=14 cover=1490 #0 [304734ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x71) #0 [304735ms] <- openat=0x3 errno=14 cover=6717 #0 [304737ms] -> openat(0xffffffffffffffff, 0x200001c0, 0x40200, 0x0) #0 [304739ms] <- openat=0xffffffffffffffff errno=26 cover=3006 #0 [304739ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [304740ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [304741ms] -> fork() #0 [304760ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [304774ms] -> ptrace(0x10, 0x0) #0 [304775ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [304775ms] -> getpgrp(0x0) #0 [304775ms] <- getpgrp=0x9860 errno=14 cover=48 #0 [304775ms] -> ptrace$getregset(0x4204, 0x0, 0x202, 0x20000140) #0 [304775ms] <- ptrace$getregset=0xffffffffffffffff errno=3 cover=64 #0 [304775ms] -> fork() #0 [304793ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [304808ms] -> ptrace(0x10, 0x0) #0 [304812ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [304812ms] -> ptrace$setopts(0x4200, 0x0, 0xfffffffffffffffb, 0x4) #0 [304812ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=64 #0 [304812ms] -> getpgrp(0x0) #0 [304812ms] <- getpgrp=0x9860 errno=14 cover=48 #0 [304812ms] -> ptrace$getregset(0x4204, 0x0, 0x202, 0x20000140) #0 [304812ms] <- ptrace$getregset=0xffffffffffffffff errno=3 cover=64 #0 [304812ms] -> kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) #0 [304812ms] <- kcmp=0xffffffffffffffff errno=3 cover=88 #0 [304812ms] -> ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x20000040) #0 [304812ms] <- ioctl$sock_SIOCGPGRP=0xffffffffffffffff errno=9 cover=45 #0 [304812ms] -> sched_getattr(0x0, 0x20000180, 0x38, 0x0) #0 [304812ms] <- sched_getattr=0x0 errno=14 cover=100 2021/11/11 15:10:00 result hanged=false: 2021/11/11 15:10:00 added new input for call #3 openat to corpus: r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x71) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x40200, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = fork() ptrace(0x10, r3) getpgrp(r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r4 = fork() ptrace(0x10, r4) ptrace$setopts(0x4200, r4, 0xfffffffffffffffb, 0x4) getpgrp(r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) kcmp(r3, r4, 0x0, r2, r1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0) 2021/11/11 15:10:00 #0: triaging type=7 15:10:00 executing program 0: r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x71) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x40200, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = fork() ptrace(0x10, r3) getpgrp(r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r4 = fork() ptrace(0x10, r4) ptrace$setopts(0x4200, r4, 0xfffffffffffffffb, 0x4) getpgrp(r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) kcmp(r3, r4, 0x0, r2, r1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0) 2021/11/11 15:10:00 triaging input for call #0 fork (new signal=2) [304839ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39013 #0 [304848ms] -> fork() #0 [304868ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [304885ms] -> sched_getattr(0x0, 0x20000000, 0x38, 0x0) #0 [304889ms] <- sched_getattr=0x0 errno=14 cover=838 #0 [304889ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x71) #0 [304891ms] <- openat=0x3 errno=14 cover=6724 #0 [304892ms] -> openat(0xffffffffffffffff, 0x200001c0, 0x40200, 0x0) #0 [304893ms] <- openat=0xffffffffffffffff errno=26 cover=2958 #0 [304895ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [304895ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [304895ms] -> fork() #0 [304914ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [304930ms] -> ptrace(0x10, 0x0) #0 [304930ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [304930ms] -> getpgrp(0x0) #0 [304930ms] <- getpgrp=0x9865 errno=14 cover=48 #0 [304931ms] -> ptrace$getregset(0x4204, 0x0, 0x202, 0x20000140) #0 [304931ms] <- ptrace$getregset=0xffffffffffffffff errno=3 cover=64 #0 [304932ms] -> fork() #0 [304954ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [304968ms] -> ptrace(0x10, 0x0) #0 [304969ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [304969ms] -> ptrace$setopts(0x4200, 0x0, 0xfffffffffffffffb, 0x4) #0 [304969ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=64 #0 [304969ms] -> getpgrp(0x0) #0 [304969ms] <- getpgrp=0x9865 errno=14 cover=48 #0 [304969ms] -> ptrace$getregset(0x4204, 0x0, 0x202, 0x20000140) #0 [304969ms] <- ptrace$getregset=0xffffffffffffffff errno=3 cover=64 #0 [304969ms] -> kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) #0 [304969ms] <- kcmp=0xffffffffffffffff errno=3 cover=88 #0 [304969ms] -> ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x20000040) #0 [304969ms] <- ioctl$sock_SIOCGPGRP=0xffffffffffffffff errno=9 cover=45 #0 [304969ms] -> sched_getattr(0x0, 0x20000180, 0x38, 0x0) #0 [304969ms] <- sched_getattr=0x0 errno=14 cover=100 2021/11/11 15:10:00 result hanged=false: 15:10:00 executing program 0: r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x71) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x40200, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = fork() ptrace(0x10, r3) getpgrp(r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r4 = fork() ptrace(0x10, r4) ptrace$setopts(0x4200, r4, 0xfffffffffffffffb, 0x4) getpgrp(r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) kcmp(r3, r4, 0x0, r2, r1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0) [304992ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39018 #0 [305002ms] -> fork() #0 [305022ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [305039ms] -> sched_getattr(0x0, 0x20000000, 0x38, 0x0) #0 [305043ms] <- sched_getattr=0x0 errno=14 cover=824 #0 [305045ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x71) #0 [305046ms] <- openat=0x3 errno=14 cover=6763 #0 [305047ms] -> openat(0xffffffffffffffff, 0x200001c0, 0x40200, 0x0) #0 [305049ms] <- openat=0xffffffffffffffff errno=26 cover=2984 #0 [305050ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [305051ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [305051ms] -> fork() #0 [305073ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [305087ms] -> ptrace(0x10, 0x0) #0 [305088ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [305088ms] -> getpgrp(0x0) #0 [305088ms] <- getpgrp=0x986a errno=14 cover=48 #0 [305088ms] -> ptrace$getregset(0x4204, 0x0, 0x202, 0x20000140) #0 [305088ms] <- ptrace$getregset=0xffffffffffffffff errno=3 cover=64 #0 [305088ms] -> fork() #0 [305106ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [305120ms] -> ptrace(0x10, 0x0) #0 [305124ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [305125ms] -> ptrace$setopts(0x4200, 0x0, 0xfffffffffffffffb, 0x4) #0 [305126ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=64 #0 [305126ms] -> getpgrp(0x0) #0 [305126ms] <- getpgrp=0x986a errno=14 cover=48 #0 [305127ms] -> ptrace$getregset(0x4204, 0x0, 0x202, 0x20000140) #0 [305127ms] <- ptrace$getregset=0xffffffffffffffff errno=3 cover=64 #0 [305128ms] -> kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) #0 [305128ms] <- kcmp=0xffffffffffffffff errno=3 cover=88 #0 [305129ms] -> ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x20000040) #0 [305129ms] <- ioctl$sock_SIOCGPGRP=0xffffffffffffffff errno=9 cover=45 #0 [305129ms] -> sched_getattr(0x0, 0x20000180, 0x38, 0x0) #0 [305130ms] <- sched_getattr=0x0 errno=14 cover=100 2021/11/11 15:10:00 result hanged=false: 15:10:00 executing program 0: r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x71) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x40200, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = fork() ptrace(0x10, r3) getpgrp(r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r4 = fork() ptrace(0x10, r4) ptrace$setopts(0x4200, r4, 0xfffffffffffffffb, 0x4) getpgrp(r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) kcmp(r3, r4, 0x0, r2, r1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0) [305153ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39023 #0 [305163ms] -> fork() #0 [305182ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [305197ms] -> sched_getattr(0x0, 0x20000000, 0x38, 0x0) #0 [305197ms] <- sched_getattr=0x0 errno=14 cover=780 #0 [305197ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x71) #0 [305198ms] <- openat=0x3 errno=14 cover=6700 #0 [305198ms] -> openat(0xffffffffffffffff, 0x200001c0, 0x40200, 0x0) #0 [305199ms] <- openat=0xffffffffffffffff errno=26 cover=2954 #0 [305199ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [305200ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [305200ms] -> fork() #0 [305218ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [305234ms] -> ptrace(0x10, 0x0) #0 [305234ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [305235ms] -> getpgrp(0x0) #0 [305235ms] <- getpgrp=0x986f errno=14 cover=48 #0 [305235ms] -> ptrace$getregset(0x4204, 0x0, 0x202, 0x20000140) #0 [305235ms] <- ptrace$getregset=0xffffffffffffffff errno=3 cover=64 #0 [305235ms] -> fork() #0 [305258ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [305272ms] -> ptrace(0x10, 0x0) #0 [305275ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [305275ms] -> ptrace$setopts(0x4200, 0x0, 0xfffffffffffffffb, 0x4) #0 [305275ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=64 #0 [305275ms] -> getpgrp(0x0) #0 [305275ms] <- getpgrp=0x986f errno=14 cover=48 #0 [305275ms] -> ptrace$getregset(0x4204, 0x0, 0x202, 0x20000140) #0 [305275ms] <- ptrace$getregset=0xffffffffffffffff errno=3 cover=64 #0 [305275ms] -> kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) #0 [305275ms] <- kcmp=0xffffffffffffffff errno=3 cover=88 #0 [305275ms] -> ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x20000040) #0 [305275ms] <- ioctl$sock_SIOCGPGRP=0xffffffffffffffff errno=9 cover=45 #0 [305275ms] -> sched_getattr(0x0, 0x20000180, 0x38, 0x0) #0 [305276ms] <- sched_getattr=0x0 errno=14 cover=100 2021/11/11 15:10:00 result hanged=false: 2021/11/11 15:10:00 added new input for call #0 fork to corpus: r0 = fork() sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x71) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x40200, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = fork() ptrace(0x10, r3) getpgrp(r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r4 = fork() ptrace(0x10, r4) ptrace$setopts(0x4200, r4, 0xfffffffffffffffb, 0x4) getpgrp(r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) kcmp(r3, r4, 0x0, r2, r1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0) 15:10:00 executing program 0: ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0x8, 0x80, 0xfff}) r0 = syz_open_dev$vcsa(&(0x7f0000000700), 0xa6, 0x0) r1 = fsmount(r0, 0x0, 0x89) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8004}, 0x4004144) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000340)="a407c3efc1edfab7037255db440500824001767ee5522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad0600", 0xfffff, r2) [305309ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39028 #0 [305318ms] -> ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x20000000) #0 [305318ms] <- ioctl$KDSKBENT=0xffffffffffffffff errno=9 cover=45 #0 [305318ms] -> syz_open_dev$vcsa(0x20000700, 0xa6, 0x0) #0 [305319ms] <- syz_open_dev$vcsa=0x3 errno=14 cover=1198 #0 [305319ms] -> fsmount(0x3, 0x0, 0x89) #0 [305319ms] <- fsmount=0xffffffffffffffff errno=22 cover=111 #0 [305320ms] -> sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x20000180, 0x4004144) #0 [305320ms] <- sendmsg$MPTCP_PM_CMD_ADD_ADDR=0xffffffffffffffff errno=9 cover=102 #0 [305320ms] -> fcntl$dupfd(0x3, 0x0, 0xffffffffffffffff) #0 [305320ms] <- fcntl$dupfd=0xffffffffffffffff errno=22 cover=69 #0 [305321ms] -> clone3(0x200008c0, 0x58) #0 [305321ms] <- clone3=0xffffffffffffffff errno=11 cover=4724 #0 [305322ms] -> add_key$keyring(0x200002c0, 0x20000300, 0x0, 0x0, 0xfffffffffffffffd) #0 [305322ms] <- add_key$keyring=0x36e1c534 errno=14 cover=1129 #0 [305323ms] -> add_key(0x200000c0, 0x20000100, 0x20000340, 0xfffff, 0x36e1c534) [ 375.239808] Invalid option length (1047604) for dns_resolver key #0 [305329ms] <- add_key=0xffffffffffffffff errno=22 cover=43882 enabling collider #0 [305329ms] -> ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x20000000) #0 [305329ms] <- ioctl$KDSKBENT=0xffffffffffffffff errno=9 cover=45 #0 [305330ms] -> syz_open_dev$vcsa(0x20000700, 0xa6, 0x0) #0 [305330ms] <- syz_open_dev$vcsa=0x3 errno=14 cover=1179 pthread_create failed (errno 11) 2021/11/11 15:10:00 result hanged=false: 2021/11/11 15:10:00 #0: triaging type=7 2021/11/11 15:10:00 triaging input for call #2 fsmount (new signal=1) 15:10:00 executing program 0: ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0x8, 0x80, 0xfff}) r0 = syz_open_dev$vcsa(&(0x7f0000000700), 0xa6, 0x0) r1 = fsmount(r0, 0x0, 0x89) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8004}, 0x4004144) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000340)="a407c3efc1edfab7037255db440500824001767ee5522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad0600", 0xfffff, r2) [305399ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39131 #0 [305408ms] -> ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x20000000) #0 [305409ms] <- ioctl$KDSKBENT=0xffffffffffffffff errno=9 cover=45 #0 [305409ms] -> syz_open_dev$vcsa(0x20000700, 0xa6, 0x0) #0 [305410ms] <- syz_open_dev$vcsa=0x3 errno=14 cover=1175 #0 [305410ms] -> fsmount(0x3, 0x0, 0x89) #0 [305411ms] <- fsmount=0xffffffffffffffff errno=22 cover=125 #0 [305412ms] -> sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x20000180, 0x4004144) #0 [305412ms] <- sendmsg$MPTCP_PM_CMD_ADD_ADDR=0xffffffffffffffff errno=9 cover=52 #0 [305413ms] -> fcntl$dupfd(0x3, 0x0, 0xffffffffffffffff) #0 [305413ms] <- fcntl$dupfd=0xffffffffffffffff errno=22 cover=69 #0 [305413ms] -> clone3(0x200008c0, 0x58) #0 [305415ms] <- clone3=0xffffffffffffffff errno=11 cover=4865 #0 [305416ms] -> add_key$keyring(0x200002c0, 0x20000300, 0x0, 0x0, 0xfffffffffffffffd) #0 [305416ms] <- add_key$keyring=0xd230ddb errno=14 cover=1099 #0 [305417ms] -> add_key(0x200000c0, 0x20000100, 0x20000340, 0xfffff, 0xd230ddb) [ 375.336130] Invalid option length (1047604) for dns_resolver key #0 [305425ms] <- add_key=0xffffffffffffffff errno=22 cover=39353 15:10:00 executing program 0: ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0x8, 0x80, 0xfff}) r0 = syz_open_dev$vcsa(&(0x7f0000000700), 0xa6, 0x0) r1 = fsmount(r0, 0x0, 0x89) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8004}, 0x4004144) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000340)="a407c3efc1edfab7037255db440500824001767ee5522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad0600", 0xfffff, r2) 2021/11/11 15:10:00 result hanged=false: [305450ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39134 #0 [305461ms] -> ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x20000000) #0 [305464ms] <- ioctl$KDSKBENT=0xffffffffffffffff errno=9 cover=45 #0 [305466ms] -> syz_open_dev$vcsa(0x20000700, 0xa6, 0x0) #0 [305467ms] <- syz_open_dev$vcsa=0x3 errno=14 cover=1155 #0 [305467ms] -> fsmount(0x3, 0x0, 0x89) #0 [305467ms] <- fsmount=0xffffffffffffffff errno=22 cover=111 #0 [305468ms] -> sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x20000180, 0x4004144) #0 [305468ms] <- sendmsg$MPTCP_PM_CMD_ADD_ADDR=0xffffffffffffffff errno=9 cover=52 #0 [305468ms] -> fcntl$dupfd(0x3, 0x0, 0xffffffffffffffff) #0 [305468ms] <- fcntl$dupfd=0xffffffffffffffff errno=22 cover=69 #0 [305469ms] -> clone3(0x200008c0, 0x58) #0 [305470ms] <- clone3=0xffffffffffffffff errno=11 cover=4698 #0 [305472ms] -> add_key$keyring(0x200002c0, 0x20000300, 0x0, 0x0, 0xfffffffffffffffd) #0 [305472ms] <- add_key$keyring=0xa4c2691 errno=14 cover=1084 #0 [305473ms] -> add_key(0x200000c0, 0x20000100, 0x20000340, 0xfffff, 0xa4c2691) [ 375.391241] Invalid option length (1047604) for dns_resolver key #0 [305480ms] <- add_key=0xffffffffffffffff errno=22 cover=39315 2021/11/11 15:10:00 result hanged=false: 15:10:00 executing program 0: ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0x8, 0x80, 0xfff}) r0 = syz_open_dev$vcsa(&(0x7f0000000700), 0xa6, 0x0) r1 = fsmount(r0, 0x0, 0x89) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8004}, 0x4004144) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000340)="a407c3efc1edfab7037255db440500824001767ee5522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad0600", 0xfffff, r2) [305506ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39137 #0 [305516ms] -> ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x20000000) #0 [305519ms] <- ioctl$KDSKBENT=0xffffffffffffffff errno=9 cover=45 #0 [305521ms] -> syz_open_dev$vcsa(0x20000700, 0xa6, 0x0) #0 [305522ms] <- syz_open_dev$vcsa=0x3 errno=14 cover=1144 #0 [305523ms] -> fsmount(0x3, 0x0, 0x89) #0 [305523ms] <- fsmount=0xffffffffffffffff errno=22 cover=111 #0 [305523ms] -> sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x20000180, 0x4004144) #0 [305523ms] <- sendmsg$MPTCP_PM_CMD_ADD_ADDR=0xffffffffffffffff errno=9 cover=52 #0 [305523ms] -> fcntl$dupfd(0x3, 0x0, 0xffffffffffffffff) #0 [305525ms] <- fcntl$dupfd=0xffffffffffffffff errno=22 cover=69 #0 [305525ms] -> clone3(0x200008c0, 0x58) #0 [305527ms] <- clone3=0xffffffffffffffff errno=11 cover=4901 #0 [305528ms] -> add_key$keyring(0x200002c0, 0x20000300, 0x0, 0x0, 0xfffffffffffffffd) #0 [305528ms] <- add_key$keyring=0x2aac800 errno=14 cover=1175 #0 [305529ms] -> add_key(0x200000c0, 0x20000100, 0x20000340, 0xfffff, 0x2aac800) [ 375.445922] Invalid option length (1047604) for dns_resolver key #0 [305536ms] <- add_key=0xffffffffffffffff errno=22 cover=39332 2021/11/11 15:10:00 result hanged=false: 2021/11/11 15:10:00 added new input for call #2 fsmount to corpus: ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0x8, 0x80, 0xfff}) r0 = syz_open_dev$vcsa(&(0x7f0000000700), 0xa6, 0x0) r1 = fsmount(r0, 0x0, 0x89) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8004}, 0x4004144) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000340)="a407c3efc1edfab7037255db440500824001767ee5522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad0600", 0xfffff, r2) 15:10:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_vs_stats\x00') sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x21c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r1 = msgget$private(0x0, 0x0) r2 = msgget$private(0x0, 0x0) msgrcv(r2, &(0x7f00000003c0)={0x0, ""/158}, 0xa6, 0x0, 0x0) msgrcv(r1, &(0x7f0000000240)={0x0, ""/155}, 0xa3, 0x0, 0x3800) msgctl$IPC_SET(r2, 0x1, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) msgsnd(r2, &(0x7f0000000180)={0x2}, 0x8, 0x0) msgsnd(r2, &(0x7f00000000c0)={0x0, "0e778761303665e935190cb32887f60906be1f39a1898e3025a56a4dabdfdba5594b22ee79172a5ed4cc203e8279c3d98896ea82150f87d08a033e40179690ca4e8f89aa6572262992e3718a2388015df25110830cae674da83729b5e24c39c2ce1079d79453cd1888c536bd2c8f15a56aa0e060484e8f72864aa949099ce2b1449bf0eba6dbd3e1d661ee673f4dc3f1ed9522ca5fa9aae4e1b7e8d91f0919cb7ed0c7abcd8c247b68488aee5a9e80a8dd4467411656"}, 0xbe, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000001000"], 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) [305566ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39140 #0 [305577ms] -> syz_open_procfs(0x0, 0x20000300) #0 [305581ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=4983 #0 [305583ms] -> sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x200006c0, 0x10) #0 [305583ms] <- sendmsg$DEVLINK_CMD_TRAP_GET=0xffffffffffffffff errno=9 cover=52 #0 [305583ms] -> msgget$private(0x0, 0x0) #0 [305583ms] <- msgget$private=0x5 errno=14 cover=354 #0 [305583ms] -> msgget$private(0x0, 0x0) #0 [305584ms] <- msgget$private=0x6 errno=14 cover=357 #0 [305584ms] -> msgrcv(0x6, 0x200003c0, 0xa6, 0x0, 0x0) pthread_create failed (errno 11) 15:10:01 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) 2021/11/11 15:10:01 result hanged=false: 2021/11/11 15:10:01 poll: candidates=8 inputs=0 signal=0 [306647ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39242 #0 [306658ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [306659ms] <- perf_event_open=0x3 errno=14 cover=4097 #0 [306660ms] -> getpriority(0x2, 0x0) #0 [306661ms] <- getpriority=0x14 errno=14 cover=9826 enabling collider #0 [306661ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [306663ms] <- perf_event_open=0x3 errno=14 cover=4119 15:10:02 executing program 0: syz_io_uring_setup(0x2aa7, &(0x7f0000000780)={0x0, 0x7bc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000000800), 0x0) 2021/11/11 15:10:02 result hanged=false: [306687ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39244 #0 [306697ms] -> syz_io_uring_setup(0x2aa7, 0x20000780, 0x20ffd000, 0x20ffa000, 0x20000800, 0x0) SIGSEGV on (nil), skipping #0 [306705ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=15913 enabling collider #0 [306707ms] -> syz_io_uring_setup(0x2aa7, 0x20000780, 0x20ffd000, 0x20ffa000, 0x20000800, 0x0) SIGSEGV on (nil), skipping #0 [306709ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=18655 15:10:02 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x14) 2021/11/11 15:10:02 result hanged=false: [306733ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39246 #0 [306744ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000080, 0x1, 0x0) #0 [306749ms] <- openat$tcp_mem=0x3 errno=14 cover=2598 #0 [306750ms] -> write$binfmt_script(0x3, 0x200000c0, 0x14) #0 [306751ms] <- write$binfmt_script=0xffffffffffffffff errno=22 cover=1215 enabling collider #0 [306752ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000080, 0x1, 0x0) #0 [306753ms] <- openat$tcp_mem=0x3 errno=14 cover=1734 #0 [306754ms] -> write$binfmt_script(0x3, 0x200000c0, 0x14) #0 [306754ms] <- write$binfmt_script=0xffffffffffffffff errno=9 cover=48 15:10:02 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x14) 2021/11/11 15:10:02 result hanged=false: 2021/11/11 15:10:02 #0: triaging type=7 2021/11/11 15:10:02 triaging input for call #0 openat$tcp_mem (new signal=2) [306776ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39248 #0 [306786ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000080, 0x1, 0x0) #0 [306787ms] <- openat$tcp_mem=0x3 errno=14 cover=1655 #0 [306789ms] -> write$binfmt_script(0x3, 0x200000c0, 0x14) #0 [306789ms] <- write$binfmt_script=0xffffffffffffffff errno=22 cover=577 15:10:02 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x14) 2021/11/11 15:10:02 result hanged=false: [306813ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39250 #0 [306824ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000080, 0x1, 0x0) #0 [306824ms] <- openat$tcp_mem=0x3 errno=14 cover=1688 #0 [306826ms] -> write$binfmt_script(0x3, 0x200000c0, 0x14) #0 [306826ms] <- write$binfmt_script=0xffffffffffffffff errno=22 cover=566 15:10:02 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x14) 2021/11/11 15:10:02 result hanged=false: [306850ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39252 #0 [306861ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000080, 0x1, 0x0) #0 [306864ms] <- openat$tcp_mem=0x3 errno=14 cover=1678 #0 [306866ms] -> write$binfmt_script(0x3, 0x200000c0, 0x14) #0 [306868ms] <- write$binfmt_script=0xffffffffffffffff errno=22 cover=566 2021/11/11 15:10:02 result hanged=false: 2021/11/11 15:10:02 added new input for call #0 openat$tcp_mem to corpus: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x14) 15:10:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2202, 0x0) [306891ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39254 #0 [306901ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [306901ms] <- openat=0x3 errno=14 cover=6897 #0 [306902ms] -> mount(0x20000080, 0x200000c0, 0x0, 0x209000, 0x0) #0 [306903ms] <- mount=0x0 errno=14 cover=3182 #0 [306903ms] -> openat(0xffffffffffffff9c, 0x20004c40, 0x84e00, 0x0) #0 [306921ms] <- openat=0x4 errno=14 cover=3413 #0 [306922ms] -> ioctl$SG_SET_TIMEOUT(0x4, 0x2202, 0x0) #0 [306922ms] <- ioctl$SG_SET_TIMEOUT=0x0 errno=14 cover=177 enabling collider #0 [306945ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [307001ms] <- openat=0xffffffffffffffff errno=123 cover=8633 #0 [307004ms] -> mount(0x20000080, 0x200000c0, 0x0, 0x209000, 0x0) #0 [307009ms] <- mount=0x0 errno=14 cover=2305 pthread_create failed (errno 11) 15:10:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2202, 0x0) 2021/11/11 15:10:02 result hanged=false: 2021/11/11 15:10:02 #0: triaging type=7 2021/11/11 15:10:02 triaging input for call #3 ioctl$SG_SET_TIMEOUT (new signal=3) umount(./2344/file1) umount(./2344/file1) [307073ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39356 #0 [307084ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [307088ms] <- openat=0x3 errno=14 cover=6700 #0 [307089ms] -> mount(0x20000080, 0x200000c0, 0x0, 0x209000, 0x0) #0 [307090ms] <- mount=0x0 errno=14 cover=2499 #0 [307090ms] -> openat(0xffffffffffffff9c, 0x20004c40, 0x84e00, 0x0) #0 [307108ms] <- openat=0x4 errno=14 cover=3388 #0 [307109ms] -> ioctl$SG_SET_TIMEOUT(0x4, 0x2202, 0x0) #0 [307109ms] <- ioctl$SG_SET_TIMEOUT=0x0 errno=14 cover=177 15:10:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2202, 0x0) 2021/11/11 15:10:02 result hanged=false: umount(./2345/file1) [307152ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39358 #0 [307162ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [307166ms] <- openat=0x3 errno=14 cover=6727 #0 [307168ms] -> mount(0x20000080, 0x200000c0, 0x0, 0x209000, 0x0) #0 [307169ms] <- mount=0x0 errno=14 cover=2514 #0 [307170ms] -> openat(0xffffffffffffff9c, 0x20004c40, 0x84e00, 0x0) #0 [307188ms] <- openat=0x4 errno=14 cover=3559 #0 [307191ms] -> ioctl$SG_SET_TIMEOUT(0x4, 0x2202, 0x0) #0 [307191ms] <- ioctl$SG_SET_TIMEOUT=0x0 errno=14 cover=177 2021/11/11 15:10:02 result hanged=false: 15:10:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2202, 0x0) umount(./2346/file1) [307235ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39360 #0 [307246ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [307247ms] <- openat=0x3 errno=14 cover=6780 #0 [307249ms] -> mount(0x20000080, 0x200000c0, 0x0, 0x209000, 0x0) #0 [307250ms] <- mount=0x0 errno=14 cover=2560 #0 [307251ms] -> openat(0xffffffffffffff9c, 0x20004c40, 0x84e00, 0x0) #0 [307270ms] <- openat=0x4 errno=14 cover=3599 #0 [307271ms] -> ioctl$SG_SET_TIMEOUT(0x4, 0x2202, 0x0) #0 [307271ms] <- ioctl$SG_SET_TIMEOUT=0x0 errno=14 cover=177 2021/11/11 15:10:02 result hanged=false: 2021/11/11 15:10:02 added new input for call #3 ioctl$SG_SET_TIMEOUT to corpus: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2202, 0x0) 15:10:02 executing program 0: eventfd2(0x0, 0x0) umount(./2347/file1) [307319ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39362 #0 [307330ms] -> eventfd2(0x0, 0x0) #0 [307332ms] <- eventfd2=0x3 errno=14 cover=554 enabling collider #0 [307333ms] -> eventfd2(0x0, 0x0) #0 [307333ms] <- eventfd2=0x3 errno=14 cover=553 2021/11/11 15:10:02 result hanged=false: 15:10:02 executing program 0: syz_io_uring_setup(0x6bff, &(0x7f0000000880), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) [307354ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39364 #0 [307363ms] -> syz_io_uring_setup(0x6bff, 0x20000880, 0x20ffc000, 0x20ffd000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [307368ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=11975 enabling collider #0 [307369ms] -> syz_io_uring_setup(0x6bff, 0x20000880, 0x20ffc000, 0x20ffd000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [307371ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=14879 15:10:02 executing program 0: modify_ldt$write(0x1, &(0x7f00000000c0), 0x10) 2021/11/11 15:10:02 result hanged=false: [307393ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39366 #0 [307403ms] -> modify_ldt$write(0x1, 0x200000c0, 0x10) #0 [307405ms] <- modify_ldt$write=0x0 errno=14 cover=186 enabling collider #0 [307406ms] -> modify_ldt$write(0x1, 0x200000c0, 0x10) #0 [307406ms] <- modify_ldt$write=0x0 errno=14 cover=345 15:10:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x31, 0xe, [@chsw_timing={0x1c, 0x4}, @prep={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @device_a, 0x0, 0x0, @broadcast}}]}]]}, 0x50}}, 0x0) 2021/11/11 15:10:02 result hanged=false: [307431ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39368 #0 [307441ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [307444ms] <- socket$nl_generic=0x3 errno=14 cover=1423 #0 [307445ms] -> syz_genetlink_get_family_id$nl80211(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [307449ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11780 #0 [307450ms] -> sendmsg$NL80211_CMD_START_AP(0x3, 0x200001c0, 0x0) #0 [307451ms] <- sendmsg$NL80211_CMD_START_AP=0x50 errno=14 cover=1849 enabling collider #0 [307452ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [307452ms] <- socket$nl_generic=0x3 errno=14 cover=1400 #0 [307454ms] -> syz_genetlink_get_family_id$nl80211(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [307455ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11286 pthread_create failed (errno 11) 15:10:02 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x9) 2021/11/11 15:10:02 result hanged=false: 2021/11/11 15:10:02 poll: candidates=8 inputs=0 signal=0 [307514ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39470 #0 [307525ms] -> openat$procfs(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [307526ms] <- openat$procfs=0x3 errno=14 cover=2376 #0 [307526ms] -> creat(0x200002c0, 0x0) #0 [307527ms] <- creat=0x4 errno=14 cover=6977 #0 [307527ms] -> sendfile(0x4, 0x3, 0x0, 0x9) #0 [307528ms] <- sendfile=0x9 errno=14 cover=13661 enabling collider #0 [307529ms] -> openat$procfs(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [307529ms] <- openat$procfs=0x3 errno=14 cover=1464 #0 [307530ms] -> creat(0x200002c0, 0x0) #0 [307530ms] <- creat=0x4 errno=14 cover=6574 pthread_create failed (errno 11) 15:10:02 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xffffffff}]}) 2021/11/11 15:10:02 result hanged=false: [307594ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39572 #0 [307603ms] -> creat(0x20000040, 0x0) #0 [307604ms] <- creat=0x3 errno=14 cover=6793 #0 [307605ms] -> ioctl$FS_IOC_GETFSMAP(0x3, 0xc0c0583b, 0x20000080) #0 [307607ms] <- ioctl$FS_IOC_GETFSMAP=0x0 errno=14 cover=35909 enabling collider #0 [307608ms] -> creat(0x20000040, 0x0) #0 [307608ms] <- creat=0x3 errno=14 cover=4933 2021/11/11 15:10:02 result hanged=false: 2021/11/11 15:10:02 #0: triaging type=7 15:10:02 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xffffffff}]}) 2021/11/11 15:10:02 triaging input for call #0 creat (new signal=4) [307633ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39574 #0 [307643ms] -> creat(0x20000040, 0x0) #0 [307645ms] <- creat=0x3 errno=14 cover=6666 #0 [307648ms] -> ioctl$FS_IOC_GETFSMAP(0x3, 0xc0c0583b, 0x20000080) #0 [307653ms] <- ioctl$FS_IOC_GETFSMAP=0x0 errno=14 cover=35906 2021/11/11 15:10:03 result hanged=false: 15:10:03 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xffffffff}]}) [307678ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39576 #0 [307687ms] -> creat(0x20000040, 0x0) #0 [307691ms] <- creat=0x3 errno=14 cover=6747 #0 [307693ms] -> ioctl$FS_IOC_GETFSMAP(0x3, 0xc0c0583b, 0x20000080) #0 [307697ms] <- ioctl$FS_IOC_GETFSMAP=0x0 errno=14 cover=36037 2021/11/11 15:10:03 result hanged=false: 15:10:03 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xffffffff}]}) [307721ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39578 #0 [307731ms] -> creat(0x20000040, 0x0) #0 [307732ms] <- creat=0x3 errno=14 cover=6746 #0 [307734ms] -> ioctl$FS_IOC_GETFSMAP(0x3, 0xc0c0583b, 0x20000080) #0 [307736ms] <- ioctl$FS_IOC_GETFSMAP=0x0 errno=14 cover=35915 2021/11/11 15:10:03 result hanged=false: 2021/11/11 15:10:03 added new input for call #0 creat to corpus: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xffffffff}]}) 15:10:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') ftruncate(r0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100000001) [307769ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39580 #0 [307778ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [307782ms] <- perf_event_open=0x3 errno=14 cover=3934 #0 [307782ms] -> syz_open_procfs(0xffffffffffffffff, 0x200000c0) #0 [307784ms] <- syz_open_procfs=0x4 errno=14 cover=9448 #0 [307784ms] -> ftruncate(0x4, 0x0) #0 [307784ms] <- ftruncate=0x0 errno=14 cover=449 #0 [307785ms] -> ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) #0 [307786ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=9 cover=74 #0 [307786ms] -> pread64(0xffffffffffffffff, 0x0, 0x0, 0x100000001) #0 [307786ms] <- pread64=0xffffffffffffffff errno=9 cover=75 enabling collider #0 [307787ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [307788ms] <- perf_event_open=0x3 errno=14 cover=4106 #0 [307789ms] -> syz_open_procfs(0xffffffffffffffff, 0x200000c0) #0 [307790ms] <- syz_open_procfs=0x4 errno=14 cover=5804 pthread_create failed (errno 11) 15:10:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') ftruncate(r0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100000001) 2021/11/11 15:10:03 result hanged=false: 2021/11/11 15:10:03 #0: triaging type=7 2021/11/11 15:10:03 triaging input for call #2 ftruncate (new signal=1) [307842ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39682 #0 [307851ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [307855ms] <- perf_event_open=0x3 errno=14 cover=3923 #0 [307857ms] -> syz_open_procfs(0xffffffffffffffff, 0x200000c0) #0 [307859ms] <- syz_open_procfs=0x4 errno=14 cover=4014 #0 [307861ms] -> ftruncate(0x4, 0x0) #0 [307861ms] <- ftruncate=0x0 errno=14 cover=275 #0 [307861ms] -> ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) #0 [307861ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=9 cover=45 #0 [307862ms] -> pread64(0xffffffffffffffff, 0x0, 0x0, 0x100000001) #0 [307862ms] <- pread64=0xffffffffffffffff errno=9 cover=75 2021/11/11 15:10:03 result hanged=false: 15:10:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') ftruncate(r0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100000001) [307881ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39684 #0 [307890ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [307896ms] <- perf_event_open=0x3 errno=14 cover=4196 #0 [307897ms] -> syz_open_procfs(0xffffffffffffffff, 0x200000c0) #0 [307897ms] <- syz_open_procfs=0x4 errno=14 cover=12500 #0 [307898ms] -> ftruncate(0x4, 0x0) #0 [307899ms] <- ftruncate=0x0 errno=14 cover=449 #0 [307899ms] -> ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) #0 [307899ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=9 cover=74 #0 [307899ms] -> pread64(0xffffffffffffffff, 0x0, 0x0, 0x100000001) #0 [307900ms] <- pread64=0xffffffffffffffff errno=9 cover=75 15:10:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') ftruncate(r0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100000001) 2021/11/11 15:10:03 result hanged=false: [307920ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39686 #0 [307927ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [307929ms] <- perf_event_open=0x3 errno=14 cover=4236 #0 [307929ms] -> syz_open_procfs(0xffffffffffffffff, 0x200000c0) #0 [307930ms] <- syz_open_procfs=0x4 errno=14 cover=11964 #0 [307931ms] -> ftruncate(0x4, 0x0) #0 [307932ms] <- ftruncate=0x0 errno=14 cover=449 #0 [307932ms] -> ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) #0 [307932ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=9 cover=74 #0 [307932ms] -> pread64(0xffffffffffffffff, 0x0, 0x0, 0x100000001) #0 [307933ms] <- pread64=0xffffffffffffffff errno=9 cover=75 2021/11/11 15:10:03 result hanged=false: 2021/11/11 15:10:03 added new input for call #2 ftruncate to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') ftruncate(r0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100000001) 15:10:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') ftruncate(r0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100000001) 2021/11/11 15:10:03 #0: triaging type=7 2021/11/11 15:10:03 triaging input for call #1 syz_open_procfs (new signal=2) [307953ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39688 #0 [307961ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [307966ms] <- perf_event_open=0x3 errno=14 cover=4218 #0 [307966ms] -> syz_open_procfs(0xffffffffffffffff, 0x200000c0) #0 [307967ms] <- syz_open_procfs=0x4 errno=14 cover=3992 #0 [307968ms] -> ftruncate(0x4, 0x0) #0 [307968ms] <- ftruncate=0x0 errno=14 cover=275 #0 [307968ms] -> ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) #0 [307968ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=9 cover=45 #0 [307968ms] -> pread64(0xffffffffffffffff, 0x0, 0x0, 0x100000001) #0 [307968ms] <- pread64=0xffffffffffffffff errno=9 cover=46 15:10:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') ftruncate(r0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100000001) 2021/11/11 15:10:03 result hanged=false: [307987ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39690 #0 [307997ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [308002ms] <- perf_event_open=0x3 errno=14 cover=4207 #0 [308002ms] -> syz_open_procfs(0xffffffffffffffff, 0x200000c0) #0 [308003ms] <- syz_open_procfs=0x4 errno=14 cover=3971 #0 [308004ms] -> ftruncate(0x4, 0x0) #0 [308004ms] <- ftruncate=0x0 errno=14 cover=275 #0 [308004ms] -> ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) #0 [308004ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=9 cover=45 #0 [308004ms] -> pread64(0xffffffffffffffff, 0x0, 0x0, 0x100000001) #0 [308004ms] <- pread64=0xffffffffffffffff errno=9 cover=46 15:10:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') ftruncate(r0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100000001) 2021/11/11 15:10:03 result hanged=false: [308023ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39692 #0 [308032ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [308035ms] <- perf_event_open=0x3 errno=14 cover=4182 #0 [308035ms] -> syz_open_procfs(0xffffffffffffffff, 0x200000c0) #0 [308037ms] <- syz_open_procfs=0x4 errno=14 cover=12093 #0 [308038ms] -> ftruncate(0x4, 0x0) #0 [308038ms] <- ftruncate=0x0 errno=14 cover=449 #0 [308038ms] -> ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) #0 [308038ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=9 cover=74 #0 [308038ms] -> pread64(0xffffffffffffffff, 0x0, 0x0, 0x100000001) #0 [308039ms] <- pread64=0xffffffffffffffff errno=9 cover=75 2021/11/11 15:10:03 result hanged=false: 2021/11/11 15:10:03 added new input for call #1 syz_open_procfs to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') ftruncate(r0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100000001) 15:10:03 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000030c0)='mountinfo\x00') mount(0x0, &(0x7f0000000040)='./mnt\x00', 0x0, 0x20000, 0x0) preadv(r0, &(0x7f0000002400)=[{&(0x7f0000000140)=""/213, 0xd5}], 0x1, 0x7ff, 0x0) [308063ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39694 #0 [308071ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [308072ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12353 #0 [308073ms] -> mount(0x0, 0x20000280, 0x200002c0, 0x0, 0x0) #0 [308074ms] <- mount=0x0 errno=14 cover=4999 #0 [308074ms] -> syz_open_procfs(0xffffffffffffffff, 0x200030c0) #0 [308075ms] <- syz_open_procfs=0x3 errno=14 cover=4277 #0 [308075ms] -> mount(0x0, 0x20000040, 0x0, 0x20000, 0x0) #0 [308075ms] <- mount=0x0 errno=14 cover=720 #0 [308075ms] -> preadv(0x3, 0x20002400, 0x1, 0x7ff, 0x0) #0 [308076ms] <- preadv=0x0 errno=14 cover=20944 enabling collider #0 [308077ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [308077ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1366 #0 [308078ms] -> mount(0x0, 0x20000280, 0x200002c0, 0x0, 0x0) #0 [308079ms] <- mount=0xffffffffffffffff errno=16 cover=12729 pthread_create failed (errno 11) 2021/11/11 15:10:03 result hanged=false: 2021/11/11 15:10:03 #0: triaging type=7 15:10:03 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000030c0)='mountinfo\x00') mount(0x0, &(0x7f0000000040)='./mnt\x00', 0x0, 0x20000, 0x0) preadv(r0, &(0x7f0000002400)=[{&(0x7f0000000140)=""/213, 0xd5}], 0x1, 0x7ff, 0x0) 2021/11/11 15:10:03 triaging input for call #4 preadv (new signal=3) umount(./2364/mnt) [308133ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39796 #0 [308142ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [308147ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12460 #0 [308149ms] -> mount(0x0, 0x20000280, 0x200002c0, 0x0, 0x0) #0 [308150ms] <- mount=0x0 errno=14 cover=3290 #0 [308151ms] -> syz_open_procfs(0xffffffffffffffff, 0x200030c0) #0 [308153ms] <- syz_open_procfs=0x3 errno=14 cover=4282 #0 [308154ms] -> mount(0x0, 0x20000040, 0x0, 0x20000, 0x0) #0 [308154ms] <- mount=0x0 errno=14 cover=710 #0 [308155ms] -> preadv(0x3, 0x20002400, 0x1, 0x7ff, 0x0) #0 [308157ms] <- preadv=0x0 errno=14 cover=20936 2021/11/11 15:10:03 result hanged=false: 15:10:03 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000030c0)='mountinfo\x00') mount(0x0, &(0x7f0000000040)='./mnt\x00', 0x0, 0x20000, 0x0) preadv(r0, &(0x7f0000002400)=[{&(0x7f0000000140)=""/213, 0xd5}], 0x1, 0x7ff, 0x0) umount(./2365/mnt) [308185ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39798 #0 [308198ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [308199ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12389 #0 [308201ms] -> mount(0x0, 0x20000280, 0x200002c0, 0x0, 0x0) #0 [308201ms] <- mount=0x0 errno=14 cover=3222 #0 [308202ms] -> syz_open_procfs(0xffffffffffffffff, 0x200030c0) #0 [308202ms] <- syz_open_procfs=0x3 errno=14 cover=4219 #0 [308203ms] -> mount(0x0, 0x20000040, 0x0, 0x20000, 0x0) #0 [308203ms] <- mount=0x0 errno=14 cover=722 #0 [308203ms] -> preadv(0x3, 0x20002400, 0x1, 0x7ff, 0x0) #0 [308204ms] <- preadv=0x0 errno=14 cover=20958 15:10:03 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000030c0)='mountinfo\x00') mount(0x0, &(0x7f0000000040)='./mnt\x00', 0x0, 0x20000, 0x0) preadv(r0, &(0x7f0000002400)=[{&(0x7f0000000140)=""/213, 0xd5}], 0x1, 0x7ff, 0x0) 2021/11/11 15:10:03 result hanged=false: umount(./2366/mnt) [308231ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39800 #0 [308242ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [308244ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12753 #0 [308245ms] -> mount(0x0, 0x20000280, 0x200002c0, 0x0, 0x0) #0 [308246ms] <- mount=0x0 errno=14 cover=3364 #0 [308246ms] -> syz_open_procfs(0xffffffffffffffff, 0x200030c0) #0 [308247ms] <- syz_open_procfs=0x3 errno=14 cover=4251 #0 [308248ms] -> mount(0x0, 0x20000040, 0x0, 0x20000, 0x0) #0 [308248ms] <- mount=0x0 errno=14 cover=722 #0 [308248ms] -> preadv(0x3, 0x20002400, 0x1, 0x7ff, 0x0) #0 [308249ms] <- preadv=0x0 errno=14 cover=20894 2021/11/11 15:10:03 result hanged=false: 2021/11/11 15:10:03 added new input for call #4 preadv to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000030c0)='mountinfo\x00') mount(0x0, &(0x7f0000000040)='./mnt\x00', 0x0, 0x20000, 0x0) preadv(r0, &(0x7f0000002400)=[{&(0x7f0000000140)=""/213, 0xd5}], 0x1, 0x7ff, 0x0) umount(./2367/mnt) 15:10:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001240)={0x14}, 0x14}}, 0x0) [308281ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39802 #0 [308291ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [308294ms] <- socket$nl_netfilter=0x3 errno=14 cover=1375 #0 [308296ms] -> sendmsg$NFT_MSG_GETCHAIN(0x3, 0x20001340, 0x0) #0 [308297ms] <- sendmsg$NFT_MSG_GETCHAIN=0x14 errno=14 cover=1172 enabling collider #0 [308298ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [308298ms] <- socket$nl_netfilter=0x3 errno=14 cover=1424 2021/11/11 15:10:03 result hanged=false: 15:10:03 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000940)={&(0x7f0000000500)={0x2, 0x4e22, @empty}, 0x10, 0x0}, 0x4000080) [308321ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39804 #0 [308331ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [308334ms] <- socket$inet6_udp=0x3 errno=14 cover=1706 #0 [308336ms] -> sendmsg$inet(0x3, 0x20000940, 0x4000080) #0 [308338ms] <- sendmsg$inet=0x0 errno=14 cover=1322 enabling collider #0 [308339ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [308341ms] <- socket$inet6_udp=0x3 errno=14 cover=1742 2021/11/11 15:10:03 result hanged=false: 15:10:03 executing program 0: semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f00000001c0)=""/28) iptable filter/2: resetting iptable mangle/2: resetting [308367ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39806 #0 [308377ms] -> semctl$IPC_INFO(0x0, 0x0, 0x3, 0x200001c0) #0 [308380ms] <- semctl$IPC_INFO=0x0 errno=22 cover=809 enabling collider #0 [308382ms] -> semctl$IPC_INFO(0x0, 0x0, 0x3, 0x200001c0) #0 [308382ms] <- semctl$IPC_INFO=0x0 errno=22 cover=89 2021/11/11 15:10:03 result hanged=false: 15:10:03 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') setns(r0, 0x0) [308405ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39808 #0 [308416ms] -> syz_open_procfs$namespace(0x0, 0x20000000) #0 [308419ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=6458 #0 [308421ms] -> setns(0x3, 0x0) #0 [308423ms] <- setns=0x0 errno=14 cover=296 enabling collider #0 [308425ms] -> syz_open_procfs$namespace(0x0, 0x20000000) #0 [308426ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=5411 2021/11/11 15:10:03 result hanged=false: 15:10:03 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') setns(r0, 0x0) 2021/11/11 15:10:03 #0: triaging type=7 2021/11/11 15:10:03 triaging input for call #1 setns (new signal=2) [308449ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39810 #0 [308458ms] -> syz_open_procfs$namespace(0x0, 0x20000000) #0 [308459ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=6528 #0 [308460ms] -> setns(0x3, 0x0) #0 [308460ms] <- setns=0x0 errno=14 cover=335 2021/11/11 15:10:03 result hanged=false: 15:10:03 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') setns(r0, 0x0) [308480ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39812 #0 [308490ms] -> syz_open_procfs$namespace(0x0, 0x20000000) #0 [308491ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=6457 #0 [308492ms] -> setns(0x3, 0x0) #0 [308492ms] <- setns=0x0 errno=14 cover=296 15:10:03 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') setns(r0, 0x0) 2021/11/11 15:10:03 result hanged=false: [308514ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39814 #0 [308523ms] -> syz_open_procfs$namespace(0x0, 0x20000000) #0 [308525ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=6670 #0 [308526ms] -> setns(0x3, 0x0) #0 [308530ms] <- setns=0x0 errno=14 cover=296 2021/11/11 15:10:03 result hanged=false: 2021/11/11 15:10:03 added new input for call #1 setns to corpus: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') setns(r0, 0x0) 2021/11/11 15:10:03 #0: triaging type=7 2021/11/11 15:10:03 triaging input for call #0 syz_open_procfs$namespace (new signal=2) 15:10:03 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') setns(r0, 0x0) [308556ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39816 #0 [308567ms] -> syz_open_procfs$namespace(0x0, 0x20000000) #0 [308569ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=6468 #0 [308571ms] -> setns(0x3, 0x0) #0 [308571ms] <- setns=0x0 errno=14 cover=296 2021/11/11 15:10:03 result hanged=false: 15:10:03 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') setns(r0, 0x0) [308595ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39818 #0 [308607ms] -> syz_open_procfs$namespace(0x0, 0x20000000) #0 [308608ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=6492 #0 [308610ms] -> setns(0x3, 0x0) #0 [308610ms] <- setns=0x0 errno=14 cover=296 2021/11/11 15:10:03 result hanged=false: 15:10:03 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') setns(r0, 0x0) [308633ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39820 #0 [308643ms] -> syz_open_procfs$namespace(0x0, 0x20000000) #0 [308646ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=6699 #0 [308648ms] -> setns(0x3, 0x0) #0 [308650ms] <- setns=0x0 errno=14 cover=296 2021/11/11 15:10:03 result hanged=false: 2021/11/11 15:10:03 added new input for call #0 syz_open_procfs$namespace to corpus: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') setns(r0, 0x0) 15:10:04 executing program 0: r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x9553}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {}], 0x2) semtimedop(r0, &(0x7f0000000140)=[{0x0, 0x7fff}], 0x1, 0x0) [308685ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 15:10:04 poll: candidates=8 inputs=0 signal=0 spawned worker pid 39822 #0 [308697ms] -> semget$private(0x0, 0x6, 0x0) #0 [308697ms] <- semget$private=0x1 errno=14 cover=404 #0 [308698ms] -> semtimedop(0x1, 0x20000000, 0x1, 0x0) pthread_create failed (errno 11) 2021/11/11 15:10:05 result hanged=false: 15:10:05 executing program 0: msgget(0x2, 0x22a) r0 = msgget(0x2, 0x68c) msgrcv(r0, 0x0, 0x30, 0x0, 0x0) msgsnd(r0, &(0x7f00000001c0)={0x2}, 0x8, 0x0) [309760ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 39924 #0 [309771ms] -> msgget(0x798e2635, 0x22a) #0 [309774ms] <- msgget=0x7 errno=14 cover=2196 #0 [309774ms] -> msgget(0x798e2635, 0x68c) #0 [309774ms] <- msgget=0xffffffffffffffff errno=17 cover=65 #0 [309774ms] -> msgrcv(0x0, 0x0, 0x30, 0x0, 0x0) pthread_create failed (errno 11) 15:10:06 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x464e, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x0, 0x36e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)) syz_mount_image$nfs4(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000001800)=[{&(0x7f0000000600)="80", 0x1}, {0x0, 0x0, 0x3}, {&(0x7f00000007c0)="a5", 0x1, 0x1f}, {&(0x7f0000000800)="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", 0x1000, 0x100000001}], 0x5000, &(0x7f00000018c0)={[{'wpan4\x00'}, {'\x00'}]}) syz_genetlink_get_family_id$nl802154(&(0x7f0000001a40), 0xffffffffffffffff) 2021/11/11 15:10:06 result hanged=false: [310839ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 40026 #0 [310851ms] -> ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) #0 [310855ms] <- ioctl$sock_SIOCGIFINDEX_802154=0xffffffffffffffff errno=9 cover=45 #0 [310855ms] -> syz_io_uring_setup(0x464e, 0x200002c0, 0x20ffb000, 0x20ffc000, 0x20000340, 0x20000380) #0 [310858ms] <- syz_io_uring_setup=0x3 errno=14 cover=21518 #0 [310858ms] -> syz_mount_image$nfs4(0x20000580, 0x200005c0, 0x0, 0x4, 0x20001800, 0x5000, 0x200018c0) #0 [310859ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=2 cover=9998 #0 [310860ms] -> syz_genetlink_get_family_id$nl802154(0x20001a40, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [310861ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=7509 enabling collider #0 [310861ms] -> ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) #0 [310861ms] <- ioctl$sock_SIOCGIFINDEX_802154=0xffffffffffffffff errno=9 cover=45 #0 [310862ms] -> syz_io_uring_setup(0x464e, 0x200002c0, 0x20ffb000, 0x20ffc000, 0x20000340, 0x20000380) #0 [310866ms] <- syz_io_uring_setup=0x3 errno=14 cover=29066 pthread_create failed (errno 11) 15:10:06 executing program 0: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x2}]) 2021/11/11 15:10:06 result hanged=false: [310928ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 40128 #0 [310938ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000140, 0x1, 0x0) #0 [310941ms] <- openat$tcp_mem=0x3 errno=14 cover=1677 #0 [310941ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000080) #0 [310942ms] <- syz_open_procfs=0x4 errno=14 cover=4870 #0 [310942ms] -> io_setup(0x4, 0x20000040) #0 [310943ms] <- io_setup=0x0 errno=14 cover=3284 #0 [310943ms] -> io_submit(0x7fbccc6ac000, 0x1, 0x200006c0) #0 [310943ms] <- io_submit=0x1 errno=14 cover=1531 enabling collider #0 [310943ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000140, 0x1, 0x0) #0 [310944ms] <- openat$tcp_mem=0x3 errno=14 cover=1679 #0 [310944ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000080) #0 [310944ms] <- syz_open_procfs=0x4 errno=14 cover=2903 pthread_create failed (errno 11) 2021/11/11 15:10:06 result hanged=false: 15:10:06 executing program 0: r0 = io_uring_setup(0x3135, &(0x7f0000000200)) flock(r0, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) [311018ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 40230 #0 [311028ms] -> io_uring_setup(0x3135, 0x20000200) #0 [311033ms] <- io_uring_setup=0x3 errno=14 cover=12427 #0 [311035ms] -> flock(0x3, 0x6) #0 [311035ms] <- flock=0x0 errno=14 cover=405 #0 [311035ms] -> ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) #0 [311035ms] <- ioctl$ifreq_SIOCGIFINDEX_wireguard=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [311036ms] -> io_uring_setup(0x3135, 0x20000200) #0 [311038ms] <- io_uring_setup=0x3 errno=14 cover=3876 #0 [311039ms] -> flock(0x3, 0x6) #0 [311040ms] <- flock=0xffffffffffffffff errno=11 cover=448 pthread_create failed (errno 11) 15:10:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0xfffffffa}) 2021/11/11 15:10:06 result hanged=false: [311104ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 40332 #0 [311115ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [311119ms] <- perf_event_open=0x3 errno=14 cover=3923 #0 [311121ms] -> gettid() #0 [311121ms] <- gettid=0x9d8d errno=14 cover=48 #0 [311121ms] -> rt_sigqueueinfo(0x9d8d, 0x0, 0x20000340) #0 [311121ms] <- rt_sigqueueinfo=0x0 errno=14 cover=194 enabling collider #0 [311122ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [311123ms] <- perf_event_open=0x3 errno=14 cover=4149 #0 [311125ms] -> gettid() #0 [311125ms] <- gettid=0x9d8d errno=14 cover=48 pthread_create failed (errno 11) 2021/11/11 15:10:06 result hanged=false: 15:10:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="7f", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x200) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x8000000000000}) [311184ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 40434 #0 [311194ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [311195ms] <- openat=0x3 errno=14 cover=6711 #0 [311196ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [311196ms] <- open=0x4 errno=14 cover=6687 #0 [311196ms] -> writev(0x3, 0x20000480, 0x1) #0 [311197ms] <- writev=0x1 errno=14 cover=2949 #0 [311197ms] -> creat(0x20000040, 0x0) #0 [311197ms] <- creat=0x5 errno=14 cover=4957 #0 [311198ms] -> fallocate(0x5, 0x0, 0x0, 0x200) #0 [311198ms] <- fallocate=0x0 errno=14 cover=3942 #0 [311198ms] -> ioctl$EXT4_IOC_MOVE_EXT(0x3, 0xc028660f, 0x20000080) #0 [311198ms] <- ioctl$EXT4_IOC_MOVE_EXT=0xffffffffffffffff errno=22 cover=246 enabling collider #0 [311199ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [311199ms] <- openat=0xffffffffffffffff errno=17 cover=1024 #0 [311199ms] -> open(0x20000040, 0x1810c1, 0x0) #0 [311200ms] <- open=0xffffffffffffffff errno=17 cover=1067 pthread_create failed (errno 11) 15:10:06 executing program 0: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2021/11/11 15:10:06 result hanged=false: [311263ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 40536 #0 [311274ms] -> openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) #0 [311274ms] <- openat$sndtimer=0xffffffffffffffff errno=14 cover=626 #0 [311275ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [311278ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6277 enabling collider #0 [311279ms] -> openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) #0 [311279ms] <- openat$sndtimer=0xffffffffffffffff errno=14 cover=616 15:10:06 executing program 0: perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2021/11/11 15:10:06 result hanged=false: 2021/11/11 15:10:06 poll: candidates=8 inputs=0 signal=0 [311306ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 40538 #0 [311318ms] -> perf_event_open$cgroup(0x200001c0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [311331ms] <- perf_event_open$cgroup=0x3 errno=14 cover=142998 enabling collider #0 [311333ms] -> perf_event_open$cgroup(0x200001c0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [311333ms] <- perf_event_open$cgroup=0x3 errno=14 cover=2384 15:10:06 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000bc0)=0x7) 2021/11/11 15:10:06 result hanged=false: [311355ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 40540 #0 [311365ms] -> openat$urandom(0xffffffffffffff9c, 0x20000b80, 0x0, 0x0) #0 [311365ms] <- openat$urandom=0x3 errno=14 cover=1112 #0 [311367ms] -> ioctl$RNDADDTOENTCNT(0x3, 0x40045201, 0x20000bc0) #0 [311367ms] <- ioctl$RNDADDTOENTCNT=0x0 errno=14 cover=172 enabling collider #0 [311368ms] -> openat$urandom(0xffffffffffffff9c, 0x20000b80, 0x0, 0x0) #0 [311368ms] <- openat$urandom=0x3 errno=14 cover=1049 15:10:06 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000bc0)=0x7) 2021/11/11 15:10:06 result hanged=false: 2021/11/11 15:10:06 #0: triaging type=7 2021/11/11 15:10:06 triaging input for call #1 ioctl$RNDADDTOENTCNT (new signal=11) [311391ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 40542 #0 [311402ms] -> openat$urandom(0xffffffffffffff9c, 0x20000b80, 0x0, 0x0) #0 [311406ms] <- openat$urandom=0x3 errno=14 cover=1124 #0 [311406ms] -> ioctl$RNDADDTOENTCNT(0x3, 0x40045201, 0x20000bc0) #0 [311406ms] <- ioctl$RNDADDTOENTCNT=0x0 errno=14 cover=172 2021/11/11 15:10:06 result hanged=false: 15:10:06 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000bc0)=0x7) [311430ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 40544 #0 [311439ms] -> openat$urandom(0xffffffffffffff9c, 0x20000b80, 0x0, 0x0) #0 [311443ms] <- openat$urandom=0x3 errno=14 cover=1062 #0 [311444ms] -> ioctl$RNDADDTOENTCNT(0x3, 0x40045201, 0x20000bc0) #0 [311444ms] <- ioctl$RNDADDTOENTCNT=0x0 errno=14 cover=172 15:10:06 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000bc0)=0x7) 2021/11/11 15:10:06 result hanged=false: [311467ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 40546 #0 [311476ms] -> openat$urandom(0xffffffffffffff9c, 0x20000b80, 0x0, 0x0) #0 [311479ms] <- openat$urandom=0x3 errno=14 cover=1100 #0 [311480ms] -> ioctl$RNDADDTOENTCNT(0x3, 0x40045201, 0x20000bc0) #0 [311480ms] <- ioctl$RNDADDTOENTCNT=0x0 errno=14 cover=172 2021/11/11 15:10:06 result hanged=false: 2021/11/11 15:10:06 added new input for call #1 ioctl$RNDADDTOENTCNT to corpus: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000bc0)=0x7) 15:10:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x13, 0xa, 0x401}, 0x14}}, 0x0) [311507ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 40548 #0 [311517ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [311520ms] <- socket$nl_netfilter=0x3 errno=14 cover=1430 #0 [311520ms] -> sendmsg$NFT_MSG_GETOBJ(0x3, 0x20000240, 0x0) #0 [311535ms] <- sendmsg$NFT_MSG_GETOBJ=0x14 errno=14 cover=2387 enabling collider #0 [311536ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [311536ms] <- socket$nl_netfilter=0x3 errno=14 cover=1418 15:10:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001e00)="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", 0x649}], 0x1) 2021/11/11 15:10:06 result hanged=false: [311558ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 40550 #0 [311569ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [311570ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3469 #0 [311571ms] -> writev(0x3, 0x20000140, 0x1) #0 [311576ms] <- writev=0x649 errno=14 cover=111906 enabling collider #0 [311578ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [311579ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3468 15:10:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001e00)="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", 0x649}], 0x1) 2021/11/11 15:10:06 result hanged=false: 2021/11/11 15:10:06 #0: triaging type=7 2021/11/11 15:10:06 triaging input for call #1 writev (new signal=3) [311601ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 40552 #0 [311612ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [311613ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3437 #0 [311614ms] -> writev(0x3, 0x20000140, 0x1) #0 [311619ms] <- writev=0x649 errno=14 cover=109947 15:10:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001e00)="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", 0x649}], 0x1) 2021/11/11 15:10:06 result hanged=false: [311649ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 40554 #0 [311658ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [311663ms] <- syz_open_dev$tty20=0x3 errno=14 cover=22169 #0 [311666ms] -> writev(0x3, 0x20000140, 0x1) #0 [311671ms] <- writev=0x649 errno=14 cover=110049 2021/11/11 15:10:07 result hanged=false: 15:10:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001e00)="6996fcc2ddca62abfcb6228943cabefd47e4b53f2fe6471db8efa57f545e09cc36c05fd26ecd5af3169017d9d634f225c2f6c79bc5ce281ad496e70feb4ce459cdfb8a323c9303471609ed1370c49bbce88c8fc9985b14e5b6ee7bc8dfaa6cc9a8509b19374d0ff9ae85820734e42c1729430e2518b6d11070cf1b10e6d66329d185db408cdd10272750eafb51a16a14e81f357fa3c7968848cfaa76a12dd164153dbf1b51d993fb00993042e71c7fdce25df06cc4fd97751c292939131bb2e412c4664dec353d0dcacf741ad76141634ee47580b26c06535647f6eed5f1806dc98c34a3f64974b3ff87cd5c8e71de04009379c1cc558e03db30eb737fe27c6ea508d293e3c984fbb92c766c1523b0a6ccf050e98c64f2fd56f8cf12c8f70909cf409152169267a1eb80fac50431c1f3143f598eb0649926c8200cd2f45b7dbec2a973b62b6e56abff8db06c4f45c21695f5f7b0fab158dde3fa40ba23d9a6a3ff6196d71933a4528e43579eaf8076f30198a48096a23bf3d6481ad6cae494871fd22010b01ad7c29052ceceee448938335029e0193e0f811761febc45d38aac89759f1451618b50c6fce34e4dd57a2cde24a2b6b7e789ceca267fd7d73d150e19a4b5f4365e9b9b56ebb7a0769d6ceaabbf5083dd00a4c5a1001e28839fd86ae97b52655a372ac8037ad55c700d4dda4a595edf840215f209d1a2906957460ccedfbb17839bacd2295c6b06cfc63e0e0ed6411a00dd7e173d68061642793125a41c7875d0d1878201cd05d05ac9766ea6f0e7bad6ce915a51c61473740d26378c53a937de0c1dcb37fcee49b59583300b884192cb0c272470b7d3c46455d92bac91b7d57b5d5d559406838384e2d7ed88b5a0c6bd60505d4133c3acfcb84cacb4606a124ef0965284ee21f10bbc09567de66de5dfd835ab587862b91ad29e5634be8365731c85268a05746e81ac8f7339183f38706646413f42c4c2f9ba9f237d793dda03c7e138544d2eb4bb04543e5227caceab086e0c6a72fc9e76d9c63d6f87ffdc61ed28cc158cfb6fcaeeb4c1891ffbf52df0c07298adf1768a417263180974b0b917fd168b391489ace933296abf4b7f141b10c9fc52957f2181ab50d374242e503deb48e6b282dd7884dd7f0a199c2be1d725ddc9f8bbdac1db3740fadb94de044a8191e21e22a2e4521227ca0615758c6d0ff8fc23706d2c32032839de1c255c4f07e150e624e9e714fca61bfd7a44396d5bb34d64184b7b8deba62e1908b75825013bdd3cf9c7debeab61eb0def1b76e8165f7391c0164d887bcc00f19d98543684343809e4b1ffdce8334c2b6f7d17cbfa6921cbbf984827508fd4d0ef586b15b8d58596e073426faea0bb21fad47d3fbbb7806f24f8984f8b741072387ae982caff5e3840eae20012fa8d9867191b716e402d14494043559b3d3629344d56b840866e7bfc3f4c056e5187bbc02c9742e6c83d0b10ebc6c2f84cce20b482deb0b667b4b3f20c1c8e6b570f23f8022ff5028c4804db067d51eec6fb5c7ef6620ba028589e542ce80eb6819958ba18e01a3d8a6384af8cf92b5fe006861d98103940395467293f346a4111ff7bf81c02da66454957fd66621939a1c294724b15c1f05d8153347315f1fb929716d4de85ea7f5302f1af6dd404f638b59544ce2793b34e5c61da76abd0b98655418368a57b5af5eb0ccd4807d90795c40400eadb74218f70a44f437a1f15d8457496adb9bb72fa084843dd2c8f1c6200263349c513913fa6a2602fb5a2a6085a7e5818521e2e2377c1f25bbc805747b811fedb35a197f945a282caedd2c8d4567661a4b49df97fc8323df5f9eb28ebcbc596c3f3787b3a166bbfccef1b004a7498ee5f8a4dbc21d9b15269e6e2ccdbde0f005aef58c118184474a5f4311278e5f752abe7237e38d54a15df6e5b72ce8b0e097430de30c9c3780d5b752d55c9a0510532b421033c8be9e74bc0dfba148624a9495aed224df7cb3476ea3f9844ba5fbf54223b9eba553d2df54f4c32f56d2bf4d929067c6171249494c0e72bc03eca0bd13b378bb071cccf06a8aff9f2647166e0b8ac5cabdc10f6b55c037f23923e48395736286ff389f0cad166c644f24d2cefd2bbf74f37010f219bd8f0086ff041a931db7304d066b8adb8306ea6f9f717ac4ed753672d5b72f237a5b3a372278e16a6300bb8c5043acbf23d629ca445cecdb96c727f16a8a68065a78ce30dc5991303ae30fcaa3a63571c7b8f11bcad13d8e2554c1b5a", 0x649}], 0x1) [311701ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 40556 #0 [311711ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [311712ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3465 #0 [311713ms] -> writev(0x3, 0x20000140, 0x1) #0 [311718ms] <- writev=0x649 errno=14 cover=114822 2021/11/11 15:10:07 result hanged=false: 2021/11/11 15:10:07 added new input for call #1 writev to corpus: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001e00)="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", 0x649}], 0x1) 15:10:07 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)}], 0x1, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000140)={0x0}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvfrom$inet6(r0, &(0x7f0000000700)=""/4096, 0xe34e, 0xcd08, 0x0, 0x6b4) [311754ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 40558 #0 [311763ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [311767ms] <- perf_event_open=0x3 errno=14 cover=4193 #0 [311768ms] -> openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) #0 [311768ms] <- openat=0xffffffffffffffff errno=14 cover=1142 #0 [311769ms] -> syz_open_procfs(0xffffffffffffffff, 0x0) #0 [311771ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=17932 #0 [311773ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [311773ms] <- socket$inet6_tcp=0x4 errno=14 cover=5180 #0 [311774ms] -> setsockopt$inet6_tcp_int(0x4, 0x6, 0x2, 0x20000080, 0x4) #0 [311775ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=287 #0 [311775ms] -> pipe(0x0) #0 [311777ms] <- pipe=0xffffffffffffffff errno=14 cover=8794 #0 [311777ms] -> vmsplice(0xffffffffffffffff, 0x20000480, 0x1, 0x0) #0 [311777ms] <- vmsplice=0xffffffffffffffff errno=9 cover=76 #0 [311777ms] -> ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x20000140) #0 [311778ms] <- ioctl$INCFS_IOC_GET_FILLED_BLOCKS=0xffffffffffffffff errno=9 cover=74 #0 [311778ms] -> bind$inet6(0x4, 0x200000c0, 0x1c) #0 [311779ms] <- bind$inet6=0x0 errno=14 cover=1080 #0 [311780ms] -> connect$inet6(0x4, 0x20000000, 0x1c) #0 [311782ms] <- connect$inet6=0x0 errno=14 cover=8522 #0 [311782ms] -> setsockopt$sock_int(0x4, 0x1, 0x8, 0x20002ec0, 0x4) #0 [311783ms] <- setsockopt$sock_int=0x0 errno=14 cover=136 #0 [311783ms] -> sendmsg$inet6(0x4, 0x200006c0, 0x10044001) pthread_create failed (errno 11) 2021/11/11 15:10:08 result hanged=false: 2021/11/11 15:10:08 #0: triaging type=7 2021/11/11 15:10:08 triaging input for call #9 connect$inet6 (new signal=3) 15:10:08 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)}], 0x1, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000140)={0x0}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvfrom$inet6(r0, &(0x7f0000000700)=""/4096, 0xe34e, 0xcd08, 0x0, 0x6b4) iptable filter/10: resetting iptable mangle/10: resetting [312858ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 40660 #0 [312868ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [312870ms] <- perf_event_open=0x3 errno=14 cover=3945 #0 [312871ms] -> openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) #0 [312871ms] <- openat=0xffffffffffffffff errno=14 cover=630 #0 [312871ms] -> syz_open_procfs(0xffffffffffffffff, 0x0) #0 [312872ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=6321 #0 [312874ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [312875ms] <- socket$inet6_tcp=0x4 errno=14 cover=1801 #0 [312875ms] -> setsockopt$inet6_tcp_int(0x4, 0x6, 0x2, 0x20000080, 0x4) #0 [312875ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=142 #0 [312876ms] -> pipe(0x0) #0 [312876ms] <- pipe=0xffffffffffffffff errno=14 cover=2697 #0 [312876ms] -> vmsplice(0xffffffffffffffff, 0x20000480, 0x1, 0x0) #0 [312877ms] <- vmsplice=0xffffffffffffffff errno=9 cover=47 #0 [312877ms] -> ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x20000140) #0 [312877ms] <- ioctl$INCFS_IOC_GET_FILLED_BLOCKS=0xffffffffffffffff errno=9 cover=45 #0 [312877ms] -> bind$inet6(0x4, 0x200000c0, 0x1c) #0 [312877ms] <- bind$inet6=0x0 errno=14 cover=421 #0 [312877ms] -> connect$inet6(0x4, 0x20000000, 0x1c) #0 [312878ms] <- connect$inet6=0x0 errno=14 cover=5142 #0 [312878ms] -> setsockopt$sock_int(0x4, 0x1, 0x8, 0x20002ec0, 0x4) #0 [312879ms] <- setsockopt$sock_int=0x0 errno=14 cover=136 #0 [312879ms] -> sendmsg$inet6(0x4, 0x200006c0, 0x10044001) pthread_create failed (errno 11) 2021/11/11 15:10:09 result hanged=false: 15:10:09 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)}], 0x1, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000140)={0x0}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvfrom$inet6(r0, &(0x7f0000000700)=""/4096, 0xe34e, 0xcd08, 0x0, 0x6b4) iptable filter/10: resetting iptable mangle/10: resetting [313947ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 40762 #0 [313958ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [313964ms] <- perf_event_open=0x3 errno=14 cover=4182 #0 [313965ms] -> openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) #0 [313965ms] <- openat=0xffffffffffffffff errno=14 cover=619 #0 [313965ms] -> syz_open_procfs(0xffffffffffffffff, 0x0) #0 [313966ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=6325 #0 [313967ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [313967ms] <- socket$inet6_tcp=0x4 errno=14 cover=1744 #0 [313967ms] -> setsockopt$inet6_tcp_int(0x4, 0x6, 0x2, 0x20000080, 0x4) #0 [313967ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=142 #0 [313968ms] -> pipe(0x0) #0 [313968ms] <- pipe=0xffffffffffffffff errno=14 cover=2605 #0 [313968ms] -> vmsplice(0xffffffffffffffff, 0x20000480, 0x1, 0x0) #0 [313968ms] <- vmsplice=0xffffffffffffffff errno=9 cover=47 #0 [313968ms] -> ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x20000140) #0 [313969ms] <- ioctl$INCFS_IOC_GET_FILLED_BLOCKS=0xffffffffffffffff errno=9 cover=45 #0 [313969ms] -> bind$inet6(0x4, 0x200000c0, 0x1c) #0 [313969ms] <- bind$inet6=0x0 errno=14 cover=421 #0 [313969ms] -> connect$inet6(0x4, 0x20000000, 0x1c) #0 [313969ms] <- connect$inet6=0x0 errno=14 cover=5129 #0 [313970ms] -> setsockopt$sock_int(0x4, 0x1, 0x8, 0x20002ec0, 0x4) #0 [313970ms] <- setsockopt$sock_int=0x0 errno=14 cover=136 #0 [313970ms] -> sendmsg$inet6(0x4, 0x200006c0, 0x10044001) 2021/11/11 15:10:10 poll: candidates=0 inputs=0 signal=0 pthread_create failed (errno 11) 2021/11/11 15:10:10 result hanged=false: 15:10:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)}], 0x1, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000140)={0x0}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvfrom$inet6(r0, &(0x7f0000000700)=""/4096, 0xe34e, 0xcd08, 0x0, 0x6b4) iptable filter/10: resetting iptable mangle/10: resetting [315044ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 40864 #0 [315054ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [315059ms] <- perf_event_open=0x3 errno=14 cover=3945 #0 [315060ms] -> openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) #0 [315060ms] <- openat=0xffffffffffffffff errno=14 cover=618 #0 [315060ms] -> syz_open_procfs(0xffffffffffffffff, 0x0) #0 [315061ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=6258 #0 [315062ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [315062ms] <- socket$inet6_tcp=0x4 errno=14 cover=1689 #0 [315062ms] -> setsockopt$inet6_tcp_int(0x4, 0x6, 0x2, 0x20000080, 0x4) #0 [315062ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=142 #0 [315063ms] -> pipe(0x0) #0 [315063ms] <- pipe=0xffffffffffffffff errno=14 cover=2486 #0 [315063ms] -> vmsplice(0xffffffffffffffff, 0x20000480, 0x1, 0x0) #0 [315063ms] <- vmsplice=0xffffffffffffffff errno=9 cover=47 #0 [315064ms] -> ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x20000140) #0 [315064ms] <- ioctl$INCFS_IOC_GET_FILLED_BLOCKS=0xffffffffffffffff errno=9 cover=45 #0 [315064ms] -> bind$inet6(0x4, 0x200000c0, 0x1c) #0 [315064ms] <- bind$inet6=0x0 errno=14 cover=421 #0 [315064ms] -> connect$inet6(0x4, 0x20000000, 0x1c) #0 [315065ms] <- connect$inet6=0x0 errno=14 cover=5079 #0 [315066ms] -> setsockopt$sock_int(0x4, 0x1, 0x8, 0x20002ec0, 0x4) #0 [315066ms] <- setsockopt$sock_int=0x0 errno=14 cover=136 #0 [315066ms] -> sendmsg$inet6(0x4, 0x200006c0, 0x10044001) pthread_create failed (errno 11) 2021/11/11 15:10:11 result hanged=false: 2021/11/11 15:10:11 added new input for call #9 connect$inet6 to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)}], 0x1, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000140)={0x0}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvfrom$inet6(r0, &(0x7f0000000700)=""/4096, 0xe34e, 0xcd08, 0x0, 0x6b4) iptable filter/10: resetting iptable mangle/10: resetting 15:10:11 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)}], 0x1, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000140)={0x0}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvfrom$inet6(r0, &(0x7f0000000700)=""/4096, 0xe34e, 0xcd08, 0x0, 0x6b4) 2021/11/11 15:10:11 #0: triaging type=7 2021/11/11 15:10:11 triaging input for call #5 pipe (new signal=1) [316144ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 40966 #0 [316153ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [316153ms] <- perf_event_open=0x3 errno=14 cover=3945 #0 [316154ms] -> openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) #0 [316154ms] <- openat=0xffffffffffffffff errno=14 cover=620 #0 [316154ms] -> syz_open_procfs(0xffffffffffffffff, 0x0) #0 [316155ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=6392 #0 [316156ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [316157ms] <- socket$inet6_tcp=0x4 errno=14 cover=5426 #0 [316159ms] -> setsockopt$inet6_tcp_int(0x4, 0x6, 0x2, 0x20000080, 0x4) #0 [316159ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=287 #0 [316160ms] -> pipe(0x0) #0 [316160ms] <- pipe=0xffffffffffffffff errno=14 cover=2669 #0 [316161ms] -> vmsplice(0xffffffffffffffff, 0x20000480, 0x1, 0x0) #0 [316161ms] <- vmsplice=0xffffffffffffffff errno=9 cover=47 #0 [316161ms] -> ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x20000140) #0 [316161ms] <- ioctl$INCFS_IOC_GET_FILLED_BLOCKS=0xffffffffffffffff errno=9 cover=45 #0 [316161ms] -> bind$inet6(0x4, 0x200000c0, 0x1c) #0 [316161ms] <- bind$inet6=0x0 errno=14 cover=421 #0 [316161ms] -> connect$inet6(0x4, 0x20000000, 0x1c) #0 [316162ms] <- connect$inet6=0x0 errno=14 cover=5180 #0 [316163ms] -> setsockopt$sock_int(0x4, 0x1, 0x8, 0x20002ec0, 0x4) #0 [316163ms] <- setsockopt$sock_int=0x0 errno=14 cover=136 #0 [316163ms] -> sendmsg$inet6(0x4, 0x200006c0, 0x10044001) pthread_create failed (errno 11) 15:10:12 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)}], 0x1, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000140)={0x0}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvfrom$inet6(r0, &(0x7f0000000700)=""/4096, 0xe34e, 0xcd08, 0x0, 0x6b4) 2021/11/11 15:10:12 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [317234ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 41068 #0 [317244ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [317247ms] <- perf_event_open=0x3 errno=14 cover=3984 #0 [317248ms] -> openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) #0 [317248ms] <- openat=0xffffffffffffffff errno=14 cover=630 #0 [317248ms] -> syz_open_procfs(0xffffffffffffffff, 0x0) #0 [317249ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=6308 #0 [317250ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [317250ms] <- socket$inet6_tcp=0x4 errno=14 cover=1750 #0 [317251ms] -> setsockopt$inet6_tcp_int(0x4, 0x6, 0x2, 0x20000080, 0x4) #0 [317251ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=142 #0 [317251ms] -> pipe(0x0) #0 [317252ms] <- pipe=0xffffffffffffffff errno=14 cover=2647 #0 [317252ms] -> vmsplice(0xffffffffffffffff, 0x20000480, 0x1, 0x0) #0 [317252ms] <- vmsplice=0xffffffffffffffff errno=9 cover=47 #0 [317252ms] -> ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x20000140) #0 [317252ms] <- ioctl$INCFS_IOC_GET_FILLED_BLOCKS=0xffffffffffffffff errno=9 cover=45 #0 [317253ms] -> bind$inet6(0x4, 0x200000c0, 0x1c) #0 [317253ms] <- bind$inet6=0x0 errno=14 cover=421 #0 [317253ms] -> connect$inet6(0x4, 0x20000000, 0x1c) #0 [317254ms] <- connect$inet6=0x0 errno=14 cover=5129 #0 [317254ms] -> setsockopt$sock_int(0x4, 0x1, 0x8, 0x20002ec0, 0x4) #0 [317254ms] <- setsockopt$sock_int=0x0 errno=14 cover=136 #0 [317255ms] -> sendmsg$inet6(0x4, 0x200006c0, 0x10044001) pthread_create failed (errno 11) 15:10:13 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)}], 0x1, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000140)={0x0}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvfrom$inet6(r0, &(0x7f0000000700)=""/4096, 0xe34e, 0xcd08, 0x0, 0x6b4) 2021/11/11 15:10:13 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [318325ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 41170 #0 [318335ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [318336ms] <- perf_event_open=0x3 errno=14 cover=3945 #0 [318337ms] -> openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) #0 [318337ms] <- openat=0xffffffffffffffff errno=14 cover=619 #0 [318337ms] -> syz_open_procfs(0xffffffffffffffff, 0x0) #0 [318338ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=6311 #0 [318339ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [318339ms] <- socket$inet6_tcp=0x4 errno=14 cover=1722 #0 [318339ms] -> setsockopt$inet6_tcp_int(0x4, 0x6, 0x2, 0x20000080, 0x4) #0 [318339ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=142 #0 [318340ms] -> pipe(0x0) #0 [318340ms] <- pipe=0xffffffffffffffff errno=14 cover=2583 #0 [318340ms] -> vmsplice(0xffffffffffffffff, 0x20000480, 0x1, 0x0) #0 [318341ms] <- vmsplice=0xffffffffffffffff errno=9 cover=47 #0 [318341ms] -> ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x20000140) #0 [318341ms] <- ioctl$INCFS_IOC_GET_FILLED_BLOCKS=0xffffffffffffffff errno=9 cover=45 #0 [318341ms] -> bind$inet6(0x4, 0x200000c0, 0x1c) #0 [318341ms] <- bind$inet6=0x0 errno=14 cover=421 #0 [318341ms] -> connect$inet6(0x4, 0x20000000, 0x1c) #0 [318342ms] <- connect$inet6=0x0 errno=14 cover=5115 #0 [318343ms] -> setsockopt$sock_int(0x4, 0x1, 0x8, 0x20002ec0, 0x4) #0 [318343ms] <- setsockopt$sock_int=0x0 errno=14 cover=136 #0 [318343ms] -> sendmsg$inet6(0x4, 0x200006c0, 0x10044001) pthread_create failed (errno 11) 2021/11/11 15:10:14 result hanged=false: 2021/11/11 15:10:14 added new input for call #5 pipe to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)}], 0x1, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000140)={0x0}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvfrom$inet6(r0, &(0x7f0000000700)=""/4096, 0xe34e, 0xcd08, 0x0, 0x6b4) iptable filter/10: resetting 15:10:14 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0xff}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000180)) iptable mangle/10: resetting [319418ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 41272 #0 [319428ms] -> creat(0x20000040, 0x0) #0 [319430ms] <- creat=0x3 errno=14 cover=6700 #0 [319432ms] -> creat(0x20000040, 0x0) #0 [319435ms] <- creat=0x4 errno=14 cover=4943 #0 [319436ms] -> ioctl$FS_IOC_FSSETXATTR(0x3, 0x40086602, 0x20000000) #0 [319441ms] <- ioctl$FS_IOC_FSSETXATTR=0x0 errno=14 cover=1769 #0 [319441ms] -> ioctl$FS_IOC_FSGETXATTR(0x4, 0x801c581f, 0x20000180) #0 [319442ms] <- ioctl$FS_IOC_FSGETXATTR=0x0 errno=14 cover=139 enabling collider #0 [319442ms] -> creat(0x20000040, 0x0) #0 [319442ms] <- creat=0xffffffffffffffff errno=1 cover=1049 #0 [319443ms] -> creat(0x20000040, 0x0) #0 [319443ms] <- creat=0xffffffffffffffff errno=1 cover=1048 pthread_create failed (errno 11) 15:10:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r2, 0xdb384ad01d69f261, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0x2}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:ld_so_t:s0\x00'}]}, 0x48}}, 0x0) 2021/11/11 15:10:14 result hanged=false: reset FS_XFLAG_IMMUTABLE [319510ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 41374 #0 [319519ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [319521ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6405 #0 [319522ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [319523ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5410 #0 [319523ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000200, 0x5) syz_genetlink_get_family_id(NLBL_UNLBL, 5) #0 [319525ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4643 #0 [319525ms] -> sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0x4, 0x20000100, 0x0) #0 [319526ms] <- sendmsg$NLBL_UNLABEL_C_STATICADDDEF=0x48 errno=14 cover=6892 enabling collider #0 [319527ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 389.441480] audit: type=1400 audit(1636643414.856:196): avc: denied { ingress } for pid=43045 comm="syz-executor.0" saddr=10.0.2.2 src=46200 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:object_r:ld_so_t:s0 tcontext=system_u:object_r:netif_t:s0 tclass=netif permissive=1 #0 [319532ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5445 #0 [319533ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 389.447233] audit: type=1400 audit(1636643414.857:197): avc: denied { recvfrom } for pid=43045 comm="syz-executor.0" saddr=10.0.2.2 src=46200 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:object_r:ld_so_t:s0 tcontext=system_u:object_r:node_t:s0 tclass=node permissive=1 #0 [319536ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5754 [ 389.453549] audit: type=1400 audit(1636643414.857:198): avc: denied { recv } for pid=43045 comm="syz-executor.0" saddr=10.0.2.2 src=46200 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:ld_so_t:s0 tclass=peer permissive=1 pthread_create failed (errno 11) 15:10:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r2, 0xdb384ad01d69f261, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0x2}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:ld_so_t:s0\x00'}]}, 0x48}}, 0x0) 2021/11/11 15:10:14 result hanged=false: 2021/11/11 15:10:14 #0: triaging type=7 2021/11/11 15:10:14 triaging input for call #3 sendmsg$NLBL_UNLABEL_C_STATICADDDEF (new signal=31) [319591ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 41476 #0 [319600ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [319603ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6252 #0 [319606ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [319607ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5452 #0 [319608ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000200, 0x5) syz_genetlink_get_family_id(NLBL_UNLBL, 5) #0 [319609ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4659 #0 [319611ms] -> sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0x4, 0x20000100, 0x0) #0 [319611ms] <- sendmsg$NLBL_UNLABEL_C_STATICADDDEF=0x48 errno=14 cover=3056 15:10:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r2, 0xdb384ad01d69f261, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0x2}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:ld_so_t:s0\x00'}]}, 0x48}}, 0x0) 2021/11/11 15:10:14 result hanged=false: [319631ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 41478 #0 [319640ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [319641ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6335 #0 [319642ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [319643ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5502 #0 [319643ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000200, 0x5) syz_genetlink_get_family_id(NLBL_UNLBL, 5) #0 [319644ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=5242 #0 [319645ms] -> sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0x4, 0x20000100, 0x0) #0 [319646ms] <- sendmsg$NLBL_UNLABEL_C_STATICADDDEF=0x48 errno=14 cover=2432 15:10:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r2, 0xdb384ad01d69f261, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0x2}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:ld_so_t:s0\x00'}]}, 0x48}}, 0x0) 2021/11/11 15:10:14 result hanged=false: [319666ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 41480 #0 [319675ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [319679ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6266 #0 [319681ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [319684ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5488 #0 [319686ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000200, 0x5) syz_genetlink_get_family_id(NLBL_UNLBL, 5) #0 [319688ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4631 #0 [319689ms] -> sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0x4, 0x20000100, 0x0) #0 [319690ms] <- sendmsg$NLBL_UNLABEL_C_STATICADDDEF=0x48 errno=14 cover=2425 2021/11/11 15:10:15 result hanged=false: 2021/11/11 15:10:15 added new input for call #3 sendmsg$NLBL_UNLABEL_C_STATICADDDEF to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r2, 0xdb384ad01d69f261, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0x2}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:ld_so_t:s0\x00'}]}, 0x48}}, 0x0) 2021/11/11 15:13:22 Manager.Poll call failed: read tcp 127.0.0.1:55896->127.0.0.1:33521: i/o timeout 2021/11/11 15:13:22 Manager.NewInput call failed: read tcp 127.0.0.1:55896->127.0.0.1:33521: i/o timeout SYZFAIL: control pipe read failed (errno 2: No such file or directory) debug1: client_input_channel_req: channel 0 rtype exit-status reply 0 debug1: channel 0: free: client-session, nchannels 2 VM DIAGNOSIS: 15:13:22 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81459948 RDX=ffff88800c460000 RSI=ffffffff81459951 RDI=0000000000000005 RBP=ffffffff83da3514 RSP=ffff88800c46f098 R8 =0000000000000000 R9 =ffffffff84ea39a3 R10=0000000000000000 R11=0000000000000001 R12=ffff888036677b00 R13=ffff888036677488 R14=ffff888007c418c0 R15=ffff888030f00900 RIP=ffffffff813f6314 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555556792c58 CR3=000000001e05c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 799dd1ef565821d7 6e00621a5070ae41 YMM02=0000000000000000 0000000000000000 6cde4ef22ce07297 56ea8ceb7230b54c YMM03=0000000000000000 0000000000000000 b085b45dd7453031 54c9c73cc4f8ce50 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0d0c0f0e09080b0a 0504070601000302 YMM07=0000000000000000 0000000000000000 0e0d0c0f0a09080b 0605040702010003 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=1ffffffff0ceb641 RBX=ffffffff86582430 RCX=ffffffff8675b208 RDX=ffffffff86582430 RSI=00000000000000b8 RDI=ffffffff860cee28 RBP=ffff888030b276d0 RSP=ffff888030b275e8 R8 =0000000000000030 R9 =1ffffffff0c19dc5 R10=fffffbfff0ca84c6 R11=0000000000000001 R12=ffffffff8675b288 R13=0000000000000030 R14=dffffc0000000000 R15=ffffffff8675b278 RIP=ffffffff81257d87 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 ffff888000000000 00000000 00000000 TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000003c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5f0d612000 CR3=000000001e05c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 a0cd772df7800dcf 7097bfa1b66d976e YMM02=0000000000000000 0000000000000000 bc64d2197f828e92 815514cd53240d86 YMM03=0000000000000000 0000000000000000 6d1b56f06fb79939 a71455646f16defd YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0d0c0f0e09080b0a 0504070601000302 YMM07=0000000000000000 0000000000000000 0e0d0c0f0a09080b 0605040702010003 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000